API tools faq
paste
Advertisement
OmegaPaladin

Selection of Error Log

OmegaPaladin
Mar 5th, 2021
197
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 12.97 KB | None | 0 0
raw download clone embed print report
  1. [Fri Mar 05 16:44:31.243991 2021] [:error] [pid 32070:tid 129807834949376] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:m[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*q[\\"\\\\^]*l(?:[\\"\\\\^]*(?:d[\\"\\\\^]*u[\\"\\\\^]*m[\\"\\\\^]*p(?:[\\"\\\\^]*s[\\"\\\\^ ..." at ARGS:text. [file "/dh/apache2/template/etc/mod_sec3_CRS/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [id "932110"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: \\x0d\\x0aCopy found within ARGS:text: = Oron Zai Expanse =\\x0d\\x0a*Medieval Engineers Planet\\x0d\\x0a**Triton - Icy, snowy moon\\x0d\\x0a*Kyth - The Planet designated as EHD-1, or more commonly known as Kyth, is a scorched desert world.\\x0d\\x0a*Frozen Paradise - Paradise used to orbit a large gas giant, but recent unknown events have shifted its orbit beyond the gas giant and into its own orbit around the sun. Due to not being as close to the sun as before, the entire planet entered a planet wi..."] [severity "CRITICAL"] [ver "OWA [hostname "swiki.fancruft.com"] [uri "/api.php"] [unique_id "YELQb4voKGuajcn5ebCRJQAAAA0"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
  2. [Fri Mar 05 16:44:31.248961 2021] [:error] [pid 32070:tid 129807834949376] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:text. [file "/dh/apache2/template/etc/mod_sec3_CRS/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: >(dx11) found within ARGS:text: = oron zai expanse = *medieval engineers planet **triton - icy snowy moon *kyth - the planet designated as ehd-1 or more commonly known as kyth is a scorched desert world. *frozen paradise - paradise used to orbit a large gas giant but recent unknown events have shifted its orbit beyond the gas giant and into its own orbit around the sun. due to not being as close to the sun as before the entire planet entered a planet wide ice age freezing all the ocean into..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/88"] [tag "PCI/6.5.2"] [hostname "swiki.fancruft.com"] [uri "/api.php"] [unique_id "YELQb4voKGuajcn5ebCRJQAAAA0"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
  3. [Fri Mar 05 16:44:31.249783 2021] [:error] [pid 32070:tid 129807834949376] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Rule 760f599974e0 [id "932140"][file "/dh/apache2/template/etc/mod_sec3_CRS/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "413"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "swiki.fancruft.com"] [uri "/api.php"] [unique_id "YELQb4voKGuajcn5ebCRJQAAAA0"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
  4. [Fri Mar 05 16:44:31.271538 2021] [:error] [pid 32070:tid 129807834949376] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Warning. Pattern match "(?i:\\\\b(?:(?:m(?:s(?:ys(?:ac(?:cess(?:objects|storage|xml)|es)|(?:relationship|object|querie)s|modules2?)|db)|aster\\\\.\\\\.sysdatabases|ysql\\\\.db)|pg_(?:catalog|toast)|information_schema|northwind|tempdb)\\\\b|s(?:(?:ys(?:\\\\.database_name|aux)|qlite(?:_tem ..." at ARGS:text. [file "/dh/apache2/template/etc/mod_sec3_CRS/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "99"] [id "942140"] [msg "SQL Injection Attack: Common DB Names Detected"] [data "Matched Data: NorthWind found within ARGS:text: = Oron Zai Expanse =\\x0d\\x0a*Medieval Engineers Planet\\x0d\\x0a**Triton - Icy, snowy moon\\x0d\\x0a*Kyth - The Planet designated as EHD-1, or more commonly known as Kyth, is a scorched desert world.\\x0d\\x0a*Frozen Paradise - Paradise used to orbit a large gas giant, but recent unknown events have shifted its orbit beyond the gas giant and into its own orbit around the sun. Due to not being as close to the sun as before, the entire planet entered a planet wide ..."] [severity "CRITICAL"] [ver "OWASP_CR [hostname "swiki.fancruft.com"] [uri "/api.php"] [unique_id "YELQb4voKGuajcn5ebCRJQAAAA0"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
  5. [Fri Mar 05 16:44:31.286742 2021] [:error] [pid 32070:tid 129807834949376] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Rule 760f5ab29168 [id "942250"][file "/dh/apache2/template/etc/mod_sec3_CRS/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "292"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "swiki.fancruft.com"] [uri "/api.php"] [unique_id "YELQb4voKGuajcn5ebCRJQAAAA0"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
  6. [Fri Mar 05 16:44:31.315793 2021] [:error] [pid 32070:tid 129807834949376] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Access denied with code 418 (phase 2). Operator GE matched 7 at TX:anomaly_score. [file "/dh/apache2/template/etc/mod_sec3_CRS/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "150"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swiki.fancruft.com"] [uri "/api.php"] [unique_id "YELQb4voKGuajcn5ebCRJQAAAA0"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
  7. [Fri Mar 05 16:44:31.316626 2021] [:error] [pid 32070:tid 129807172638464] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Warning. Operator GE matched 7 at TX:inbound_anomaly_score. [file "/dh/apache2/template/etc/mod_sec3_CRS/RESPONSE-980-CORRELATION.conf"] [line "87"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=5,XSS=0,RFI=0,LFI=0,RCE=10,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [ver "OWASP_CRS/3.3.0"] [tag "event-correlation"] [hostname "swiki.fancruft.com"] [uri "/api.php"] [unique_id "YELQb4voKGuajcn5ebCRJQAAAA0"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
  8. [Fri Mar 05 16:44:33.121312 2021] [:error] [pid 32070:tid 129807834949376] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\{|\\\\||\\\\|\\\\||&|&&|\\\\n|\\\\r|`)\\\\s*[\\\\(,@\\\\'\\"\\\\s]*(?:[\\\\w'\\"\\\\./]+/|[\\\\\\\\'\\"\\\\^]*\\\\w[\\\\\\\\'\\"\\\\^]*:.*\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]*\\\\\\\\)?[\\"\\\\^]*(?:m[\\"\\\\^]*(?:y[\\"\\\\^]*s[\\"\\\\^]*q[\\"\\\\^]*l(?:[\\"\\\\^]*(?:d[\\"\\\\^]*u[\\"\\\\^]*m[\\"\\\\^]*p(?:[\\"\\\\^]*s[\\"\\\\^ ..." at ARGS:wpTextbox1. [file "/dh/apache2/template/etc/mod_sec3_CRS/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [id "932110"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: \\x0d\\x0aCopy found within ARGS:wpTextbox1: = Oron Zai Expanse =\\x0d\\x0a*Medieval Engineers Planet\\x0d\\x0a**Triton - Icy, snowy moon\\x0d\\x0a*Kyth - The Planet designated as EHD-1, or more commonly known as Kyth, is a scorched desert world.\\x0d\\x0a*Frozen Paradise - Paradise used to orbit a large gas giant, but recent unknown events have shifted its orbit beyond the gas giant and into its own orbit around the sun. Due to not being as close to the sun as before, the entire planet entered a pla..."] [severity "CRITICAL"] [ve [hostname "swiki.fancruft.com"] [uri "/index.php"] [unique_id "YELQcIvoKGuajcn5ebCRKAAAAA8"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
  9. [Fri Mar 05 16:44:33.126870 2021] [:error] [pid 32070:tid 129807834949376] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Warning. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})|[<>]\\\\(.*\\\\))" at ARGS:wpTextbox1. [file "/dh/apache2/template/etc/mod_sec3_CRS/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: >(dx11) found within ARGS:wpTextbox1: = oron zai expanse = *medieval engineers planet **triton - icy snowy moon *kyth - the planet designated as ehd-1 or more commonly known as kyth is a scorched desert world. *frozen paradise - paradise used to orbit a large gas giant but recent unknown events have shifted its orbit beyond the gas giant and into its own orbit around the sun. due to not being as close to the sun as before the entire planet entered a planet wide ice age freezing all the ocea..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/88"] [tag "PCI/6.5.2" [hostname "swiki.fancruft.com"] [uri "/index.php"] [unique_id "YELQcIvoKGuajcn5ebCRKAAAAA8"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
  10. [Fri Mar 05 16:44:33.127963 2021] [:error] [pid 32070:tid 129807834949376] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Rule 760f599974e0 [id "932140"][file "/dh/apache2/template/etc/mod_sec3_CRS/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "413"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "swiki.fancruft.com"] [uri "/index.php"] [unique_id "YELQcIvoKGuajcn5ebCRKAAAAA8"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
  11. [Fri Mar 05 16:44:33.153455 2021] [:error] [pid 32070:tid 129807834949376] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Warning. Pattern match "(?i:\\\\b(?:(?:m(?:s(?:ys(?:ac(?:cess(?:objects|storage|xml)|es)|(?:relationship|object|querie)s|modules2?)|db)|aster\\\\.\\\\.sysdatabases|ysql\\\\.db)|pg_(?:catalog|toast)|information_schema|northwind|tempdb)\\\\b|s(?:(?:ys(?:\\\\.database_name|aux)|qlite(?:_tem ..." at ARGS:wpTextbox1. [file "/dh/apache2/template/etc/mod_sec3_CRS/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "99"] [id "942140"] [msg "SQL Injection Attack: Common DB Names Detected"] [data "Matched Data: NorthWind found within ARGS:wpTextbox1: = Oron Zai Expanse =\\x0d\\x0a*Medieval Engineers Planet\\x0d\\x0a**Triton - Icy, snowy moon\\x0d\\x0a*Kyth - The Planet designated as EHD-1, or more commonly known as Kyth, is a scorched desert world.\\x0d\\x0a*Frozen Paradise - Paradise used to orbit a large gas giant, but recent unknown events have shifted its orbit beyond the gas giant and into its own orbit around the sun. Due to not being as close to the sun as before, the entire planet entered a planet..."] [severity "CRITICAL"] [ver "OW [hostname "swiki.fancruft.com"] [uri "/index.php"] [unique_id "YELQcIvoKGuajcn5ebCRKAAAAA8"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
  12. [Fri Mar 05 16:44:33.169372 2021] [:error] [pid 32070:tid 129807834949376] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Rule 760f5ab29168 [id "942250"][file "/dh/apache2/template/etc/mod_sec3_CRS/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"][line "292"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "swiki.fancruft.com"] [uri "/index.php"] [unique_id "YELQcIvoKGuajcn5ebCRKAAAAA8"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
  13. [Fri Mar 05 16:44:33.198168 2021] [:error] [pid 32070:tid 129807834949376] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Access denied with code 418 (phase 2). Operator GE matched 7 at TX:anomaly_score. [file "/dh/apache2/template/etc/mod_sec3_CRS/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "150"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "swiki.fancruft.com"] [uri "/index.php"] [unique_id "YELQcIvoKGuajcn5ebCRKAAAAA8"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
  14. [Fri Mar 05 16:44:33.199102 2021] [:error] [pid 32070:tid 129806863333120] [client 70.241.96.96:59095] [client 70.241.96.96] ModSecurity: Warning. Operator GE matched 7 at TX:inbound_anomaly_score. [file "/dh/apache2/template/etc/mod_sec3_CRS/RESPONSE-980-CORRELATION.conf"] [line "87"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 15 - SQLI=5,XSS=0,RFI=0,LFI=0,RCE=10,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 15, 0, 0, 0"] [ver "OWASP_CRS/3.3.0"] [tag "event-correlation"] [hostname "swiki.fancruft.com"] [uri "/index.php"] [unique_id "YELQcIvoKGuajcn5ebCRKAAAAA8"], referer: https://swiki.fancruft.com/index.php?title=Talk:Space_Engineers&action=edit&redlink=1
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!